{"ip":"186.102.120.145","total_events":244,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["244 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 51,311 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"51,311 bytes sent","bytes_sent":51311,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T05:29:17","last_seen":"2026-09-30T11:00:09","events_24h":0,"events_7d":244,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.6913,"lon":-74.032,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":244}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-30","count":244}],"recent_events":[{"timestamp":"2026-09-30T11:00:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��)�\u000f�\u001f2^�\t\n\u000e���O\u001e�f�f�\r��\u0012��䡬(&\\��_���\u0000�=^\u0001\u0004#�\u000e�=��\u0015*\r޻'�����2eĚ�m�>��K�\u001e�\n.�yB�����gE\"�]M���G�\u000b����\n�Iq\u0004\u001c\u001a��o��A��\u0005yĤ��PS��u�\u000e�N���&�Jc�nY��\u00182���Q�:x\u001bQ���1�4�\u001a���\u0006\u0005W��$e��5���ʘB�Ǽ~\u00071l��ԜT�S�\u0013d\u000f4�\u001aM��+�ӑ���ƛ","payload_hex":"d9f6298e0fb01f325eab090a0edaf1af4f1efa66d466b50de4d212b38ce4a1ac28265ce5865facbba500b23d5e0104239c0ec33d9dc3152a0ddebb27f687ef87e23265c49ac26df43eba924b971ee50a2eb879428ecfdbd7fe674522d95d4df2ed80478f0ba79585c50a884971041c1a95ff6fd0cb41f3d10579c4a48e865053d6d875e80eca4eb2a3f226ac4a63ed6e59f5cc1832a2aadf7f517fb13a781b51b1b6ee31f834991aeabbc1060557eeaa2465e09735aa7ffde4ca9842b2c7bc7e07316ca390d49c54d353fd13640f34c71a4dafc42b96d391c8cefac69b","method":"","user_agent":"","ja3":"","session":"4f82f5d1-aa2f-4080-be38-2c92edb98947","seq":1,"duration_ms":101,"bytes_in":221,"bytes_out":15},{"timestamp":"2026-09-30T10:58:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-p!1!bPt3~fRM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d70213121625074337e66524d","method":"","user_agent":"","ja3":"","session":"a46817ba-1f6a-4b68-9fb5-4c4fd5f5229a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"09e645af67209d96","strings":["BitTorrent protocol","<-UW1605-p!1!bPt3~fRM"]}},{"timestamp":"2026-09-30T10:57:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�/�X\u0005��]�!��f��]V�u����\u0016h'1+%\u0017�o�ۍ�\u001f��]���\u00195m�S�Ԗ����\r�*�f�?��p�\u0005�\u001dH#:0��%����\u0014�$B\u0012ﯗ����S\u0018�-����&e3�\u0015S�4�\u0002��_\u000b�.�+�)��S\"�5�\"qC*\u0001\u0005�N�(0@�C��f��֞J��a\u0002%�\u000ex����F �\u0002R\u0010M�1ߓ��>N~6^󼝷.SW��!�\u0006$L�����p!���\u001d2�� ����i\u001d֞��<���b�B�l\u0012���\u00054\u0001^K�_ \t}���E祝�\u001a\u001b\u0010󘒨��ݗ:=R��k��Bi��n��\u001a��cb�\u0017ޠ�1!��$\u0013\"��`g9\u000fw D\u0013\u001eF�5��Hf�\u0012\b1gj.��\u0012����\u0010\t�{j\u0015r��R)w�����*�P[;:�5,\r�͹#�����n����O\n�Ʃ����#�?N*=�S�c['��5H���b��Uw �\u000e�\u0015�6�\u00155�u��-��m\u001a�q��{\r̃��9\u001bF\"Q�U\u001e��6��h�r}B����O�r�ϕ\b�\u0003�=3�n��R,����%����{��ob:�P�\u000b�%]�,wfi�-&-X@�b�\u0017��'�QKԿ�E-4/7�����=�e�V�c7��[�;�X�\u0004�1�,.��^�V\nj��\u0005�l��bC�;X&&\u000f�\r�=��'�\u001b.��b�q��o�ݐ��Փ��G������","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c1a8f625-d019-4026-98b2-43409f3792b0","seq":1,"duration_ms":100,"bytes_in":603,"bytes_out":15,"enriched":{"digest":"e4ff332f4cf52b07","strings":["h'1+%","H#:0","\"qC*",">N~6^","1gj.","P[;:","?N*=",",wfi","-&-X@","E-4/7"]}},{"timestamp":"2026-09-30T10:55:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-k1GL6N*3eC.J","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6b31474c364e2a3365432e4a","method":"","user_agent":"","ja3":"","session":"ec2eaa26-b7a3-4059-aa3e-e8206d6c22e1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b2051cf94215261b","strings":["BitTorrent protocol","<-UW1605-k1GL6N*3eC.J"]}},{"timestamp":"2026-09-30T10:54:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���s\u0010�ֹ\u001dN\tq��t�����zO*��yP>��O5M�����\u001d�~\u00112����k?8�f�+�(+hnԕ��[��ٮw�n�.B��g�\u0004Nd�IzYs�'�x���V��̵\u0018�����Z��\u0013���IJ�l��K�&b��^\n���\fwMҦ(���# *u���\t.