{"ip":"190.67.147.153","total_events":322,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["322 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 65,212 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"65,212 bytes sent","bytes_sent":65212,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-30T20:46:57","last_seen":"2026-09-02T17:41:31","events_24h":0,"events_7d":0,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4357,"lon":-75.2029,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":322}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-30","count":144},{"date":"2026-08-31","count":70},{"date":"2026-09-01","count":13},{"date":"2026-09-02","count":95}],"recent_events":[{"timestamp":"2026-09-02T17:41:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Oe5n3oo2TE6)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4f65356e336f6f3254453629","method":"","user_agent":"","ja3":"","session":"672bf974-415f-4640-88cd-7d6a79209240","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7a934b2b14ae6f7d","strings":["BitTorrent protocol","<-UW1605-Oe5n3oo2TE6)"]}},{"timestamp":"2026-09-02T17:40:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001bxTd�\u001d+u,\u0018�av[L�g����@-�cpq��p�I�k��`w�vf�P�A�$\u0016t\u0002�`)��j�s:\fk׳H���@�\f�\u0005F��4ȁO$�q�N���\u0016\u0011�]��8�p�#5�>��uY@d%Ef�jR�:&����5�u�i�m)\u0013��I�\u0004��)M�=��\u0012\u000bJ\u000e�(ze/�\u0005W�\u0018*�\u0016�%��]}I�;�h�[\u0007;\f����\u000b܀���s,i��aAͷp|!����B14~��bҐ�b̃J����E�FU\u0014u�۪�J��MV�����s����]t2�\u000em�{\u0013\u0001�\n����p��l\nv�`\u000e������.9�iXJ�����&m5>����WRq��<]0\fݸ��(\u0015��#���7Ϋ�R�&\u0014|*�\"�-�rI�Tx��'���\u0016)}G��X5�l1et_�ۯ��H(��ߊE\u0012��'\u001a�q�\u0018�^�ti�}�?&�+�\u001b+u�m�F�hĢ\u0003|\u0001\u0005�z�Š�d~2P�s�֑\u0010\u0000,g�v�h�Ɲ�\u001c�\u0019�v�F\u0005��c\u0018�~�'zlO�-�jy�qNUГ��!C�=�\u0006͏5/M�\u0011\u0000�\fo��K�+��\u0000�~��/\\\u001f,\u0011��A�����`Գ�˧�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"de9b0992-8e88-4f48-b5df-19b495b98ce6","seq":1,"duration_ms":100,"bytes_in":593,"bytes_out":14,"enriched":{"digest":"2a305b7af8127516","strings":["av[L","uY@d%Ef","(ze/","B14~","&m5>","l1et_","d~2P","T@p&",">'zlO"]}},{"timestamp":"2026-09-02T17:38:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-ctyWVW3jiV62","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d637479575657336a69563632","method":"","user_agent":"","ja3":"","session":"438d933a-aaa6-46ad-aaf5-fe7f228a554c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"add72db1cfd41789","strings":["BitTorrent protocol","<-UW1605-ctyWVW3jiV62"]}},{"timestamp":"2026-09-02T17:37:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R��-K���8=�N��^�����\n\t��\u0001\u0016|\u0006�7�o;\u0013�g��\u0002\u0005\u0018�!#\u0007\r�D5�\u0004v|�V~\u000b\u0005_HCW\u000b%R/x���,�c�BEY0A\u0012��i\u0018�SFε��f�b&�[�EZ�pE���z\u0015\u0017�1�q�j;?