{"ip":"216.155.80.245","data_as_of":"2026-10-26T23:40:15+00:00","observed":true,"total_events":29,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["29 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,194 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,194 bytes sent","bytes_sent":5194,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-20T02:34:30","last_seen":"2026-10-20T03:11:38","events_24h":0,"events_7d":29,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CL","country_name":"Chile","region":"Los Ríos Region","city":"Paillaco","lat":-40.0689,"lon":-72.8878,"asn":14117,"org":"Telefonica del Sur S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14117","label":"Telefonica del Sur","category":"isp","url":"https://www.peeringdb.com/asn/14117"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":3,"protocols":[{"protocol":"udp","events":3}],"ports":[{"port":39131,"events":3}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-20T02:34:21","last_seen":"2026-10-20T02:35:12","recent":[{"timestamp":"2026-10-20T02:35:12","port":39131,"src_port":53510,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:\u001c�\fd\u0003��V�\u001d]�rg��U\u00028�9:info_hash20:\u001c�\u000e\r�\u001bS����� &���\u0011�0e1:q9:get_peers1:t2:y21:v4:LT\u0001/1:y1:qe","payload_hex":"64313a6164323a696432303a1ce20c6403b18656ab1d5df07267be9b55023891393a696e666f5f6861736832303a1ce20e0de91b538ab3f2c1e52026d5e2f911df3065313a71393a6765745f7065657273313a74323a7932313a76343a4c54012f313a79313a7165","sni":"","session":"7aaaaee4-1953-432d-bf61-134f21453c98","bytes_in":104,"source_verified":false,"enriched":{"digest":"d3f9d187633f0215","strings":["d1:ad2:id20:","9:info_hash20:","0e1:q9:get_peers1:t2:y21:v4:LT","/1:y1:qe"]}},{"timestamp":"2026-10-20T02:34:25","port":39131,"src_port":53510,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u0015�̼],\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000m�\u0000\u0000","payload_hex":"41001594ccbc5d2c00000000000000006db30000","sni":"","session":"2a9fad95-cbe1-4362-bf3a-18aeeb3ff5fd","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-20T02:34:21","port":39131,"src_port":53510,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:\u001c�\fd\u0003��V�\u001d]�rg��U\u00028�9:info_hash20:\u001c�\f\r�vnob�\n,\u0003�!�\u0011\r��e1:q9:get_peers1:t2:�\\1:v4:LT\u0001/1:y1:qe","payload_hex":"64313a6164323a696432303a1ce20c6403b18656ab1d5df07267be9b55023891393a696e666f5f6861736832303a1ce20c0d8c766e6f62cd0a2c039921ce110d8ed765313a71393a6765745f7065657273313a74323a905c313a76343a4c54012f313a79313a7165","sni":"","session":"c501153d-0d9f-417f-b755-31b99e958dd3","bytes_in":104,"source_verified":false,"enriched":{"digest":"815ae3810e364d98","strings":["d1:ad2:id20:","9:info_hash20:","vnob","e1:q9:get_peers1:t2:","\\1:v4:LT","/1:y1:qe"]}}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":29}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-20","count":29}],"recent_events":[{"timestamp":"2026-10-20T03:11:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-(SRT27*39M_V","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d2853525432372a33394d5f56","method":"","user_agent":"","ja3":"","session":"faaa1446-05a0-448e-b2b6-8e8012a3af7e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"27d0e69b1defac16","strings":["BitTorrent protocol","<-qB5200-(SRT27*39M_V"]}},{"timestamp":"2026-10-20T03:10:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"a�\u0007�mZ�\u001f��\u001as3kI\u0017�n�`�7\u0011�yyxn��\u001c�;��̓Fs�\u001bn=ș\u000eL���\u0016\u0011�hH�\u001e\u0010ќ��t�\u000e��Ǟ,��\u0010���)B\u0010J`\u0014�c��jJ�����#\u0001+t���3\u0003�r\u0012�]�\\�M��-�\u001f�\u0004\u0013�Z�����zm_B�\u0003E�`\u0002�\u0016.E�9�\u0018,����C�\u0013��9���~g|�;͕�u�a���]�Qo�F�\u000efE�*���3\u0006\u001be0&�\u001a,m��|e��]�cj�b\u001d)�/�y��{I\"�\u0005�AOG�D\u0013\tL\u0006=�gX�{F[��\u0018��\u001d��T\u0007�\u0019\u001f授-#n�J~6� ��JX�7����!