�v�\u0019�&vN�hg��l\u001fc�jU�\u001en�\u0004j\u0012h7�,����\f�)��i]\u000e@��\u001d��k2U�W{�t���yՎNPߞH�\u0000�}��Z��CE��5���SIl}\u0003������<���U�����3\u0010����p���#n~\u0010�v�\\w\rhǂ2`-�Q\u0012�M#�Llrgq+Y\\^!\u0006f���tm�\u001f5\u0012x���,V+}�Ȃ��\u0011�^\u0006�����!��g�����;�� Z<��/\t�H�zb��\u000b���YF\u0006\u0015��m��\"҆��g�W\u000f.\u0010�i�24|\u0016�1�e\u0018��s�Y�Ka��\f�4�\u0015cp���ێ���uY��?\u0010T%��`��\u000f[��l��\u001d�CD\u0006�������B\u0003�|�ND>�p\u000bP���\u001c�\u0012݇�\u0012��\u001c\u0005�!D\u0005��\u0019\u0007.�\u00101'\u0004��J�X���C��H�`H\u0015]B�$\u0005�e�h��9E","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"97990049-5d79-4745-a5dd-8d8785a8e91c","seq":1,"duration_ms":101,"bytes_in":517,"bytes_out":15,"enriched":{"digest":"9633acc48a919f1a","strings":["(+hn","IzYs","# *u","SIl}","Llrgq+Y\\^!",",V+}"]}},{"timestamp":"2026-09-30T10:53:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2by9fQLLcFvg","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3262793966514c4c63467667","method":"","user_agent":"","ja3":"","session":"48f20a4b-2356-4fcf-8980-9cb1a85e3bdf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"df4e9ba5297663cf","strings":["BitTorrent protocol","<-UW1605-2by9fQLLcFvg"]}},{"timestamp":"2026-09-30T10:52:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"9#�<ʠC=��}�7��\rq7*<\u0017N�%s��НJ�P��\u001ctFPY\u000b�ݔ�a^����1o��d����]g��\\�ce;�\u0004�:<.2�7\u0006\u0010(^y8�E�������\u0013\u0015Q7�Äf\u0011���R5�2\u0005�L�4��a��Q��9\"�,t��\u0005uE7�H�D:���cg��4ѼE�_�Sm4\u0016{��o���7Sj���R�D�$�\u001dҢ�.�T\u000f\f{��ӓ\u00144��>������)7�\t��Y�\u0012��_�k�\u0000�\u000b[�\r����F�#������[$�щtS\u001c\u000bަ�\u0014ȁ\u0011���$�\u001f\u0015���\u0011K\u0003���7Z����\u000b'�爾��=�\u0014EktZُ��p\\��2�r]��\u001c|��\u0007�\u000e-]kƈ\u0004��ӽ\u001b^\u0014�Y\t\u000b\u001dcO5J�e�Y\u0011]�)N6g��$Fh���6����~E�� ^�ʀ��Y�ԄJ��\u0002�S�gՎO\u0016��\u000e[X�\u001d�\te����+O*��T\u0010ű\u0014�JY�����6�0S��7��zA�\u001ds�W\u001b�z�u�\u0010P_�Ô�S��$\u0005�9�\u0007]�����Џh\u0010c�)t\u0013\u0004g��,ʓ�� lA�����\u000e\u0012;�.h��m�\u0017b�\f�0�Ǿ^������ļP�\t�\u001b$4�t\u000b֟f�=\u0005���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"34b95b5d-e0a8-44e6-b080-d52c30953f4b","seq":1,"duration_ms":100,"bytes_in":531,"bytes_out":15,"enriched":{"digest":"4f78c7bfc2643162","strings":["q7*<","tFPY",":<.2","(^y8","EktZ","cO5J",")N6g"]}},{"timestamp":"2026-09-30T10:50:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-x*OT-yWw5fD~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d782a4f542d7957773566447e","method":"","user_agent":"","ja3":"","session":"0e5d1f92-f9e6-4598-8ba0-56bd53bfab10","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1120c58d31c3f031","strings":["BitTorrent protocol","<-UW1605-x*OT-yWw5fD~"]}},{"timestamp":"2026-09-30T10:49:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015�\u0010��*Qoz��+�\u0001\u000b?U\\R�d�����?p��\u0013B9����!�g�J�\u0001���X\u000ed��OY��MM��R����*�\b�JZ��w\u001ei�\u0017\">,MZ\"/t'\u001a}\u0006��\u001fv�����꽁VF]`�|E���G�H�\\���}�#Qti�wGc�\u0019","payload_hex":"15ed1084f22a516f7a91f22ba8010b3f555c52d864b2e6f4f1f93f70f69b1342399ed3fae2218267e24a9001decfee580e6494bc4f59efb94d4df8ce5294c1fbde2a9908b64a5ab2b3771e69e417223e2c4d5a222f74271a7d06988f1f767faa878881a7eabd8156465d60b47c45a4a9a747bb48835cf387b27df323517469fd774763cd19","method":"","user_agent":"","ja3":"","session":"0ec53ce2-dc2b-4ddd-ad28-a037aaef701c","seq":1,"duration_ms":100,"bytes_in":133,"bytes_out":15,"enriched":{"digest":"8ce3a8bf6719c121","strings":["*Qoz","?U\\R","\">,MZ\"/t'","VF]`","#Qti"]}},{"timestamp":"2026-09-30T10:47:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-ic.dwgvu3bZT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d69632e647767767533625a54","method":"","user_agent":"","ja3":"","session":"7d20a50e-23b9-47bf-b1ce-45a72fd995bc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1a19699569cda55b","strings":["BitTorrent protocol","<-UW1605-ic.dwgvu3bZT"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:50:11.284784+00:00"}