{"ip":"181.63.27.40","total_events":309,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["309 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 63,522 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"63,522 bytes sent","bytes_sent":63522,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-25T22:20:36","last_seen":"2026-08-31T02:51:26","events_24h":0,"events_7d":0,"geo":{"country_code":"CO","country_name":"Colombia","region":"Risaralda Department","city":"Pereira","lat":4.8142,"lon":-75.6946,"asn":14080,"org":"Telmex Colombia S.A."},"source_domain":"dynamic-ip-181632740.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":309}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-25","count":79},{"date":"2026-08-26","count":125},{"date":"2026-08-30","count":51},{"date":"2026-08-31","count":54}],"recent_events":[{"timestamp":"2026-08-31T02:51:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<MG-3.01.4333yZMMdA48","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4d472d332e30312e34333333795a4d4d64413438","method":"","user_agent":"","ja3":"","session":"dcddd503-8d1f-41e3-8f29-70654ba771e3","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d18b73826f2e4ca8","strings":["BitTorrent protocol","<MG-3.01.4333yZMMdA48"]}},{"timestamp":"2026-08-31T02:49:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"2��A!���$^J�o3�ha��ph\r��\u0002U�����\"�g���8a?�p\u000b<zg�XBVnO�^\u0002D0,��\u0000\u0002\u0014�_\u0001��4���JW�\\�ߗa\u0018\u001d\u0012�\u000f���~�]zf��X���DžTZ�;BW�l�\u001a�R���>]5���0T|��.���o���u�3\u000b�<t1����J���\\�q�5L8\u0007mQ�X��/2�P��\t�o?'�\u0016mx�W���A��;q�\u0013��Q\u001d\u001b%������58�f�M�Lz�A���Pl\"��e�:�\u0007�\"ߞ�P2w�U\u001d�*O\u001bk�\u0007��?�hӺ��\u0016�mQit\u0019{\u0013\u0003�_鏆K\u0014�\u0004\u0001qUZ4$Ge�1-�\bs�:���y;=]P�|j��-\u0012���T","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b79e9ddb-6a7c-47dd-b239-17117b980172","seq":1,"duration_ms":100,"bytes_in":312,"bytes_out":12,"enriched":{"digest":"db7e79af0d322957","strings":["XBVnO","mQit","qUZ4$Ge","y;=]P"]}},{"timestamp":"2026-08-31T02:46:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<MG-3.01.4333BPfm02tu","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4d472d332e30312e343333334250666d30327475","method":"","user_agent":"","ja3":"","session":"f0667e39-4eda-4244-8adf-4982a620a6b0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f94fbd0958127d0d","strings":["BitTorrent protocol","<MG-3.01.4333BPfm02tu"]}},{"timestamp":"2026-08-31T02:44:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"M\u0003��(�r�)A���^�a�OL��j`pI��(\u001b��eql�3XaZv��Q߻XQF�1\u0012��k4���\u0016���\r�\u001aܢߓ������G���<6v|:�&�d\u0018�e�Q��z\u0001��\b9�G\u000f\b\u0011�0\t2j�t���~=�U���\u0005��0��;�^H\u0011����(�mK�\u001c�u����P\u0011��\u0015&󬰫,\n��\u0015�O�\u00176[は��(��b>�}0ͽ�\u0001]&�~�&���\u0003s�`O�@�Z\u0018F�\u0013v�qx֠�0\t�Q^O��\u0001+i","payload_hex":"4d03f3a2288a729d2941f5aaeb5eb861ad4f4cec9e6a607049d7ed281bc7f465716cf43358615a76d0f951dfbb585146ff3112aea76b348cc9da16bbdee10dce1adca2df93e2edc3c0befa479be6ef3c36767c3af426b86418f6658251e3ac7a01a2ea0839d9470f0811bf3009326ac07488b2b47e3dfb5591c7c005b0f930ab953ba05e48118ba2b58b28a36d4bb01cdf7586aa81d95011edc71526f3acb0ab2c0ab0f6159f4fb417365be381afe7ea28a0fd623eab7d30cdbdd0015d26d07eaf268499870373a9604fe440da5a1846d41376fa7178d6a0e23009c7515e4f8dd4012b69","method":"","user_agent":"","ja3":"","session":"50e88aaa-6e04-47e9-99e1-c1ec39f91bca","seq":1,"duration_ms":100,"bytes_in":228,"bytes_out":12,"enriched":{"digest":"a85a60f5d96f0b08","strings":["j`pI","3XaZv","<6v|:"]}},{"timestamp":"2026-08-31T02:42:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<MG-3.01.4333M4UML)F0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4d472d332e30312e343333334d34554d4c294630","method":"","user_agent":"","ja3":"","session":"38685ced-2980-4323-808b-428f36687c8a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"44de5d3495fc56d7","strings":["BitTorrent