{"ip":"186.102.30.54","total_events":49,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["49 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 11,034 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"11,034 bytes sent","bytes_sent":11034,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T13:18:05","last_seen":"2026-10-05T14:41:04","events_24h":49,"events_7d":49,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.6913,"lon":-74.032,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T13:33:13","last_seen":"2026-10-05T13:33:13","recent":[{"timestamp":"2026-10-05T13:33:13","port":39131,"src_port":43265,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�k�m\\{\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0018\u0000\u0000","payload_hex":"4100a46b8d6d5c7b0000000000000000a1180000","sni":"","session":"2eaf4886-0ba6-41ba-8b4a-944dec86addb","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":49}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":49}],"recent_events":[{"timestamp":"2026-10-05T14:41:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yH8pXgKVpLxQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7948387058674b56704c7851","method":"","user_agent":"","ja3":"","session":"5f6f102c-df7a-4beb-8b93-1eb87c16098a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"539f9fc9f534b380","strings":["BitTorrent protocol","<-UW160N-yH8pXgKVpLxQ"]}},{"timestamp":"2026-10-05T14:38:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"?����zȮ��\u0010\u0019\u0006#�h\n*�s.ýz\u0016\u0000�;ܭ\u0000\u0017\t9�K!��Nz�U\u000f���\f$E�4��ݎ�J\u001f�\u0018h�蕟�U�=#�\u0004����;�7���\u0019�\u001e\\�\u0005{�c��\u0013\u0005�ɹ\n|P\u0007(��\u0017g\u0004�����$\u00008\u0014�","payload_hex":"3f82fefcef7ac8ae869210190623c7680a2a91732ec3bd7a1600b83bdcad007f170939c04b2187db4e7af1550ffbf6b30c2445a034e3fbdd8eb74a1f861868d7e8959fb255c93d23aa048da984843bee37fc8cf219a11e5c90057bf763a3af1305b7c9b90a7c500728e8bc1767048a8bbbabb024003814f9","method":"","user_agent":"","ja3":"","session":"67d6dade-abe4-41fe-8de5-48fc476a336b","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":13},{"timestamp":"2026-10-05T14:36:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YEpl4yL*xN_B","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5945706c34794c2a784e5f42","method":"","user_agent":"","ja3":"","session":"1c02ab3f-1765-4adf-ab75-048c5d5e16c8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d04ecbdc7dcf7d8e","strings":["BitTorrent protocol","<-UW160N-YEpl4yL*xN_B"]}},{"timestamp":"2026-10-05T14:34:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E\u001e�V\u0003s�\u0007�7�)Ƃ�Of,\u0000��au�2/\u0003\u0012=��\\�ݺ<+��\\��� ��\n��;G��6�d��E�Z뚩�����`���ě�~�y�Df|\u0015�~�\u000fR\u0014�(���\t\u0005C*\u000e�AV0�\u001ae�8*f|������\u001b���F^�b%��\u000f�#ܫ,\u0005\u0007T[tx�\u0012o�\u0018�\u0002\u0015d��ؐכ���j�Mt\b\u0012\u000f�\u000f@\u0011f>\u0011;@mc'�\u001a�\f�Z����J���w&\u0013��\u0013�M�\u001b��_z(�\\�5��L��Y$b��'�a����hy�\u0007�ڒ�s��\f��9�\u0007\u000f�J���i��vТ�.