{"ip":"167.0.221.3","total_events":237,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["237 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 48,002 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"48,002 bytes sent","bytes_sent":48002,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T19:37:22","last_seen":"2026-08-19T20:48:31","events_24h":0,"events_7d":237,"geo":{"country_code":"CO","country_name":"Colombia","region":"Atlántico","city":"Barranquilla","lat":10.9711,"lon":-74.7837,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":237}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":92},{"date":"2026-08-18","count":24},{"date":"2026-08-19","count":121}],"recent_events":[{"timestamp":"2026-08-19T20:48:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-HzkpiQS_-)jW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d487a6b706951535f2d296a57","method":"","user_agent":"","ja3":"","session":"a10ee253-ab8f-4a23-80fd-0bd34b1567ec","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"7b6fc806dba8d422","strings":["BitTorrent protocol","<-UW1609-HzkpiQS_-)jW"]}},{"timestamp":"2026-08-19T20:45:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�T�\u001e�p�ٹ\"�?�$�BD�Wo���ꤘɂ4\tG7� �\u001dSG�#\u0006�tᓧT'PCy�g����Vm%�;�\u0000Sȷ*�ߐ[\u0019�]����I�\b���h��P\n7���\u0013,�eU3C�`H��{'zm��\u0006���gsX8��U�*>��|\u001dl��O\u0012�7�ڡ�\u0003:���M��\u0000�EQ��\u0010�c3c0�ʈ\f\u001bP�UN\u001dK�\nu�F/:H\u001c�4ڐ�ك�\u000e���U�h\u001d�\u000b��>����Af�Ƞ:j����;_�K�B\u0014\nB�غ\t\u000b�`�)�F��3pF��b5���/��� C ���\u0018���pl]F���\r#ޟR\u0017H\u0001\u0007�n�\u0014@\u0017����MN����R�\u001e����\u0006-�L��F�s�5��e��7\\X\u0000���rT]r4 ���L�G\u0016�0T��PS��K���\u001c~����R����\u0006I\fNs��)��)\u0001��\\�Y���?\u000b4��\u001f*\u0013Dh\b�\u0017(q;���Cpr1�\u0017�_�l���<��퉒�|s�r�I�L$���K‹O���8\u0001߼pV���l\u0014!�dų�O��yXpx\"N�l��r����<2x��}\u0005��������;�����\u0015X�X�Ns\u0002U\n\r6=�=d?9�k�\rjfm���v`z\\9R�F�<�\u0014�\u001a�\u0018ı74�\u0001\u0001�:թ���/t��l�\u0016��G�E�&#","payload_hex":"b754b71ea570bcd9b922993f8a24934244f4576fa581cbeaa498c98234094737f620bd1d5347fc2306cc74e193a754275043799e67a580afeb566d25c83bbe0053c8b72ab8df905b19815dc6ffbaa249bd08e5fdf868f5b4500a37e6e9a3132cf1655533438c6048fdfc7b277a6dffb906b4aeb267735838fcf755ab2a3ee4db7c1d6cd6d94f12bb37f1daa1b4033adaf9cf4da4d200d045518e8410a363336330c4ca880c1b50d9554e1d4bf10a75c9462f3a481c9b34da90c4d983bc0e81dbc3559a681ddd0bbdfc3eecbbf5ce4166bec8a03a6a8f92e3e93b5f8b4bc342140a42f9d8ba090b84609529c64694df337046a78d6235cbccf42fffa6c1204320faabe3188497cc706c5d46eabddc0d23de9f5217480107f76ea81440178e9f92e04d4ea2adffbf52cc1eb9979997062d9a4cfd8946e77397359dde65c0b1375c5800f7b7dd72545d723420e7d9c74ca84716fc3054a3a8505388834badb3f31c7edff9ebc452b68f959c06490c4e73edbc29bee62901c2fb5cf259a4cec53f0b34e98c1f2a13446808d41728713bf78ac943707231da17b85fc16c9fa0a53ce2f5ed8992bc7c738d72ce499f4c24c4cec44bc28b4f899a913801dfbc7056f6a9f56c1421a764c5b3e64fee9779587078224edc6cedf9728180d4ed3c3278b2917d05b1809ef1f881c6d73bb891d9ccf11558cf58914e7302550a0d363dc53d643f39fc6b8c0d7f6a666dded3c676607a5c3952a146bf3c9a14f01ab518c4b13734ab0101e23ad5a9e3e5832f74fba76cf61696aa47ce45e02623","method":"","user_agent":"","ja3":"","session":"64a51951-d041-442b-b7ae-87bdfb99e774","seq":1,"duration_ms":100,"bytes_in":570,"bytes_out":11,"enriched":{"digest":"83aa556d50994475","strings":["T'PCy","eU3C","{'zm","gsX8","c3c0","F/:H","pl]F","rT]r4","Cpr1","yXpx\"N"]}},{"timestamp":"2026-08-19T20:41:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-BaTAXGxYHfUn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d42615441584778594866556e","method":"","user_agent":"","ja3":"","session":"02644e41-0d39-4cf9-9153-65c085ea980a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"ee84c22102065b11","strings":["BitTorrent