protocol","<MG-3.01.4333M4UML)F0"]}},{"timestamp":"2026-08-31T02:40:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001a�=��'*H!enO��\u000e,[\u000f\u0002�����[Ӟs\u0006���\u001b���f�\u0004�S���vF\u001fO��\"�pԓ\u0018�c�\" ٭�������\u0011���\\�\"7\u0007�\u0003I�\u0002��*՝�Sយ�h陳��$��I\u0018���:h9A�B�d �����E4G;�ݢ�N\u0015:{v0;�fڀ�\brs\u0010��CTVl\f���5�5b��\u00182[����}}�jQ�7�y?d���\u000b2�)�'��P��>����So�wnŒ��Unb\u001aj/t��\u0015��\u0000���\u0012���\u001es�h��\u0010\u0016�r\r!\u0018X��G-�R�\u0010]��-�s\u0004\u0000y\u0019m�F\u0007Lr��l5�a\u001b�\u0001Ft%\u001a�c����/��~�[͟�{����(�\u0006��*�XcB�*\u001f\u0003��~��R�`�݁��\fǡ�������_�\u0004[�$\u0005$��a�(����W\u0018\u0019�\u0006,\u001b��\u001b�d{a��}��l\u0002�\u0018�[��{r#���@�_ӽ6\u001f�v�\u001b,R�����~ h5�ϽI��A�L7��06��\u001dg�P\u0007\u001c<\u0007�T��L��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8528fd00-6cd9-4de0-a59e-43c7bf71ed2a","seq":1,"duration_ms":100,"bytes_in":444,"bytes_out":12,"enriched":{"digest":"dbb6a920f9bd17cb","strings":["'*H!enO",":h9A","E4G;",":{v0;","CTVl","~ h5"]}},{"timestamp":"2026-08-31T02:38:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<MG-3.01.4333QAqawBzk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4d472d332e30312e343333335141716177427a6b","method":"","user_agent":"","ja3":"","session":"7ec2b35b-3537-47b0-9e0d-7693753fdeab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"8935fc73af787305","strings":["BitTorrent protocol","<MG-3.01.4333QAqawBzk"]}},{"timestamp":"2026-08-31T02:35:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"#���.\u0016�\u0017\u000f<G-�p���«���\u0000�\n�_\rc�\u0010�`\u0006F�\u0011�~>�g\\\u0002����~\u0007��N&�7U��O�`�LJ�V�S/)���\b(滬ۉ�.[�yN*+|*>�\u0012\t�g�R���X�Gi\u0012�\u0013�Q\u0014��8��=3GԸCpd�����\u0016�","payload_hex":"23b4d9fa2e16d7170f3c472dab70869eecc2abcdefe300bf0ac15f0d638110c9600646c111cf7e3eeb675c0281e2e8d47e07a0894e26d73755b8b64f9b60db4c4ada56e1532f2992a2f00828e6bbacdb89a52e5bc3794e2a2b7c2a3ed11209a267e752edf3d458c0476912b413e751149581389f803d3347d4b8437064af84ede4f21697","method":"","user_agent":"","ja3":"","session":"ddd4f7cb-f577-4980-bb04-096199211c0c","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":12,"enriched":{"digest":"6b5b86f39af595b1","strings":["yN*+|*>"]}},{"timestamp":"2026-08-31T02:33:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<MG-3.01.4333q~iMEiN8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4d472d332e30312e34333333717e694d45694e38","method":"","user_agent":"","ja3":"","session":"f99ae692-ad08-4200-b135-60841161f79c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a3318f3ebb201dc0","strings":["BitTorrent protocol","<MG-3.01.4333q~iMEiN8"]}},{"timestamp":"2026-08-31T02:31:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"l��ӑ�\u001d\u0002��\\�^~�\u0011�ޯT\u0015�\u001f\u0012<Py��# \u000bb�e���`1y��1\u0013>�\u0016+�1\u0012�M\u0006Х�xn):�\u0003���Bd��dK$\u001fB�\"\u0002\u0016�4�!\rg��F�/\u0014 \u0014ړ�\u0006�2���S\u001a;Wq\u001e%ߺG","payload_hex":"6c87d0d391db1d02e7fb5cfd5e7eb71192deaf5415ca1f123c5079f8b523200b62a765a7b68c603179bc8c31133eba162bce31129b4d06d0a5fc786e293aae039b8bca4264a18f644b241f42a7220216d034b5210d67c0ff46e22f142014da93aa068032e8dcc8531a3b57711e25dfba47","method":"","user_agent":"","ja3":"","session":"7dbcbdb4-2dc6-4e26-9e37-b0960abc57c5","seq":1,"duration_ms":101,"bytes_in":113,"bytes_out":12,"enriched":{"digest":"0e90a82b36cd6dbb","strings":["xn):"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-20T16:33:35.838266+00:00"}