ü8̓F\u001aA���\u0015:6a)Y\u0017\u0019M\"����{wT|\u0017y\u001fw�H\u000f�M$\u001f�3T\u0016��JL�Wm/+r\fYS�G�l�1�\"�W��������\u0017�'d�F\u001fu\u0017�\u001c\u0011��\u001d�3\u00011����X`[~R׋;�\t�9��)�Z�\u0018�\u0000�8��'\u001cz2��\n8!����ؤ6���ᖸ��f���B>�s���_6�\u0014�7��\u001c�i~��G@�S�O�;\nF�\u0017L�s\\�p�pF.��D�-^/_��S�LV����\u0011D�#\u0004��Ȼr��i=Ed\u0017N�'F�i\"�fD*\u0018E{����dM&�����w�i����-���\u001a�\u0010�ǰ�p\u001abӺ:Q\u0019��q�yG\u0016ҩ���j\t\u0003V��C`�'\u0004�c��w[ZSQѲ��\u0007","payload_hex":"d7451ec55603739c079337c429c682d44f662c00dec26175d6322f03123dcbc75cacddba3c2ba1ac5cf58ea120f2bf0abaf83b47fcc5369764a3f245fc5aeb9aa9ac7ffba0bf8160cae3a9c49bb47e9f79f144667c159f7e8f0f5214f528b1c5c20905432a0e9d415630b01a65f0382a667ccec9fc95a6af1bbc859c465ea7622583cb0fed23dcab2c0507545b7478eb126fb518a7021564f0f5d890d79b84bec56a804d7408120fb00f4011663e113b406d6327d31ab90c835aec95d7f54aa299a5772613c8eb13bb4dde1b9de25f7a28ad5c9135c3c14ccdef59246283ac27d86190e5dcc06879bf07b3da929873c3f40cb48339c0070f824aaad3e36999a376d0a2f42ec3bc38cc93461a41cfeac2157f3a3661295917194d22d5dec4e37b77547c17791f778a480f904d241fdf335416cae74a4cc9576d2f2b720c5953a847f46cea31b622e35791b6f584a392b2e417c82764f5461f7517b11c11c5c41d97330131c4f4f4f758605b7e52d78b3bdc09f839f7e329c95a8f18f500a9389aed271c7a32aedb0a38218bc4ffd3d8a436b5e3d7e196b8c3d766bacbf6423ee17395ab915f36de14c037e4b21ce8697ecafb4740cc53e14ff43b0a46c2174cf6735ce270d670462ebded44e12d5e2f5ff9fb538c4c56aa9aa1881144fc2304e0b2c8bb72edcf693d4564174ec22746d36922cb66442a18457ba7b9f5d0644d269ab4f6e0d577f069e99ce7c22d95acf21af81099c7b0f8701a62d3ba3a5119edff71a3794716d2a9f2e3d56a090356edc3436096270485638ddc775b5a5351d1b290b707","method":"","user_agent":"","ja3":"","session":"5b05d39f-1a56-4d70-9c2b-59c9f9c6158e","seq":1,"duration_ms":101,"bytes_in":580,"bytes_out":13,"enriched":{"digest":"f3a2eafd05aa7ba2","strings":["8*f|","T[tx",";@mc'",":6a)Y","{wT|","Wm/+r","X`[~R","i=Ed","w[ZSQ"]}},{"timestamp":"2026-10-05T14:31:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-QP_18qmKMf*b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d51505f3138716d4b4d662a62","method":"","user_agent":"","ja3":"","session":"a9d7765f-dae5-4cbf-82df-c6fa0c07f16f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b5eb54495d860855","strings":["BitTorrent protocol","<-UW160N-QP_18qmKMf*b"]}},{"timestamp":"2026-10-05T14:29:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"C��/��h��!X\b}s2\u0014�\b\"&�+\u0006�'�]\u0006))[\u001af�\n�1JhQ�\n+[%smڢĥ�X\u001c_\n�\n��G�\u0015�|�y0D8\u000b?\u0002x>\"��).،�\u0011re�Z�ʮ\u0013Fx\u0000J�w�IwD\u001a\u0004�YŶ���J�\u000f�\u0000h|ػ�����\u001d���\u0016ژ�`��茰���?\u001de��5�j-��\u0018��4��wp���}�H��f������7y\u0007gH\u000eBE|x�\u0015��4т��\u001c�{�@�W-Hw�f\u001cAӲE��@��kB�i��l����\u0014�5\u0011\u0011\u0005J�\u0018x��z�m4`.bܵ�o�\u0019��P'6��k\u0004�ѐ�K�����C\u0006ݤ�CvЄ�A:vfg�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"769b43f7-470a-442e-8b0c-dc0b2884ef76","seq":1,"duration_ms":100,"bytes_in":289,"bytes_out":13,"enriched":{"digest":"f52489003b96f6bc","strings":["1JhQ","+[%sm","y0D8","BE|x","W-Hw","m4`.b","A:vfg"]}},{"timestamp":"2026-10-05T14:26:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-2v8uB7ClpZLa","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d327638754237436c705a4c61","method":"","user_agent":"","ja3":"","session":"196820cd-e568-4a07-a850-b43a2baf3dfa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8b452b5a8c734070","strings":["BitTorrent