{"ip":"186.80.30.99","total_events":240,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["240 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 51,154 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"51,154 bytes sent","bytes_sent":51154,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T23:00:36","last_seen":"2026-09-29T03:45:35","events_24h":240,"events_7d":240,"geo":{"country_code":"CO","country_name":"Colombia","region":"Antioquia","city":"Medellín","lat":6.2529,"lon":-75.5646,"asn":10620,"org":"Telmex Colombia S.A."},"source_domain":"dynamic-ip-186803099.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":240}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":51},{"date":"2026-09-29","count":189}],"recent_events":[{"timestamp":"2026-09-29T03:45:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*��[�Ε_E�\u0004:63K�}�.r�l�A\f�_�!0��q#��^^��\u001ep�R�\u001dv�G\n��\\uq���\u0005�\u0007\u000e�\u0006�8����5�\b\u001f\u0019���6]a2T�%�on>��nW<�l�Dx","payload_hex":"2a83eb5bccce955f4591043a36334bca7dca2e729f6cf1410ccb5faf2130ceec71239fc65e5e998c1e709e52811d76d1470ae6a65c7571a6a3fd05ba070edc06f138a7edf7f635f3081f199e97fb365d613254dd25916f6e3eafdc6e573c876c814478","method":"","user_agent":"","ja3":"","session":"a2daba23-a806-47b2-9403-897c8af4e676","seq":1,"duration_ms":100,"bytes_in":99,"bytes_out":12,"enriched":{"digest":"3a94b4c01c144c99","label":"Redis (RESP)","strings":[":63K","6]a2T"]}},{"timestamp":"2026-09-29T03:44:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-x5OBQWwU6ZF7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d78354f4251577755365a4637","method":"","user_agent":"","ja3":"","session":"60659459-646c-4a69-ae02-20d831cf30b9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b39de16b9ba987d5","strings":["BitTorrent protocol","<-qB5230-x5OBQWwU6ZF7"]}},{"timestamp":"2026-09-29T03:43:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�O��\n,G���ʛ�`Y\u001f��%F`�l�E��O@\n��f������k7֟�n���T��3�|�#ej�\u001d\u0016\u0012T±��\"�=o�N\u000f?q\u001ai��E��&\f�eB\u0004��R�}�1^A𙎒��/:�?y�%й1l\u001fx�=c�i�L���M��#ބ\u0017�~@_�o9���+`�\u0000���2��O�>\b���ؓ�\u0011<=VM�\u0019S��Qbc$�AA\u0012\u000b�G\u0016,RlHm\u0017����\u001c����W\u0018f=�E�4{\u001eE�\u0019��mR)���s�d��/�!3U�7�3%�m;���=}\u001eE�\u0015�����\u000b�LK�~��_\u001f@�қu�\u0000ϕ���ȶN_=�\u0011���23\u000fD�N�\u0004#\u0019h\u0013ŶX�\u001dDCs\u000bz̮,b�At\u0015蠄��G�(�FRAݱ%�z�$�p}\u001b::�jW��wF\u000f���>�\u001a>C����\u0001Ғ�\u000e\u0012��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fdfd4215-15c2-4b67-90b2-167e3c5070ff","seq":1,"duration_ms":101,"bytes_in":406,"bytes_out":12,"enriched":{"digest":"8359e7af3664925d","strings":["3�C��3q��<�nDŽ���l��\u001bK\u000f\u0006E��jP\u000e=OQ\u0019M�\u001f\b\u0005��t�ތ����F\t�䢆f�\u000e� ͼ��&�\u001b���T�›v�†�jv���77���w����a\u00068?����\u001b\u0016\u001c��L���](R��Ѳ�\u000f�7gF�\t��}�t�z�1O�8�w��ޓ+.