{"ip":"186.81.124.34","total_events":341,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["341 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 66,520 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"66,520 bytes sent","bytes_sent":66520,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T01:02:58","last_seen":"2026-09-28T13:31:14","events_24h":0,"events_7d":341,"geo":{"country_code":"CO","country_name":"Colombia","region":"Risaralda Department","city":"Pereira","lat":4.8142,"lon":-75.6946,"asn":10620,"org":"Telmex Colombia S.A."},"source_domain":"static-ip-1868112434.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":341}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":341}],"recent_events":[{"timestamp":"2026-09-28T13:31:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u000b�\u001bLG����3�\u0016�����\u000f0-�Q�\u0010e[��2�ɛ*e\u000e�\u0014@����{\r\u0007�����`)�\u0003�����D����FC\u000bֽ5\u00019��\u0019m\u0004�r�1�@\\q��YŰ��\u0003�0��7�\u0012�Y��\u0002X]^]�\"�Q\b5\u0003���\u0005�{�cć���\u0006�/L�<��1\r�\u001b\u0000I�c1��f�\u0006��ed\"\u0018S\u0012��\u0006�;���@��B�L)�1\"\u0007'P!�[\rg\u0016i\u0003@�^��Ѷ�vD\u0001\u0015�e\\�^�\\/�CFEX�IR��u���5�]��L^?\u001e�o�<��I�\u0002��\u000f�\u001f�o.��$k�\u00056p\u0006���\u001b����\u000b��\u0012d�TK��Jp�\f�ّS{m\u000e�!�TZ]�&����?��+�$:L��Y�\u001fh;���'�>��]{�`���O{#i⃿ݫ�9","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"dce1b65b-529c-48cc-8cfa-7c4cb2e29567","seq":1,"duration_ms":100,"bytes_in":344,"bytes_out":13,"enriched":{"digest":"4b2a03e7ea3813de","strings":["X]^]","CFEX","O{#i"]}},{"timestamp":"2026-09-28T13:28:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ho!WH0EtOmN9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d686f2157483045744f6d4e39","method":"","user_agent":"","ja3":"","session":"0a375547-d414-43df-b502-a516e0b1e8e2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a90f46b1f7b68fca","strings":["BitTorrent protocol","<-UW1609-ho!WH0EtOmN9"]}},{"timestamp":"2026-09-28T13:26:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"tl��\u001a�\u000b��$�\t�#���a5��C�Z芶\u0012�ь�du�\u0000���b\u0016\u001a���_��'ר)T����\u0011Y��6u\u00014�U����\u001a�\b8��\u00116\t�\b�~ƒ\u00071\u0005:dKAq8\tdQu\u0011�ܢ^\n\u0014̈n;  J�\u0000���\u001e=��J:ӷ�\u0011��9|�\u0002\"�����iZ�3��O�����u�q\u0012m�ܓ�?�DdJ�\u0015\u0007�PX�R�b|�=X�\u00107�b\u0003\u001f�\u0007O�AS1dy�Le�՜\rU�X���܄j\\�r��\"�kI��\"��*\u0001-\u0012���B\b�\u0017��N��\u0011\u0014M�Bd��`\u001e�\u001a���rƁ��@���ڱ����صw\u001eť#\u0015�����%=s�gb3-�>ϟ�\u001aG��\u000e����x�\u0010�&���\u0012(��l`��s y`\\��K��\u0019Q�^��X��Rh��j�\u0019�\u0014%�-S\u000b���Z,a�\u0010��\u0005����\u00186\u0003��\f��\n'\n\u0017�:","payload_hex":"746c81f11a8a0bbec1249f09a1238de68a61358ea543c45ae88ab6128fd18ce36475ea00aa888062161ab5a5905ff1e127d7a829549fa880d31159a1e936750134de557f9a97d9cc1a820838eeba113609d208e27ec6920731053a644b4171380964517511bedca25e0a14cc886e3b20204afe00a9ec931e3da7fa4a3ad3b7e811ade2397cb402228190f28b9c695aa033e6f64fe0fdbcfaeb758471126da6dc93c13fbf44644ab01507c95058df52a0627cbb3d58e07f1037a062031ff6074f8a4153316479cf4c65c3d59c0d55a758e780e2dc846a5cfe72beb222b06b49b1b122ecb32a012d12aceca94208e917a9ce4ed4c311144dc9426487f5601eb71ac3c6c672c681dac140ffefdedab1938ed1d0d8b5771ec5a52315b7b7b7bfc5253d73e46762332dd03ecf9f921a478ee80e9aa4a1c478e410d926f8bc9e122886c46c60ada2732079605cf2ac4bb17fc41951f95ec9e2588ccb5268e1e86a8019e91425892d530ba9eb835a2c61e81080ee05a0e6a6f4183603a9a00cc3d20a270a17de3a","method":"","user_agent":"","ja3":"","session":"336ef9b6-d7e5-44f4-89eb-5eea824670b3","seq":1,"duration_ms":100,"bytes_in":388,"bytes_out":13,"enriched":{"digest":"356a88b594413c1f","strings":[":dKAq8","n;  J","AS1dy","gb3-","s y`\\"]}},{"timestamp":"2026-09-28T13:24:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-xshEOO-77~wk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d787368454f4f2d37377e776b","method":"","user_agent":"","ja3":"","session":"58116024-11c0-42d3-ab87-8c1c2e6b0ff5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"49484c6717f497b4","strings":["BitTorrent