{"ip":"190.131.251.131","total_events":122,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["122 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 24,862 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,862 bytes sent","bytes_sent":24862,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T14:13:49","last_seen":"2026-10-05T13:15:44","events_24h":5,"events_7d":48,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.7124,"lon":-74.0367,"asn":262191,"org":"LIBERTY NETWORKS DE COLOMBIA S.A.S"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as262191","label":"COLUMBUS NETWORKS COLOMBIA","category":"isp","url":"https://www.peeringdb.com/asn/262191"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T13:11:15","last_seen":"2026-10-05T13:11:15","recent":[{"timestamp":"2026-10-05T13:11:15","port":39131,"src_port":51507,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�C>�\u0017�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100e2433ed217e90000000000000000b4e60000","sni":"","session":"18eab65f-7ec0-403e-9211-d865e6b18780","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":122}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":74},{"date":"2026-10-01","count":43},{"date":"2026-10-05","count":5}],"recent_events":[{"timestamp":"2026-10-05T13:15:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-DSeDNEFw5tZc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d445365444e45467735745a63","method":"","user_agent":"","ja3":"","session":"c8066230-b273-4187-bab3-e7c20e078a13","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"08a95b463edaf58d","strings":["BitTorrent protocol","<-UW160N-DSeDNEFw5tZc"]}},{"timestamp":"2026-10-05T13:14:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��/D�+xZ�\u001a\u0011�<\r���\nnZ~�Z�����\u0004@�@\u000bV\t\u0011�B\u0013�\u0016�\u000f柏�h�\u001d�A�3+-��\u001c\u0002^κ\t>�\u0011K\u0001\u0011l�+�\u0006�=��!G,Gri��Ave�(�㌆��H-NF�\r�����e�0`�o����^���nλV���;��&85���M�f\u000b�w.^v��\u001b���IK\u0002b�jy{\u0005��\t�vp�^L7\\7�ف��/+���\b�j\b'7pb��\u0015�����Q�\u0010��V\u0014�\",��Q\u0016�5>��%������\u001c�����zr�:������X\u001e��v�)q�#\u001f\u0002�,&HWQH�\u001eU�\u000e\u001a�y�N-�_~k�{����\"\u0003","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fba132f1-1c86-4168-a0c9-449ec960ceec","seq":1,"duration_ms":100,"bytes_in":288,"bytes_out":15,"enriched":{"digest":"eed5e09c73f70b8e","strings":["!G,Gri","H-NF","w.^v","^L7\\7","'7pb",",&HWQH"]}},{"timestamp":"2026-10-05T13:13:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6tYA(upBmFZ8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d36745941287570426d465a38","method":"","user_agent":"","ja3":"","session":"d4cea1b0-1c83-4ded-8001-192261326b91","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4c685dc59c862944","strings":["BitTorrent protocol","<-UW160N-6tYA(upBmFZ8"]}},{"timestamp":"2026-10-05T13:12:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":" �\f6m��#\u0017�E>��\u0014�.ah�r$\u001f��\u001c���\u0004m\u0014|D'�?g�\rt6S��WÛ��[��3��\u0016��=�=\u0017nwy�\u001e�����\u001d�b��\u001c���\u001bEo1�o\u0019z���X���y�\rԠ[�_��d��f<@\u0003\u00146s�~\u0006]\u0007绣\u0015�\\\u0018�Ï���@��nN?�r�\u0014�\u0006��\f�1�aUG���h�w\u0005\f�","payload_hex":"20c40c366d87d42317ee453eddf814922e6168c772241fe9a21cb1c0df046d147c4427953f67e10d7436538ad657c39b9dcf5babfd33ab8916a1bf3d8a3d176e7779d11eadfaa9d0d41dce62b59f1cb3a4f21b456f31f86f197adad4d258b79f9379e90dd4a05bec5fabc864e6c1663c4003143673f67e065d07e7bba315ab5c18a5c38ff6f8fd40e1c16e4e3fd97295148206b6d50ced31ee615547aaa6b068d677050c82","method":"","user_agent":"","ja3":"","session":"dc5647b2-53eb-4ee5-aa2b-52c548f67ef1","seq":1,"duration_ms":100,"bytes_in":165,"bytes_out":15},{"timestamp":"2026-10-05T13:11:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-rELaQRYDs.x*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d72454c6151525944732e782a","method":"","user_agent":"","ja3":"","session":"fd03f00e-98fa-4e78-b51c-4a1cc3a73b26","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"10d61ea82058b3f9","strings":["BitTorrent protocol","<-UW160N-rELaQRYDs.x*"]}},{"timestamp":"2026-10-01T22:35:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0002޹��\u0017Z�I�\u0000�\u0007�\u0014��{7!