{"ip":"181.63.150.154","total_events":83,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["83 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,465 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,465 bytes sent","bytes_sent":17465,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T13:35:09","last_seen":"2026-10-05T15:13:41","events_24h":83,"events_7d":83,"geo":{"country_code":"CO","country_name":"Colombia","region":"Cundinamarca","city":"Zipaquirá","lat":5.0184,"lon":-74.0079,"asn":10620,"org":"Telmex Colombia S.A."},"source_domain":"dynamic-ip-18163150154.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T13:35:05","last_seen":"2026-10-05T13:35:05","recent":[{"timestamp":"2026-10-05T13:35:05","port":39131,"src_port":17436,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��A�d�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000a�\u0000\u0000","payload_hex":"4100b5ee41b964ad000000000000000061bc0000","sni":"","session":"8a67434b-ab23-4fc1-9ab6-02f17788f88e","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":83}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":83}],"recent_events":[{"timestamp":"2026-10-05T15:13:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-iI6epxHIWpYt","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d694936657078484957705974","method":"","user_agent":"","ja3":"","session":"fa5ebd0f-50f8-44ce-9507-008c3b97efa5","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4d68682563017dea","strings":["BitTorrent protocol","<-qB5230-iI6epxHIWpYt"]}},{"timestamp":"2026-10-05T15:12:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�������u�\u0005�t��.K�T�.�Y$w���\u001a�\u0004s���\u001b,�Ω%���\u0007r\u0006�����\u0000�y\u0003�,��E޺)���ϣI�\u0012#G�MA;?\u001c�r\n��h[pE>q��\u0000;QH�#��D�aV����\u001e\u0014��p��|-\u00049�?�w\n\t�X\u0007�<�QZ���X�x�\\\u0012Z;�˺C��ĩK雴\u000f\"�E��\u0005�\u00065��e�S�P��_�.0O�#Θ>8u��t�,\u001fgη��\u0017@\u0002up�\u000f\u001a��(\u0001�\r�Ѯ-�����׍r!\u001e��\u001f\u001a����Z���l2r�J\r\u0002� �v�u�\u000f�����6NW�\u0003��\\ۛ\u0005@��\u001d�\u001f���M�o\u0003�\u0007\u001c��oJ\u0013�$�ҝЏL{��q\r6��-\u001bFB`�R�����-DpnC�������\\��P��|\u0016~�ʩ���ٰ9\u0005ף\u0011���_+:\u000b����=��ȓl���|ȧxj@e���/�8�L�y�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e8c84372-5d8f-402b-a49c-da0026277356","seq":1,"duration_ms":100,"bytes_in":394,"bytes_out":14,"enriched":{"digest":"7224ed42ef15c16d","strings":["MA;?","h[pE>q","-DpnC","xj@e"]}},{"timestamp":"2026-10-05T15:11:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-BGgLO6WmM9xF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4247674c4f36576d4d397846","method":"","user_agent":"","ja3":"","session":"33cffdac-9bfe-4998-bfd0-fbe2f8ae3045","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b555457a263448bf","strings":["BitTorrent protocol","<-qB5230-BGgLO6WmM9xF"]}},{"timestamp":"2026-10-05T15:10:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����\\��c�:/��K���\u0019�\u0015\u0017cx�e58��_��\u001c�\u0012\u00110K�\u0017\u00193�\u0001T\r��V<<;�\u001e%9�u�/�0\f1f�aذ���7�m\u0005�z\u001a@�Ƙ�\u0005s+����_�S\u0001��","payload_hex":"c0b19e8b5cffd463a03a2fb5ac4b95b4f919ba15176378ea653538a98b5fe5991cda1211304bc9171933b701540d9b97563c3c3bb31e2539d9759a2fac300c3166a361d8b0becbf137966d05f27a1a409ec6988105732b8ecde6885ffe5301bca9","method":"","user_agent":"","ja3":"","session":"90589774-e469-4121-8095-e1e322627efd","seq":1,"duration_ms":100,"bytes_in":97,"bytes_out":14,"enriched":{"digest":"312fadb07c01d6b3","strings":["V<<;"]}},{"timestamp":"2026-10-05T15:08:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-eXXg.70A)I2c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d655858672e37304129493263","method":"","user_agent":"","ja3":"","session":"3c865211-14ef-4f7c-a9e2-cdaa357fc291","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0aff077d7d84dbee","strings":["BitTorrent protocol","<-qB5230-eXXg.70A)I2c"]}},{"timestamp":"2026-10-05T15:07:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ρ���R({HMuԍ#�8t{��KW��\u0007�c\t:�Ly��\u001aєǪ�U����/\u000f3yو\u001d�o 4�(\u0019B\"R\u0018,}Ld�Z��\"���˛�\u0015�ɢ\u0016\b\u0018}�u�\u0001�3��u���CK�\u0002;~H���/\u001el�Z\\?T��K��\u0007OP��>����?