protocol","<-UW1609-xshEOO-77~wk"]}},{"timestamp":"2026-09-28T13:21:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0016(�Q��(��{�D\tġ%���\t��@K�\u00029�l�\u0013J�;��\u001f5�5\u0000\t�\u001eׄ���~'�d~in��[3w�:��i%��/z��z�\u0002��\u0019���\u001d\u0013\u0017�������a0�Zǻ�\u0018ł��߸���.Z�h\u001e=�Tb\u0004���H��ӟy\u0018W��\u0006\"�{F���ܴ�]5�\npOd\u0004��\u000bR��[P���g���\t҄","payload_hex":"d41628b651e6d428ccd97be74409c4a125f5b6ac09ae90404bbf0239826cbf134aec3b92891f35a8350009c81ed784bbcdc57e27f9647e696e86855b3377b03a84bf6925e48d2f7abcd07abc02e9a019b5c1d31d1317bc85a4c9f0b6826130b35ac7bb9718c58288eddfb8ab86f52e5ad4681e3de7546204f2e8b548dee3d39f791857c6f70622b87b4693cfdfdcb4fe5d35830a704f6404aaf20b52f2895b5085b9f167b4a4c809d284","method":"","user_agent":"","ja3":"","session":"144965af-4fb8-4a33-a892-adeab0e6448d","seq":1,"duration_ms":101,"bytes_in":170,"bytes_out":13,"enriched":{"digest":"429420831c58e368","strings":["d~in"]}},{"timestamp":"2026-09-28T13:19:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-BOqYRFnkI*bs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d424f715952466e6b492a6273","method":"","user_agent":"","ja3":"","session":"abbeecc2-35c7-4fe2-a3fa-2510e00b4ab4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"de5fd3ed7e640409","strings":["BitTorrent protocol","<-UW1609-BOqYRFnkI*bs"]}},{"timestamp":"2026-09-28T13:17:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u001d�y��\u0014I���l_�\u0016K�5\u00071[8Y��ԓ�SF��6ȇw]����}u�[܇|h������y�\u0013;\u001c�)�e��j���\u000b��\u001at�r�\u0007��;�߸����-&f�J����YUd4","payload_hex":"f3051deb79a1fd1449e49ef36c5fed164bfe3507315b3859b4fad493a553468fc536c887775d9bdaf8be7d75c55bdc877c68d5f1efdaccd379b9133b1ca9299965b7a76aecdbe50ba0f21a74c172f407ac883bcfdfb89692b9f02d2666fd4a8fc3d3fc59556434","method":"","user_agent":"","ja3":"","session":"09950017-4110-4b5d-987c-e99d24083bb3","seq":1,"duration_ms":100,"bytes_in":103,"bytes_out":13,"enriched":{"digest":"3d016a14894db937","strings":["1[8Y","YUd4"]}},{"timestamp":"2026-09-28T13:14:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-rnjNWae-DI.o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d726e6a4e5761652d44492e6f","method":"","user_agent":"","ja3":"","session":"7b381c35-d918-4f7f-a8cb-fc7aa5f84b67","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f757308a182675ed","strings":["BitTorrent protocol","<-UW1609-rnjNWae-DI.o"]}},{"timestamp":"2026-09-28T13:12:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���u�\u0007�U��sWS��n�SA�t��+ $;�th_8+ق�2��P�K�ѴċΟA�k��@X�p%Pi��<!\u0010�\u0001�1�p-7=G�s\u001e3dW<�l\u0012X�'�\u001c��I�;,J�\t��\u0011\u0004\u0005Sӂ!\rG�\u00153�������������H\u001f\\�C\u001cE)@\u0014\u001d�ƚ���7��M@Β'Rҵ��\u0018_\u0007�\u0018P�\bk��H>…Q��^\u00116fk\u001f|�Lʢ\u0003\u0005���2\u001e,�-��W$q$","payload_hex":"9f98f075bf07b255dde6735753acfb6ece53419074d0e52b207f243b8074685f382bd982fb32f7ad50c44bb9d1b4c48bce9f41cd6b9a8540589d70255069d0eb3c2110b401e831b9702d373d47c8737f1e3364573cb36c12588327851c8bd549843b2c4aa609c19011040553d382210d47b4153384b5c5e593d7c0b9b1a9ae8de4481f5ca8431c452940141da0c69ad0e4fb37879e4d40ce922752d2b5a2de185f07be1850d4086bf0cb483ec28551b4af5e1136666b1f7ca24ccaa20305b8b684321e2c8a2de0e657247124","method":"","user_agent":"","ja3":"","session":"7771e765-e532-435e-afd8-d31965e812f0","seq":1,"duration_ms":100,"bytes_in":204,"bytes_out":13,"enriched":{"digest":"0562a0cc14443c13","strings":["th_8+","p%Pi","p-7=G","3dW<","W$q$"]}},{"timestamp":"2026-09-28T13:09:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-73e!56n-jFzx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d3733652135366e2d6a467a78","method":"","user_agent":"","ja3":"","session":"736755a9-585c-4722-8c03-eb51c0cf2335","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6adf7cb90c140d4c","strings":["BitTorrent protocol","<-UW1609-73e!56n-jFzx"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:28.352662+00:00"}