{"ip":"186.85.240.98","total_events":217,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["217 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 46,227 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"46,227 bytes sent","bytes_sent":46227,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T17:37:42","last_seen":"2026-09-24T22:28:34","events_24h":0,"events_7d":217,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.6074,"lon":-74.1459,"asn":10620,"org":"Telmex Colombia S.A."},"source_domain":"static-ip-1868524098.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":217}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-24","count":217}],"recent_events":[{"timestamp":"2026-09-24T22:28:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5220-)oA59eKs.fXx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353232302d296f413539654b732e665878","method":"","user_agent":"","ja3":"","session":"a086b9c0-d681-4ba4-a123-aadfe71cd4f4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"62532c37e3a35e9d","strings":["BitTorrent protocol","<-qB5220-)oA59eKs.fXx"],"iocs":{"domains":["oa59eks.fxx"]}}},{"timestamp":"2026-09-24T22:27:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A����4�PG�;�6.����ҏ{C80�\u0014�P�����1���]]KE&[�p@�����\u0001\u0003叞2�ϝ�7�\u0019x���͗Z;N'ڠ��\u0011���(҅\u0002�F�.�`�����ܘߦ�QV��.�Is8�������ߥ�V+/\u0012��{��,\fOS�^7��šM7;ѓ�1��(?��V^�����9Kg��\nZE���'���U�S����ُW}G���U.mGJ��c�\u0005Ǫh\u0002ٯ\u001d��RR5��(�i�2�K�'�?=\u001bB����$y,\u0014�\u000e","payload_hex":"41a9ac93cb34f55047e53bb9362eb487e18ad28f7b43383084148450adf4d9fdb93187b89e5d5d4b45265bd77040efe0cfeaa50103e58f9e32f5cf9dc737fe1978c4eff3cd975a3b4e27daa0a88611d1f3cc28d28502d746a42ec460d4dff0a98adc98dfa6c95156baf22efb49733882c3c9c1f196ffdfa5a9562b2f12b0a17ba1822c0c4f53885e37d1dec5a14d373bd193c531facb28ef80883fc7ca565ef3b890fff8394b67c3c80a5a45cff5de279db59555aa539596ffc6d98f577d47ddfd82552e6d474a82db638105c7aa6802d9af1dfd88525235c1fb28e169e4328c4bec27963f3d1b42d0ffc0d624792c14a80e","method":"","user_agent":"","ja3":"","session":"60dfb64d-f22b-4771-b7e6-3baed983ea6b","seq":1,"duration_ms":100,"bytes_in":242,"bytes_out":13,"enriched":{"digest":"f137ecea6045f3bd","strings":["{C80","]]KE&[","Z;N'","U.mGJ"],"iocs":{"domains":["u.mgj"]}}},{"timestamp":"2026-09-24T22:25:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5220-XM~Z29I61VUF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353232302d584d7e5a3239493631565546","method":"","user_agent":"","ja3":"","session":"a98d2791-d892-4ff0-ae5c-198dfa677336","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9004ead92c68d28b","strings":["BitTorrent protocol","<-qB5220-XM~Z29I61VUF"]}},{"timestamp":"2026-09-24T22:23:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0010t�_�jn��\u0013i�\u0014���Xދ�~���\u0007�=\u0013vT\f�0qwo\u001c�C���H}�\\?J:���E��\u0000/8��ϩ\u0006ٶM\u0015HGA��$E�\f�\u001b�^�|�19��<3~auw�K�R\t�\u0015+;�z��$�5�:�\u001c�%��8�C��\u0012%'+۲٣B�\u0013a��\f��\u0017�qv))0f>P\u0018䵊�\u0001���0�\u001cf��{w�{�\r�\f[�\u0018��%I2K�baƁ�AM1u=�\u0010t\u001d\u000b�}�$b\u001c�����v����,��;�O/�i톫x�ɧa��;\u001a��\u000e\u0018v����|���ʩ�mʁ]�\b����9Ca\u001e{X��H1P�@q$4��w�\u0004?