�o�����S\u0011��\u001fw��å~�\u000f�\u0018�n@��7I�wI+$\u0003�L\u001f9�2�z�w\b���/��\u0017\"�t\b\t�2|_�I�W����\u000f��Ce�ck,���Y��Z�x(� G��B\u001bm�5�^8�\u0018�C��PM���n��r\u0007\tcz��JZm��\\��\u001azX�״��Z&GP}��oă\u0010�3\u000bݣk��\t�Gi�q�Z��E^̵�'QG�Imxt*��J�ӫkZ���R���X��\u000f������\u0002","payload_hex":"cea1c2f58752287b484d75d48d23a438747b93ea4b57c2f307ee63093adc4c79b6b71ad194c7aad455a5f2aad62f0f3379d9881da16f2034c428197f422252182c7d4c649b5af6a622a4c0d4cb9b98159fc9a21608187daf75f001d533873c75b802928bc78cb9b9f1ce16e9c00a71e9281c80834fbdb5e1656414a9365b078581dc1539364081bf133bdb74242bcbc46579e6256a330874d51cac1b3ab7621d2dd8a4e36417b893b6b9b0f09b77844f3fc4efd2d0fe8ca8d4f70a6850691599a9abe8632242514ff904992a45f6ea50b517ca90232332b1fa953ea875b1a9b6434bed023b7e489abbee2f1e6cde5a5c3f5488b24bd7ef074f50e5bc3ef2aee5bc3fda6f9e9c86c08e5311c8ed1f77afd1c3a57e8b0faa18d86e40c3e63749ae77492b2403d84c1f39d832ec7aa97708e0ffad2f8da517228b740809be327c5fca49dc57fca1b0860feca04365cc636b2c9b8be45998fb5a7fd978288620479cf9421b6d9135df5e389d18ea4397fd504df397df6eb8d5720709637affcb4a5a6df7ed5cf3cf1a7a58b7d7b4fc825a2647507dd9d57f6fc48310f2330bdda36bc4f209a64769f671ee5a93b2455eccb5e5275147e5496d78742ad6e34ae8d3ab6b5a86b59152867febe558fae20f86bbe194f9b602","method":"","user_agent":"","ja3":"","session":"308a1f3f-8519-4fda-8448-7a684aa63e2f","seq":1,"duration_ms":100,"bytes_in":469,"bytes_out":14,"enriched":{"digest":"cfc7dd9d3d014f1f","strings":["R({HMu",",}Ld","c\"BQO","Z\\?T","wI+$","Z&GP}","Imxt*"]}},{"timestamp":"2026-10-05T15:06:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-UO!ovCNdt52l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d554f216f76434e647435326c","method":"","user_agent":"","ja3":"","session":"53f9950c-9194-4d30-98af-a6db7ce56a19","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"706e2b101deac817","strings":["BitTorrent protocol","<-qB5230-UO!ovCNdt52l"]}},{"timestamp":"2026-10-05T15:05:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E����\u0013����X|Y�݂\"r�N&\u0019�<�y��h�\n�Ĭ������i�5W5�������\u0017���l��\u0002�����i���5��y�~�����|&l��\u0013\u001ea\u00000Qg�1t�\u0000\r��,��L\u0014j�Q\u0010< �N&����L��BN�}/��w�ƕ�b\u0010ˎ/�1W@\u001f�u�\u001aJ\u0019ӈ*�O��= �}%_J�R\"Y��g\u001e۴��^9������t�cW\u0002\u0015s+\u0007\u0017\u0019g��M��|�\u0018[\u0010����7�\nF���ï\u0003����\u0014\u0017�0��bY�n�\u001dsQ�x��*L��NG؁!�B��M\u0016�\u001b9X�ha����!\u0003�d354�\u0012Ls�8ϰPKc`\\��>�5�\u001d�\u0012�U(�w�_\u001c�x}\t$���\u000b� ���j��i���Z�Jh�X�\\�\u00112R1\u0011p�#�i\u0004+�\u0019�7���D\u0014/,݌E\b��6����U��si�3\u0013�+�򋗑��Ҁ'�,S\"|O\u0005�xD�gO�K��\u001c6dG�\\%���p6����6���+�}�Kg��-��\u0007�T�u w���\u000f\u001c��D","payload_hex":"f7c1a4381bddad506dd0989d8a259e5e3d78632ab7ef7152fc315cf3e17105fe58427741b41240108f1c07127e650b7e177a8fe37deced394b0ff29aa7cdb5d8a494f5026994fc2ae0bdcd5a9de89a7cb918bc165726f51609795ad1df9db533c433eae18bd0f7e94833db0aeada9f0c10a6f26c752a98aea2f3344f5e84e735725963bcab75a264bae738522317f2f419636a252088068473b13e3313a92bc7f28b9791e180d28027bc2c53227c4f05cb7844f0674fba4be1de1c366447ea5c25a9d8e17036b098fae536e39dc12bf67dc94b679cce2dd7d807ed54c5752077cbded90f1cf9e844","method":"","user_agent":"","ja3":"","session":"515b5588-49fc-432d-9525-7a1a479e00a7","seq":1,"duration_ms":100,"bytes_in":232,"bytes_out":14,"enriched":{"digest":"07585d7ffafa4828","strings":["^=xc*","XBwA","5rYc",",S\"|O"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:16.004832+00:00"}