���5ވ��M�ے5m\u0006�#��\u0013m�\t����7���V*\u001bN�\"�:\u0004�@l�","payload_hex":"7c3dc78ed955ec67deb7f50e6c4807595f51bea0338131718706e0c907b3973ab9f24a2af4c2a0d77d2f2c7752ceac23c49b707d5064811cbb05f64e97e11cc92ca147bd099c2717cf5d01a701a01b14b35bf418f2cdf95100598b9e2c130bb789d8abb623fe6f99116f724230166e8287655c06fed4a7579b99d2f1382930cfd507fe52f80415c022fa4fd7e2a1690985eb143f0f3307b0d29daa603e9b43b3ac3371b4e13ca46ec78499afe96ce5ca1b4b0f06458fb96a500e3d4f51194dee1f0805979974e5de8cb7bc83ef4609d9e4a28666fe0e9220cdbcae9626b51ba6bcd854a9c29b76d0c286e86a769dcedc373799dcd977a4dff6da6106383fb5cee5d71b161cb89f4c908ff15d285285ffd1b2880faf376746cd09959e7dfb74ec7aae314fde38ce779c8bde932b2ee7fe9835de88b9804ddadb92356d06be23ddd0136d8e09a28b83813783a3c9562a1b4ebd22c03a0484406cd3","method":"","user_agent":"","ja3":"","session":"7cde62b0-8822-420d-821f-2fd1b0eedc67","seq":1,"duration_ms":100,"bytes_in":346,"bytes_out":12,"enriched":{"digest":"5232bbbc091ed534","strings":["}/,wR","p}Pd","orB0"]}},{"timestamp":"2026-09-29T03:39:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-Rb27mMFkyu25","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d526232376d4d466b79753235","method":"","user_agent":"","ja3":"","session":"d13b18c2-2069-461a-a6e1-efed2e3f731e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ccb0525e7b6eb27b","strings":["BitTorrent protocol","<-qB5230-Rb27mMFkyu25"]}},{"timestamp":"2026-09-29T03:38:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�X|�QGO�J�;�\u0015\u0018��2��\bc7Um=�G��\"Z�\u000b�[��\u0019!����Q�݈��o�r5|C��+V�갔��\u001a�\u0007\u001es,,�T�Wg�(U09Co.\b\u0004D1)\u001c���\u000b���E\u0010Π\u0018���`oW��]\n�N���\u0003z�\u0006��ak�\u001fM@���}�L~��\u000f.��\u0005癑���䌼nJ�;�y\u0006~��k�!o��NK|d.i�-\r��h�\u0019\u0007�����b�B�\u00170���+A��\u001ay�l�Oa\tZ��\b���L!\\�ƿ\u0013\u000f\u001fP�\rh�#|4%\u0013\u0017�si�\t,\u001cyf1!�B��HG��� D@D#2aÞ��ef?\u000bV��\n��n��d�9��bE�\u0018)#jZ�\u0012\u0015_�ka{\u0000i���n�_���t��o5��f4-�Y2�͈g\u0006B(�c�\u0000�W�A�0\n�F#�\f��b��l��\u0013�����zg���Ut\th@���\tn\u0003{�������\u001d��:��O,","payload_hex":"a6587c8b51473c66ae0f5c45a2d25f421a25b83e4ff64ad53b9b1518eaad329fc9086337556d3de047a6c6225a8d0bb95bcce4192181d8feb151dcdd88ced26fee72357c43e7b12b5697eab094c4d51abb071e732c2cd754d85767eb28553039436f2e08044431291cadc0db0bfdf3d34510cea018ab859b606f5784a95d0a9b4ebcb8b3037a9a06b1c9616b921f4d40a4bcd47d864c7e8ff10f2ed5c005e79991fef395e48cbc6e4acb3bef79067ed0cd6baa216fa78a4e4b7c642e69f32d0de2a368e9190792d2dfd4cf62b442961730bdccc82b41e4fc1a79816c814f61095ab991089bf7b74c215c84c6bf130f1f50b90d68bd237c34251317df7369ca092c1c79663121aa4283944847a4ecad20444044233261c39e8ad365663f0b568efd0a9e906e7ff5d064f339bdd46245b51829236a5aef12155fd76b617b0069b3878c6e9d5ff7acf474a8886f358db766342df95932f5cd8867064228c3639400e357af41f9300af54623880cacde6297aa6ce3d91393bdbbedd77a67fcd1dd5574096840ef94df096e037b8b839883cee6d81dd7fe3ac7dd4f2c","method":"","user_agent":"","ja3":"","session":"878b11f8-0626-4a3f-bfd6-5f60eee806ae","seq":1,"duration_ms":100,"bytes_in":410,"bytes_out":12,"enriched":{"digest":"6d946ff1ef1dd342","strings":["QG