protocol","<-UW1609-BaTAXGxYHfUn"]}},{"timestamp":"2026-08-19T20:38:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"횘��+\u0015FxTk�H�\u0014��#�3`S\\L�4Ȕf�\u001c�P����V�|�n�Ў�}��oFa���=g9ٕ�ۭP9��;b�\"��+�f\u001b^\\��u�d\n�i^\u0018>u����g`Pǯ�=\u0000\u0010@�@B���@�\u001e#ݬp�g@EV���\u001d��\u0013\rW���P*�]�\u0001���\u0015yL��e�:�\u001a�H\u0007s�gxyi\u001c�9��W��yQ\\/p���c\u0010N%����+4\u001a�Z�zV��'�(���\u0012��Y_]��j\u0016>]�/���ȂK�\u001d|\u001b/K��;��$޲�޶�������-��p����ЇhF�� PS@\u0019�Eƥ�b�UR'b��od*ˮץ\u000e83�\u0018\u0016�:\u0016�D���H��8���\u0002�\u0006\u001appj���F����\f\"\u0015\u0017OB�c=�8\\�����5QE�ﭗ�V@�v����ӞX+��k���~�7��]�\nd>Z\n)B#%;MA��\u000ek�l�������i�\u0005�H���Y�����6�e�n�v[w\nJ!�4��\u0003��L�h\u0017���P���B/\u000f�:s\u000e��幕�͗[׵���\ndҭ���\u001d���\u0003\u0001�","payload_hex":"ed9a98cadd2b154678546b9448af14889a23943360535c4cb634c89466c21ce550dbe4d0f056a37ca66eefd08eb27dd1d86f4661aabcb23d6739d995e8dbad5039b0c23b628e22bdd42bab661b5e5cb8cf75ae640aa3695e183e75ad9c7fa9ee676050c7afcf7f3d001040c34042b3a8a940e01e23ddac70da67404556a3ff9f1dc9f5130d57cbf3f8502a855da401eaedb415794c85e165b23a811afa480773e7677879691cb33987b857cbc379515c2f70aff9a463104e25e798ffe72b341abf5afe7a56e0df27af28ebb3ca12b885595f5d94e46a163e5d922fcec9eac8824bc21d7c1b2f4bbcf93be09024deb2bedeb69bafd9f1b1bbf72daea370ac89a2dcd0876846adea20505340198445c6a5d062945552276286976f642acbaed7a50e3833ef1816c23a16cd44eec08648a3f638fb8dd902da061a70706af68bc546aaac81f70c2215174f4285633dfb385cc0ffafa8fb355145f3efad97c05640ef76a5ebb1ecd39e582b83d36bcbd5f27e9f3790825d9b0a643e5a0a294223253b4d41f6d50e6bc76ca8a782faeaf98969d405dd4890a7c559fea9f6ced536be658e6ea8765b770a4a21e634a18203a3ac4cd76817b999ac508683b7422f0f893a730e99dae5b995d6cd975bd7b5d6d5df0a64d2adf48bf51d81fc900301de","method":"","user_agent":"","ja3":"","session":"341d0e76-5344-4637-8f41-839514023cc9","seq":1,"duration_ms":100,"bytes_in":478,"bytes_out":11,"enriched":{"digest":"fdc8df240d096aff","strings":["FxTk","3`S\\L","g@EV","gxyi","yQ\\/p","UR'b",")B#%;MA"]}},{"timestamp":"2026-08-19T20:35:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-loG9xea5(PLr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6c6f47397865613528504c72","method":"","user_agent":"","ja3":"","session":"f836a94c-93fb-4341-ac2b-32c36969cb0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"d31ea49ab964cffb","strings":["BitTorrent protocol","<-UW1609-loG9xea5(PLr"]}},{"timestamp":"2026-08-19T20:31:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"z\u0019���OEc�(�U�&���\u000b\u0018{(���k��\u0011\u001dxE��8p�R\"\u0013�'5S�\u001d��GfM��˷��7(�fM\u000e�0��|ґ�\u0018�\u0000�\u001f��bɌ48�\u001b\f��@P�Ο�*綥\u001bح\u000b\u0007\u0002\u001bg&w�\u000f\u0019�\n�\u0010���yU�����1�N2L�ޝ�m�|\u000eG�\u0011\u001c�\u0015r8�L|+?S���sAr\u001a��\u0002�:c�\u0012\u0011S\u001e��Ka�uYpO���i�\b8$kc��u������~;\u0015�U���\u001c4e","payload_hex":"7a198e9de44f4563ee28cf55e9269997cb0b187b28cdd4d36bbd9a111d7845a19e38709a522213bf2735538e1d86eb47664df684cbb7ddf0372893664d0e873081d67cd291fb18af00891fa6ac62c98c3438fd1b0cf5ec405086ce9f8c2ae7b6a51bd8ad0b07021b672677ee0f19d70acc10be7f87ad795595f890dae6319b4e324cb9de9dfa6d8b