�`pT\t�(t��[���J����\b�\u000f��H�֜\r~�:�5�R\u0018�,^�o\u001cX�\u0016\u001c���;7�{\b�|�V���cM�&N�[ؚnt1�K̛�֡�Y�\u0015�1�i�(D�ꤩ�\u0014v\u0001٭�e�ǚr�/Oe��\u0006����ɟ��w���$^j�\u0015_#P����b7h�����xA]�\u0015\u0014��\u000f\u0002�֧~Ĩ�6�2!\u0013}�\"%is,�\u001d�8��KDe_���&�31WW��eX,��9��H����?��\bd:\u000bz�jl��֚�,}�V<\u001b�2(��=t��E�\u001dv�-���\u0003֜\u0016��|k�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4d8f7103-6465-413b-9829-4d49e0a8b0cc","seq":1,"duration_ms":101,"bytes_in":535,"bytes_out":14,"enriched":{"digest":"0b202a30e3881629","strings":["s3kI","yyxn","zm_B","\"%is,","KDe_","31WW"]}},{"timestamp":"2026-10-20T03:09:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-~CsRZ.2fzJ-D","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d7e4373525a2e32667a4a2d44","method":"","user_agent":"","ja3":"","session":"8d800324-83cd-4423-827c-343c38cd09d5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1cdae9cbad53c5c3","strings":["BitTorrent protocol","<-qB5200-~CsRZ.2fzJ-D"]}},{"timestamp":"2026-10-20T03:07:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u00061�S���>��q\u0004��S�l\u000ff0��F�1\u0018\u0011�\u001bed�vtHo\b��HF4p���\u0011��%��5a��N�\u0016p-��\u001e��\u0014�Y8R�\u001f�Z�\u0006�*\u0001\u000b^ik\u0016�^M�p��\n��Ur\u0002sy)3����\u000e�U,��\u000b�7�+=�\nuB\u0005�\u000b%�g�\u0007g�\u000bx�\u0017�ᑶ\b~1%$\n\n\u0017N�3�I|�#f�\u001e����=�_��@�\\�\u001d�\u0002��H�z)2cj�l)f��}��%���K6��\u0012�E\u0018�Y��+�Ȋ����60�\ṇi�ҷX,�Q%\u0001j\u0018D\u0006~���Q\u0004��#\u001e�:\"�f\u0007��<�Ԋ�a�2cSF�0-J�d�3B�lxl|�\n8��\u0011S\u001bץ{\u000f��n\u0013[��bLf�[\u0005�t{\u0018>�j\f�\u000b��<\u001fQ#�-'�ܼ �h��\u001f\u0016_�P�;*\u001fH�!F�t)ӤYҤ����\u0017�,J�\u0005L��L����-0\u0018�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7f71c902-3eec-4d36-95ea-6ab898acb18d","seq":1,"duration_ms":100,"bytes_in":365,"bytes_out":14,"enriched":{"digest":"5ac8b8e397f835e6","strings":["sy)3","~1%$","z)2cj","2cSF","lxl|"]}},{"timestamp":"2026-10-20T03:00:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-6TF.IiILqAXi","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d3654462e4969494c71415869","method":"","user_agent":"","ja3":"","session":"23dccd88-a5c1-4714-b3c6-29227418ef35","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e43431407604f7a9","strings":["BitTorrent protocol","<-qB5200-6TF.IiILqAXi"],"iocs":{"domains":["qb5200-6tf.iiilqaxi"]}}},{"timestamp":"2026-10-20T02:58:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ƈ�ޒ\u000b� �;�\u0010�\u001b[��tg�<\u000f�QoJ������JTHٳ\u0005��\u001a^W\nt}\u0001�8C>�*�}\b5��j;\u00143��.�%dC�$��i��_�C'pl=\u0001Pw�=��V\u0011����\\�tl{OJ�B�\u0000ӌ�~���n���9���f5Xಖ4k�=\u0005<%-��CD8mw)6\u0006���J��_�`\u0015�/�4b\b��Sc��m\u001a���Z]�\u000f�\u001b���x�\u0016���\u0005\u0002+P�R�٧\t�\u0004����/�vW�\u0001l�r\u000e�o�\u0014:,�\u0016P��&o��\u0018��\u0016�\u0014\u0010\u0016)\u0014�\u0018Tk�>6��]\\\u0018��/D�\u001fQ�#�KyS��E�ͱ���J�x�\b|�;��LV�H��i\fP�|����w�n�Yܘ.�s�h�>�]-�����s!4��l\u0019ݙY��&�=�Q\u00150s�\u001bz�ȸ�\u0007�W���v�a��$�w����\u0010�̗.�}��aN��Sy��\u000e=؜�=���\\�fP<\u0007��j�4���\u0002��|.�F���*��F�Xe�*ۘ�����p\n���#jn6�M���s��…S�O\u0006\u0005d�夆��Ҷ��s�b\u001d�g].z���^0JK��=\u0013Y��+��\u001fylfh~\u001a�\t�D\u000fx/er�������w�!\u0013=�s�*�@�7\u0016\u0002\u000e�5&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d9bd1a13-54a1-4a53-8382-22410789457c","seq":1,"duration_ms":101,"bytes_in":538,"bytes_out":14,"enriched":{"digest":"83d3218cfcb124e3","strings":["C'pl=","tl{OJ","CD8mw)6","#jn6","g].z","^0JK","ylfh~","x/er"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}