�XOˬS�QTBE^�I�A�=.\\���%ǂ{W�gӽ��Ybx:�\u0012�\u0006ߔ]\u0005�{\u000eԢ� K;3���R_o���N�P�~�\u0002opWN\u0013�\u0001\u0005gW�v��#�܀P�-��t��d�s��I\u0002S��=���~aR�\u0004��OQ\u001a-\u00049��\u001fN��\fk\u0014�0?{\u0015\u0010a��V\u000eׅ\u000e.ZI'�\u001b��Bk\u0014�b��{|;q�+�\u000f\r����w�\u001a�Q���5��ޒ�����2��pʑ���B'�:Iۨ\u0016�g\u0000(��&5��\u001fnt��c�\u00078\u0002+O�0jL$!���)+\"�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e65b7fbe-85cf-459a-8cff-bf448163f5df","seq":1,"duration_ms":105,"bytes_in":364,"bytes_out":14,"enriched":{"digest":"e5783922fc0f6ddd","strings":["_HCW","%R/x","BEY0A","QTBE^","Ybx:","opWN",".ZI'","{|;q","0jL$!"]}},{"timestamp":"2026-09-02T17:36:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-OR0ZdWnVm(s8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4f52305a64576e566d287338","method":"","user_agent":"","ja3":"","session":"49f7babd-cfa9-4666-8b0f-b86f4c9ef2fa","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"791c3f15998f13bc","strings":["BitTorrent protocol","<-UW1605-OR0ZdWnVm(s8"]}},{"timestamp":"2026-09-02T17:34:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�3�$,@�\u001b��@D����~\u0016�r�\bת�7��\u0013��1�\u0001ؖ=r�L���C����9�v���7����\u0014�$,,e\u0004\f\u0000���fZS��NM�X��A\u0013צ2�%��e���\u0014��ֲ\u001a��6-��@^\u0004.�|<��\\d���4�*r2��_F'\u0001�YTe\u0017/I=�\u001d>\f��\niu\u001b�C6��D���\u0016��(�\u0011�XF�P��M�U�;L86\u001b�fJ\u0015����A*�Qn\u0002��&\u001e�5|-�i}\t�\u0006��\b\u0005���^U��\u0019c“�^\u0007���[��O�R�S=��\u001c��4��z\u001f�;��R(�K��L����s�\tm�m\u0013�?\u000f�k.Ȏ�sk��1��W�dI�{��&\u0010��\r�\u0003���׈!\u0006W","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a6a15030-94ed-4204-b2fb-0ba1b2809e79","seq":1,"duration_ms":100,"bytes_in":514,"bytes_out":14,"enriched":{"digest":"6420c6135b7653dc","strings":["}M.)","0\\y*","$,,e",";L86"]}},{"timestamp":"2026-09-02T17:33:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-BV8)EhFXNF(l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d42563829456846584e46286c","method":"","user_agent":"","ja3":"","session":"e97e1a14-5d32-49ee-84fe-c96e394bfbaf","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"12b5120af19117be","strings":["BitTorrent protocol","<-UW1605-BV8)EhFXNF(l"]}},{"timestamp":"2026-09-02T17:32:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����!\\��m}��K:?\u0005a��v>�\u0000\u0015�ʏ���9kA\u001a@��k9��X��I[5����\u000e�_��ҋ��D�tP\u0019s/�H��:��1\\\\n倜��в�/�n\u000ep����Z�H�\f\u0019�q��V��S�C��\u001b\u0014\u0004lvH�������`\u0017X,:�g�+��\u0013r���X��K��$\b\u0017��Jcj�fF�\u0018Zo���+6!iv�","payload_hex":"8297b6f5d9215cfaa86d7d80b04b3a3f0561ecce763ec3001592ca8f92b293396b411a408ccc6b3992af58c9f6495b35d6c6e5e80efc5ff89ed28bccc6449f745019732f8b48fffd3ab1e0315c5c6ee5809cfff2d0b2bd2fad6e0e70f4a8ccc65aab48c30c19e971adf65690b2538543a7e11b14046c7648b5faa8f88ee78c6017582c3a9a67f32bc1c71372ffaaf158999d4bb58024081788e14a636afe6646e0185a6f9ba1f72b36216976d3","method":"","user_agent":"","ja3":"","session":"f18f9966-f3f1-4c00-b4fc-7e1f531cf59d","seq":1,"duration_ms":100,"bytes_in":173,"bytes_out":14,"enriched":{"digest":"9a5d881e0f489a17","strings":["1\\\\n","+6!iv"]}},{"timestamp":"2026-09-02T17:30:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-gNU3trWx!HjL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d674e55337472577821486a4c","method":"","user_agent":"","ja3":"","session":"131a1ff9-c89a-419b-876a-64031cea93d6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"71cd97277159a5ad","strings":["BitTorrent protocol","<-UW1605-gNU3trWx!HjL"]}},{"timestamp":"2026-09-02T17:29:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@�ۑr���9�I1\u0016�N�[\u001f���GBd�&m@\u000b�21=�+�~�8q9���d-��@޶���'�.$7�@2��\u0015\u001a\ro�\u001a�?|����d\u0006n@��7\u0014[�'�P��N�\u001dO����*8��ȇ\u0005�G�\f��D\b���\u001eb�0Z�T�=��\u0007h�\u0006\u0013\u001b\u0014��x\u0016�\u001c\r\u0011S��#9� \u0002\u0005U\u0011<��^d\bcQ՗>��XI\u0004w\"\u0002I;t��=��'�I�䪁\u001b���\n�as�m� ����Y �p�Pk�q�o�#3�wE�Y\u000ev���\u0012l��~�}�\u001cL��S\u0001P�a�%\u001eC+�&6�\u001f\u0019�\u000b��\u0014vM�qe2ˬ��{H�\u000e�\u001e��'\u00128�\u0007�� i\u0017Vj����W\u001d\u000f\u000f��'\u0002\np�WȘ-\"\u0007�","payload_hex":"40e4db9172acb0fa399b493116b54e9a5b1f94e9cb474264dc266d400bba32313da32bb67efe38713985d8df642dfcf340deb6868fd727a12e2437e94032afa5151a0d6fca1aaf3f7cebfa938764066e4081fc37145bcc279550bbbd4ec81d4fe1a7e9a52a38b0b9c88705ba47860cec8f440893edb41e62d3305aaa54f23dfe960768c006131b14d9f078163c63a446aaffc8f500a2063103530384a1abecc68794a4bc74d1d31cb3829abf4b5ee7db2086044937757902599e2f2427e4559fbe3c575cf462f9d410ba3e3c6de235330502d8e7ad4ed4f6d455b93ceb3a29ff1461eca1cd70713c734ee4dd5f1d2210f1739f9b62264195de703284ceb8da84941da493b2c7a7e2a10830997295cd6a334bc0cd7d1084cf6287f1df991b73832ffc839d9e4652568e0e13df2eaf08dc2a8cdfdb49f5e5b16635fe21380505408c51b9f74822b776080fe19d46aa874f572ce3e9c285d3659af646bc68f4353c011fc848dfe86f427a800c106ad8fb452e53d11b8a86561d976c821d9775635a90bb7964743cabaf69460609970b875b4234620ffcab31033c8d3366799eb747b3ebe977123feb1511733ef71c0d1153ff932339d820020555113c8dfe5e64086351d5973e92d0584904772202493b748ca53de3d127a849f0e4aa811b9dbca00abd6173ca6daa20b6a5e0c75920d870aa506baa71b96ffc2333fb7745c6590e76e9f9e1126cb1837e807de01c4cb3c053015085619f251e432b962636971f19830b8a9314764df0716532cbac8a8c7b48dc0ec71e919a271238a307a081206917566ac3c2c3df571d0f0f8ef427020a70b957c8982d2207e0","method":"","user_agent":"","ja3":"","session":"a7ff5865-9d12-40a8-a93f-c09ac0cef1c6","seq":1,"duration_ms":100,"bytes_in":601,"bytes_out":14,"enriched":{"digest":"56d1f55c103aa143","strings":["I7uy","pq