7c0e4788111cdc1572389b4c7c2b3f53ff92a77341721a9dd702f53a638d1211531ef2f54b61f17559704f9dc8fd69e80838246b63a2f375c9e5fc9e91b97e3b15e355efdbf91c3465","method":"","user_agent":"","ja3":"","session":"e6a925f9-5c93-4b48-ba43-e8e69f45540e","seq":1,"duration_ms":100,"bytes_in":209,"bytes_out":11,"enriched":{"digest":"578cc8df77c02dbe","strings":["L|+?S","uYpO","8$kc"]}},{"timestamp":"2026-08-19T20:28:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-fQmg6SO7b1Ds","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d66516d6736534f3762314473","method":"","user_agent":"","ja3":"","session":"369425bd-dea8-4453-a9aa-3b83d995a33f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"26a4269e6f0854f3","strings":["BitTorrent protocol","<-UW1609-fQmg6SO7b1Ds"]}},{"timestamp":"2026-08-19T20:25:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\fy\"?tyپ\n\u0004�]\u0014\fz�f{�mZ��a�΋��\u0011\u0003Ф\"��ۭ��\u0012q�\u001d\u0002�V���9jR�6KՒ�F��Ѥ�֫\"jh��*a\u0004��eۙ��Q��\u001f0{p$f�\u0002��\"�Ex��J���\u0010��.�<���~\u0017�dz��8b�UI��w9\\��\u0002��O�!:��\u00009*\u0006M\u001f��[֋�\u0017wjϿ5��g�ʝ�~K-�$�+�/��{)\u0015u^\u0005GY\r\u0004+��tm�K�Yodm�iu�\"i��\u000b��x�;\u0019\n���3K2�|�3V;�<\u001a�W\u0000V�\u0012v��������\u0013n�T,Q��5aa��7B-�fKn�-���C\u0013.=����;�64�\u0004��[�\n.\u0010�))��\u0006��\u0017�\u001e�\u0007����ے���W��O{8���>����\"j�Ć�>�&>���+�{\tp","payload_hex":"0c79223f7479d9be0a04ae5d140c7a88667bd66d5aeddc6185ce8bba9d1103d0a422ffb8dbade1881271981d028956c7f28d396a52f0364bd592da46bea5d1a4a2d6ab226a68c1b82a6104b1a465db99a5c351c1df1f307b702466d902eef922f34578a8bb4ae5d6ff10ecd72eb53caefe857e1796c7b39fef3862b65549f9f777395c7f8fce02a0c84fa1213ad5eb00392a064d1f83c35bd68bb717776acfbf358de067e6ca9da57e4b2df024822bd12f88e07b2915755e0547590d042bbcd6746dff4bc5596f646dc069759e226980960bc2c078e83b190a8bf7ba334b32cd7c9a33563bb63c1a97570056951276eae4b2f8c2eb81eb136ec5542c51b799356161e8f437422da3664b6e932df4c09d43132e3db185f3c63bd43634f504f59d5bb00a2e10e32929ecd706f5fe17941ee207c6f8aab7db92f8b9f757cada4f7b38f9b4aa3e8695becd226af4c4868f3ee6263e8585af2bf37b0970","method":"","user_agent":"","ja3":"","session":"ab94861b-13d2-46f7-aadb-5af02a2beb6a","seq":1,"duration_ms":101,"bytes_in":347,"bytes_out":11,"enriched":{"digest":"b58483d7fccc0f8b","strings":["y\"?ty","0{p$f","Yodm"]}},{"timestamp":"2026-08-19T20:21:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-xAErs8e3(B9q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d784145727338653328423971","method":"","user_agent":"","ja3":"","session":"0276e0c5-926e-496b-9a17-e1527e607976","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"974f9f1f1c0d5516","strings":["BitTorrent protocol","<-UW1609-xAErs8e3(B9q"]}},{"timestamp":"2026-08-19T20:18:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Q\"\u0015S�ӻ�o+\u0018����\u0013�1n\r�<��`�!��y��E���ٲ�Կ\u0015p/�ѳ��ĥ9$h��BM�S��%o��\r9y΁�ח\u001b�\u001c�#\u0012<��v\u000e��j^B���t��68�ԧ܇��tj\u001b;^�d�0����*�H��r䝈\u0010�\u000e$6��","payload_hex":"a35122155388d3bbf46f2b18faf391d71385316e0deb3ca68860c52197ad798cbe4583e884d9b2e1d4bf15702f81d1b3aecfc4a539246886e9424dd553edc1256fcffe0d3979ce8189d7971bbe1cee23123ce2e6760e99b16a5e42c4f9cb7f748c873638dbd4a7dc87a9c1746a1b3b5ea664b430d3f1c1902ad848c9f372e49d8810a70e243689d9","method":"","user_agent":"","ja3":"","session":"9245b791-90a2-49c9-b28c-d8d41a95f915","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":11}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:21:30.982707+00:00"}