%�ľ�9�a�@\u0013M�Q�A��\u0001U�uE�HI���<JD��J�����W9ګj俆p1�!g�}\u001a�\b\u0001`~+�����>HLZ��S6�\u001bz��%�\u000e�\n[��Ū\u0015��5���\u0018(�5J\u0007��\rrN��(E���\u0010\b\u0000����\u001c�\u001b�\u0012��A�\u0001�si\b��T�~9\fX�i9�\r|�l������>��\f�Z\n������^��?�ku@.MmR��η�u=g3\u0001gδG�tsO0?��\u0013\u0007t�i��\\��|Jw*�����Y\u0012��\u000b�R\u0012v�77����\"K��\\�(>nu�f!(�\u001f\u0011����zȀ5��\u0014<�y\f|��/�݁��T\u0010N\u0004M�6�8�2*Za\nK��k�e��\r\u000f�M�\u0010I�l��'�U6��̹䁑otf\b���a�/s�����B���_d۸\u0017\u000fW�e+\t�fU\u0006��-\"��\u0019��!$^\u000f�^�\r)2�\u000eĤo��24���ᦅ{\u0001|�\u0007(ķ�_�\n�q3s\u001c��9�6��\fv��qݮ��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fe9ad4c2-0451-4a27-862d-3be205d9e0c7","seq":1,"duration_ms":101,"bytes_in":449,"bytes_out":15,"enriched":{"digest":"cba1e4fb57ff019b","strings":["{7!%",">HLZ","ku@.MmR","u=g3","tsO0?","|Jw*","(>nu","2*Za"]}},{"timestamp":"2026-10-01T22:34:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-AbJPoTpB)Kkz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d41624a506f547042294b6b7a","method":"","user_agent":"","ja3":"","session":"0fd96cc5-0a06-4688-908b-bc6b82e9b878","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"cffbe692fd8e259e","strings":["BitTorrent protocol","<-UW160N-AbJPoTpB)Kkz"]}},{"timestamp":"2026-10-01T22:32:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�`QP���\u0005\u000e���\u001e|�d�.���S���\u001a���X!$��\u0010��f@\f=�\u0004ر\u001a4l�y���\u000b\u001fs�;�f��B]̷\u000e���?\b3�G\u001e\u001a;�Ě�\u0002Wu3clH^��d\u0017E�/4��\u0003:ƀ����vU�\u0000�J���d\u0005�\u0001��e���-Li�O> ~�C�&�'|�TJ���H�\u000f�=���ޓ8��\u0014� H�\u001f�]\f��Ϡ��\u0007�p\u001c\u0013x\u0019�D�����,�0o\u000b��x�����\u0013m���|!��� ��k\u0005�1�^Q�����M=�ܛ��\u0001;�U��\"�{D����\t\u001c]\u001d�\bN<��*QKE�\u000e7+\u001c\u001d��uB��F���ߛ��Vgo��XM�'y�3+nͮ�\u0015v_'�M:�%+�+��ɷąP��\u0012�ҹ����0��3�v�\n�H=\u0010[S�+=�@q!\u0006\u001a\"\u000f�0Z(\u0005����,W4�+\u0019�����k�\u001c�[��c���N?���A'�)�e�\u0018V��\u0006j\b��9�����_G<�r","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"72bb87f0-0582-4a59-9a5a-ce0be498a5b8","seq":1,"duration_ms":100,"bytes_in":418,"bytes_out":15,"enriched":{"digest":"0a7bdc36302ca5db","strings":["Wu3clH^","O> ~","*QKE"]}},{"timestamp":"2026-10-01T22:31:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-gK0oDVCP9dQj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d674b306f445643503964516a","method":"","user_agent":"","ja3":"","session":"f68cee9b-7986-4cbe-8f80-f61e47ec3473","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0b140919434d795e","strings":["BitTorrent protocol","<-UW160N-gK0oDVCP9dQj"]}},{"timestamp":"2026-10-01T22:30:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j�ĳ{X�Q\u001f�ђ�GN��\u0001|P�Wsҩ;�S\u0010���3��+��T&�����iT�\u001b��ʶBu����\r�1`�\r73\t�r��?�����'�$���䘥�\u0003�\u000eE\u001e\n�T��3���\u0019�ZI\u0004]jS\u0007\u0002������P\u0000�v��?���0�j�\nȚ�u@\tGl�","payload_hex":"6ae3c4b37b58c1511fe5d19287474e91bb017c50d85773d2a93b985310c4fac633c4c42bfa965426fad3d3ecef6954dd1bf8c9cab64275cdc9e4990db33160a40d373309e07294ed3fcae5fdfdeb27fd24979692e498a5ff03b60e451e0a9c548dad33fb9b9d19f05a49045d6a5307028ca9f5bca4925000d276b3ab3fb8c4e030d26ace0ac89aef754009476c91","method":"","user_agent":"","ja3":"","session":"1306a90f-aca4-47cd-94d0-2df93302e949","seq":1,"duration_ms":100,"bytes_in":142,"bytes_out":15}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:42.409089+00:00"}