{"ip":"190.25.28.195","total_events":83,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["83 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,644 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,644 bytes sent","bytes_sent":5644,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T20:32:10","last_seen":"2026-09-05T06:00:16","events_24h":0,"events_7d":83,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.7088,"lon":-74.0638,"asn":19429,"org":"Colombia"},"source_domain":"dynamic-190-25-28-195.dynamic.etb.net.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as19429","label":"ETB - Colombia","category":"isp","url":"https://www.peeringdb.com/asn/19429"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":83}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":17},{"date":"2026-09-05","count":66}],"recent_events":[{"timestamp":"2026-09-05T06:00:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�u���J775��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb875858bb04a373735b1cd","method":"","user_agent":"","ja3":"","session":"873b271c-0388-47da-85ab-16ed50a6ef00","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d4b062a3f76778a4","strings":["BitTorrent protocol","<-UT360W-|","J775"]}},{"timestamp":"2026-09-05T05:53:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�ѭ�0�O+.^l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8d1ad9d30b24f2b2e5e6c","method":"","user_agent":"","ja3":"","session":"0283510c-211b-4916-91c8-1f3a9c3b6e41","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6fd0ffe3e3470ded","strings":["BitTorrent protocol","<-UT360W-|","O+.^l"]}},{"timestamp":"2026-09-05T05:48:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���F�}K�=D�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8bee446d37d4b8b3d44af","method":"","user_agent":"","ja3":"","session":"c4755aeb-a642-49b5-ba32-4b63302af978","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"24498b7783906900","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-05T05:45:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�\u0007\"VW�ZhNg\u000b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb807225657ef5a684e670b","method":"","user_agent":"","ja3":"","session":"4ff4a9c7-727d-446e-a322-02a6fb2b4ddf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bae41590241c3b4e","strings":["BitTorrent protocol","<-UT360W-|","ZhNg"]}},{"timestamp":"2026-09-05T05:43:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���?�\u0013�TC\u0018;","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8a0843ff413c55443183b","method":"","user_agent":"","ja3":"","session":"bad84736-e4df-4d4f-8fe2-80f1b80bff7f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e13680364f082fe6","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-05T05:41:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�\u00176\f��,a�\u001d\u0001","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb817360c95a42c61cc1d01","method":"","user_agent":"","ja3":"","session":"64b75da1-0559-40ce-8818-843e4a9d5e97","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bfcc283b3bf0d340","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-05T05:39:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�.\u001d�|\u0014d!/`n","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb82e1dae7c1464212f606e","method":"","user_agent":"","ja3":"","session":"a0419e75-bb95-400d-9154-63e15192967f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"801e904cc0ed3e59","strings":["BitTorrent protocol","<-UT360W-|","d!/`n"]}},{"timestamp":"2026-09-05T05:38:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��3n>\u0013\\u'�\u001e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8a0336e3e135c7527cb1e","method":"","user_agent":"","ja3":"","session":"51900803-4459-4fb4-9b98-c6f7e5db1ca2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c0c08b56a6eb3652","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-05T05:36:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��k��h�Fɔ�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8d46bf8bb68d146c994a7","method":"","user_agent":"","ja3":"","session":"cd0caf2f-a989-4d91-a62b-8a7db98f336e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f274071d6c928b1e","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-05T05:35:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���)�x\r�G�p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8d6ee29be780d9747e570","method":"","user_agent":"","ja3":"","session":"3d8d966f-fc75-482c-8124-7b24d4a878fd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1359517e8b65dc81","strings":["BitTorrent protocol","<-UT360W-|"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-09T06:43:22.865316+00:00"}