protocol","<-UW160N-2v8uB7ClpZLa"]}},{"timestamp":"2026-10-05T14:24:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���+n�����I\u001a�Y�\"t�l�O7�3\bV��\u0003\u000ev�\u0003�#�`\t�\u0005�ݝ�F��,���\"\u0005�\u001c�\u0018z��\u0003��\u0011`�{\f,�\u0013�}\u001f{\u001c6�\u000e�R��Hq0M9�.L�\u0007Ka@�.�z\u0006ApE���Ӫ�mD�CG��m)2�]�\u000f���ǰl��\b�Ҽ)��I�ήe/S�(l�2\t\ng{��A&�F\\V��8\u0015\u0016\\i\u0001�\u0012\b9\u0010 \u0000��\u000f4K�TM��6.u�m��?l&�S\u0018��r9(��~����b�q��bK`h\u0014^`\nmɄ\u000bD��\u0004)f�\u000e�","payload_hex":"a599942b6ea995ab8e87491ae559f02274aa6cda4f37f43308568aa6030e768703b623a26009a405dfdd9d92469bb52cc097e62205a51c84187abfb203d6cd1160907b0c2ce113a17d1f7b1c36bd0efa52aea14871304d39dc2e4cee074b6140fc2ec37a06417045abe2add3aa8b6d44a24347f2946d2932a85d910fe3e3a6c7b06cbba3089ad2bc29f792499eceae652f53bb286c9332090a677b9eda412683465c56a5e63815165c690188120839102000c5f10f344bbd544db0ed362e75ff6de6df3f6c268c53188de8723928c9d37e99a5e9d462bb71e3ce624b6068145e600a6dc9840b449bee042966f50e95","method":"","user_agent":"","ja3":"","session":"33952908-b78f-43a3-84af-420614fa397d","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":13,"enriched":{"digest":"9907ad946bc776d9","strings":["Hq0M9","bK`h"]}},{"timestamp":"2026-10-05T14:22:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-A4mB6GUjWulL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d41346d423647556a57756c4c","method":"","user_agent":"","ja3":"","session":"5d3367d8-f476-4fc3-9c3f-51dcc6f54f9a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ffa837228ee7826f","strings":["BitTorrent protocol","<-UW160N-A4mB6GUjWulL"]}},{"timestamp":"2026-10-05T14:19:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\"$[k�(!�\u000bt׳7�3\u0003�����7C�bwDl2x\u0001+����M�B\u0016?��5Q���h8����<�c��d�:���\u001a{��VG��T)O`k?�+\u0019�:��J���m�!q\u0018�.~xI'�)CD���r���\u001e_���W�9i�dH�����\u0017h@{�\u0012��3�@�4{��\to\u000e�pn�kr��Ae���[�\u0002��b�E�G��\u0006�E�=��4�q1]d8�p��\u0013DA\u001b�l�\u0007��k\u001a�|�\u0018�\u001b](�օ\"�r�\\�]\u0001���������Z�\u0018cs�S\u0011����'��i��a!AǠ\u00176�a\u0013�\u0001�\u000f��w`a>��\u0017���j���n\u0011ny|<r\u0001M\u00119bV�Wl\n���_�0��$\u0001�!~�\u0006\u0001���|\u0017LS�j?\u0000=�c�J~F\\���5Bs)����r��\r��N&y��Fh�e\u0004�Yޞ�X��m\u000b}\u001d�<����\u0016\n3o�;�\u0005+˜�\u001a��\u0014/15#�*`0���/��\u0001�ȸ�m-�vtzb�ᣰAj�~N���\f�%\u000f�h�\u001ai��Pq-i�;����e�(do������t���\u0003�%\f�cMąuLo� ��\rl����>9�\u0003��>\u000ec\u0006�.2\u001e\u0005�\u001e���<<��'�%^�?���q�s����F\"���8","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2c4d9fb0-aa32-4a51-8c83-1c0d5f577b95","seq":1,"duration_ms":101,"bytes_in":538,"bytes_out":13,"enriched":{"digest":"af2b186852e74ac6","strings":["\"$[k","bwDl2x","T)O`k?",".~xI'","q1]d8","w`a>","ny|<r","J~F\\","5Bs)","/15#"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T22:22:58.454786+00:00"}