{"ip":"186.189.111.4","total_events":218,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["218 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 44,513 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"44,513 bytes sent","bytes_sent":44513,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T02:22:01","last_seen":"2026-09-08T18:06:10","events_24h":0,"events_7d":218,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":52341,"org":"WOM SpA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as52341","label":"WOM","category":"isp","url":"https://www.peeringdb.com/asn/52341"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":218}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":218}],"recent_events":[{"timestamp":"2026-09-08T18:06:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���p\u0002�\"��4aj�X�Kl\u000e\u0004'��\u001c_��)�@)9*����(�1��'��\u0018�xÀ)�����!�\u001a�Xjt�ξ󦧴Y�_�\u001c�%�K\u000e��x����p�A\u0011 ����p�\u001dn��\"�ߩ�'�[�����8��T�=\u001a\n{��#����X��#�!�����h��vĶ��§��\u0019{2���<\u00057B���\u000bv�9���e\u0013��:��I�\u001bh١���PX�M�*�I�>䑄�<��\u0012FW\u001eg�\u0017�f=�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d0bd909a-609f-4453-bcfa-060a4e31dc42","seq":1,"duration_ms":100,"bytes_in":486,"bytes_out":13,"enriched":{"digest":"e8edb20c9212b837","strings":["4aj6[�Ţd\u0006�I?��^g�&�@�\u0014T\u001fRK'�$���\\i)$-�&\u001e��(>�\u001a�(�N\u0005괲8Ж\u000e\b-TtN,�S�u.�\"@8�)G�V�K�۠8qf*����R_�`\u0010w�.�H�6�aՇV$����<�m\u0000���\u000e�к��B|a՟�\u0019W�Q��,����C/@m~�������SY�¯I�)\t.\u0003�h��\u0014eT�֔�����Ű��N��\t+1v�\"�fkO&�\u0007�Ԯ\n�m����<\u0011>��},����\u0000x����\u0015��sG4(�Q`�Ӈ�a\f�C�\u0011B=�h\u0007�*-�\u0012´\u001d�A�TZԺh�{\fd����Tb/\"\u0007c\u0013�;h��\u0014��Ǝ�6�\u0000\u0006}�m�\u001a�^A�\u0012�-1\u0014ؙ��+�\nhˆ����\u001d�\u0002�\u0015��4\u000e������C��\u0015�0�(sl]\fΡI\u0002k�p���\u0017bqUHprF\u0004�o�7O�-��\u001dc���!��\u0014VV�T�\u0015k��XSUC��\u001d�3�Lʼ\u000b�\u0014�\fi��X�\u001bbi��mËNh.�\u0003��̋ET��*n:w�\u001dC�~��\u0010�\u000f�1Y�]�\u0019\u0012/�z�+��~��4z�\u000f�{��������������K��75\u001f���!RmFC��B�.�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a55db450-d340-426d-b0aa-033488339a80","seq":1,"duration_ms":100,"bytes_in":581,"bytes_out":13,"enriched":{"digest":"7f82cf4255ff6415","strings":["\\i)$-","-TtN,","8qf*","C/@m~","fkO&","sG4(","Tb/\"","(sl]","bqUHprF","XSUC"]}},{"timestamp":"2026-09-08T18:01:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-Ot0w7-meVf*r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d4f743077372d6d6556662a72","method":"","user_agent":"","ja3":"","session":"195b012b-376f-42ce-922f-55958ad594bd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"95d2d2231f4ece09","strings":["BitTorrent protocol","<-BW1605-Ot0w7-meVf*r"]}},{"timestamp":"2026-09-08T18:00:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�D�=~0o���\u0014�\u0016�\u001dsQer/��eu�!�����f�\u0017�\u0012�?d0�n�YxaF\u0019\u0015�&_��y?