��\u001en�\u0011�\t�y��]\u0013�������O%ϫ\r�\u001a�\u0019Fd�ew����|���K�\u001a��3��B�*\th6�\r[߼�\u001eca\n_�\u0010���΄��I\u0004�;��������������\u00180\b6�<���}���&�����c����d�G�Y��_\u0013+��b\u0015\u00124�i_3u���͝|\b�o7���y�p5�X:\u0011�v�L��-ꄙڤx��P","%I2K","AM1u=","@q$4","i_3u","'&As",";P*Dt"]}},{"timestamp":"2026-09-24T22:21:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5220-K2OqnPtuSgPn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353232302d4b324f716e5074755367506e","method":"","user_agent":"","ja3":"","session":"ce8888a5-c25a-47e4-8546-85c0827fbd4a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2da8f2f18d357a53","strings":["BitTorrent protocol","<-qB5220-K2OqnPtuSgPn"]}},{"timestamp":"2026-09-24T22:20:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ы\r���7�5_��^�Y,NSs��:�x�Đh�F�.�_���wN�\"�:�εP��I��\u0001q�mLq(\u0006\u00139\u001a�#�d$\u0006��BK�\u0004�ϟ_\u000e\u0011��� �\u0015\u000e��z\u000f��%.�%�\u0012)��E���k㬼�JC�\\7�3�\u001aͲ\u00190��o\f����T�m��KR\u001eΠD 3�\u000b���\u001cT0�\\]O��|C(�Qw�b��\u0001'��5��lı����Ōj^Km߷_Imz�&�eY�ԩ���^�F-�����l�ü�J)i��wfڷH��*NY�^�y~�.=E���}#\"A\u0005�*\u0006�\u0004��N\u000b\t�n�����=�+\"\u0001iϝAښ\u0013�\u0001[u����\u0006�g��\u0018�c�.��T�\u0005\f\u000e��Uu��\u0012\u001c\u0018ㄯ�hf?�qS/��Y�\u0017�G�e��\u0006r+����_�VV","j^Km","_Imz","}#\"A","VV~ex��jg6��f�\u001fR�gr�uމ�\u001dL���nk�\u0005BO�ѴBL�^�\u0000�ҩ`\u0013\u0007y��Ӑ�^�oK��p\u000e\n7)G��>ӟL�$�\n\u0003\u0005FG�7�\u0001o�t%c;E�zF��&׏_ �\u0010�&\u0005�fO\f�@ٗ}����[B�ǟ{���\f�}ac�E��5���\u000b�\u0002���L\u0002�O[E�Dܴ'�4�]\u0007\u000f��\u000b̒3\u0010\r\u0015�=��F2Z=��\u0003L��k��iq>��m�>�0\"�Kң��b����`�����=e\u001a\tpS�m�$H���2�����\r�N���hK![�\u0004[w��\tjL��DS�����]UAb����=�t8��\u0001�\u0019�\u001d�\n0���c��\u001c]zfIDKӝD�����}S�����(}\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f10b1a35-9f4d-4211-9635-813f6522f45d","seq":1,"duration_ms":100,"bytes_in":449,"bytes_out":13,"enriched":{"digest":"9b5a3994e1bac4b1","strings":[")OLF",">~ex","t%c;E","F2Z=","hK![","]UAb","]zfIDK"]}},{"timestamp":"2026-09-24T22:16:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5220-JZ4p!HM)ERFv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353232302d4a5a347021484d2945524676","method":"","user_agent":"","ja3":"","session":"6a240fc8-a7e6-4790-9345-b11b59622d2e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a7f4f272f408b809","strings":["BitTorrent protocol","<-qB5220-JZ4p!HM)ERFv"]}},{"timestamp":"2026-09-24T22:15:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"J��M��\u0019��RU�\u0010pE�T��\u000b*֒K�P\u0003�\\,��\u0000��k�%Hw��O\u0003��nD��\u00101'��W����d\u0001�g��9��V�\u0001\n�뗖��P*�э��\u000fr�WW����\u0013y\\!\u0011��ӽ�g\u0004�A���\"�b�Р8n�R\u0000*�V�8��\u0001��<_C��\u000biZ9|�j�����@��\u000b�а��9F\r�A��`�����ۢ�tw��1^\b=t���`��(Df/�C��\u001fc�\u0002,�\u0019����Z'\u0018��R��|>�\u0017k�\u0015���+S�\u0015E\u0019�bw\u0003�JEЧ�ޠOb.z\u001c\u0000]\u001bWӯ�3�\u000f�<�\ri�sz\u001e�J�ED��D�Ԟ\u0015�\u001e��'�\u0010�@���(?��\u000b> �\u000e���\u0001","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"84bb0e45-c3c9-4498-960d-0a3dfd5d3f60","seq":1,"duration_ms":101,"bytes_in":309,"bytes_out":13,"enriched":{"digest":"7cb5734d7e472e7f","strings":["iZ9|","(Df/","Ob.z"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:05:09.990636+00:00"}