\u0006VC�B���d��>�L�� �hf���","payload_hex":"b9c2ed1d6b4487aac92f941ed2a77bedf97879ec03ef5e54b2c0039f99755e0246be3c31b14bfa65787ccf24244ab11869e9745d8b7ba8ebee073afaccd71237de02bbe349c5f3a28976219df96336a9138c2f1a7b9b915a1d1185022734855ea60a9119aa090e4c9319746278306a5e5493db04fced81a97813631768d2218330a17f9c587fbd7ad25b4bf16a30e981cad8b9dfea14209fdb1c8e6e8592b35c31de4b39137f5357d5fa003e461915bf265fef93793f065643ed42b1e5d264ace53e844c9fd120de6866f9f58d","method":"","user_agent":"","ja3":"","session":"bc49203c-b319-4ba5-9a22-607be39dae26","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":13,"enriched":{"digest":"407b002628015446","strings":["tbx0j^T"]}},{"timestamp":"2026-09-08T17:56:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-Nw6i6KLR4X~i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d4e773669364b4c5234587e69","method":"","user_agent":"","ja3":"","session":"52956f68-d862-4be5-ac60-6cead881d1d3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e1265f928467088e","strings":["BitTorrent protocol","<-BW1605-Nw6i6KLR4X~i"]}},{"timestamp":"2026-09-08T17:53:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-Fd!BBPdERlp1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d4664214242506445526c7031","method":"","user_agent":"","ja3":"","session":"f67e2118-3251-47af-be0e-f4a740ad4c53","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8a652e321c442dc3","strings":["BitTorrent protocol","<-BW1605-Fd!BBPdERlp1"]}},{"timestamp":"2026-09-08T17:52:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"&F�0�qb<��?m\"�\u0015\u001a((��n�:���e;@8ӧD��+#W\u0004\u0001\u000f\u0011e��N�\u001ds���$ۍ�i�5j\u00025׳\u0012n@�\u000f^��\u0000#��Qͣ����*x�\u001e\u0019;��k�\u0004��k$\u001a*=6���\u001f^\u0018�\u0006�T_)1jZN�5\u0001��+j�9�l�_�V�4rr� v��4�\u0005�$i����%�W�#�;,8����A\u0010���g�>w�no>��\"f�FX\u0004vOrm�G��븛H\u0016��̬�5��cBܯ���G�ҀAȌ3��\u0007\u0011����i:�\u001d\u0011�:��$\r\u001dԤ����Y¡P��E��ˌ��t�eq\u0015��k��\u0011�-;\u001d��9�΂����\u0010\u001a@߫�m:�i���\u0012�a\u0016���P�\u0014s��S\u0019�S9\u0012��SXL3","payload_hex":"2646b0309571623cf3ae3f6d22a0151a2828c2c26e963a9082ab653b4038d3a744a4f22b235704010f116580cc4ef41d739bd1d024db8d8d699f356a0235d7b3126e40920f5ea4a90023e9f251cda393f8d1d62a78d41e193b87bd6be904bdf16b241a2a3d36d5e5bb1f5e18c406da545f29316a5a4ee3350198952b6acd39ac6c865fb756e3347272a82076f2d834a805a62469b29af8c725fe57d023f43b2c38be9bfdbd417f10d8c0e067b03e77e46e6f3e999d2266d1465804764f726dd5479ca7ebb89b4816e3c2ccacc135f6986342dcafe1a5d347dad28041c88c3389810711a0bb82e3693aeb1d11f73ac1b6240d1dd4a48f99bc9859c2a150caf3459ff2cb8c8df774f6657115f3c46be6a5118a2d3b1dfdc439aace82b1a4eef5101a40dfabeb6d3a806993afa712af6116cbf5b550fa1473eef35319df5339129ced53584c33","method":"","user_agent":"","ja3":"","session":"e3f0a2e1-7177-4493-82c5-95a2bd8cc63e","seq":1,"duration_ms":100,"bytes_in":325,"bytes_out":13,"enriched":{"digest":"8408c8974cfb2cac","strings":["e;@8","T_)1jZN","vOrm","SXL3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:43.544731+00:00"}