{"ip":"190.67.148.155","total_events":430,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["430 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 91,908 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"91,908 bytes sent","bytes_sent":91908,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T00:14:12","last_seen":"2026-10-05T13:53:49","events_24h":133,"events_7d":430,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4357,"lon":-75.2029,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T12:26:13","last_seen":"2026-10-05T12:26:13","recent":[{"timestamp":"2026-10-05T12:26:13","port":39131,"src_port":50907,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000���J�\u001d\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"410084ded44af91d00000000000000009cc80000","sni":"","session":"ccada3ec-d314-4571-ad43-8a07fda694ce","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":430}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":379},{"date":"2026-10-05","count":51}],"recent_events":[{"timestamp":"2026-10-05T13:53:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-k-JZVgULuDJq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6b2d4a5a5667554c75444a71","method":"","user_agent":"","ja3":"","session":"c8ca3a84-9bf9-49c3-b561-fca817529e09","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5993083bd2d9f514","strings":["BitTorrent protocol","<-UW160N-k-JZVgULuDJq"]}},{"timestamp":"2026-10-05T13:51:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"4\u0015�\u0016�Y��ٌ@c����\u001c�\u000e��3\u000b_D>'�tG\u0005MT�:ڹ\n��C�r�=Y�]*��\u0017�ZL\tU<ܤ\u0016\u001a�(��p���>&&�!����=E׊���|�\u001f��O#��\u001eE!\u0014\u000f��=�n�}`��\u0003���KQ���\u001c�ѦɍX�\u000fS���I&�Pqi]��i� ����q3੄g��\u001a��h�|T�&�Z�\u001f\u0010\u001b���~�UM�2���\u00010\u000b�\"�U��\u0017�7e��J\u0014Z�z�}A���*�\u0015�g�\u001e�(똠$U�v��.@yBՒfӱW�M��ѲԄb�8��ֲ�6��nf��ՠ�8a*���QP�7Ї��߆��5މ�`��\u0004�D��x��1\u001f�\fM?H_�|�ҘQ\u0019!)�?��������+?�Yε\u0015y���z�vlE�C�K�\\���2�O)��J�,:ʼn�_?�k���\nrK��R,?�dLN$�2F��","payload_hex":"3415b516fe599a8cd98c4063a5f5cdf41cff0eb6ff330b5f443e27ca7447054d54ac3adab90abcd3439772a93d59965d2af6c317b65a4c09553cdca4161ac028becd70daf4903e26268221bfead5d93d45d78a8bbae47c8b1ff5f24f23d2d91e4521140f9b803dd16ebe7d60afbd03ef89d24b51acdfc81cf1d1a6c98d58ea0f5394cce04926ff5071695deee3698520f899d2e67133e0a98467f9c11a82f768c17c54ce26b55a8c1f101b98f0b77ef9554d8232bfd9ea01300bcb22b4558d8d179f3765f2c94a145afc7ad77d418baae72aed15a267991ea728eb98a02455e37697972e407942d59266d3b157e24dc1b5d1b2d484629b38b5d3d6b2ff369e916e66a3a3d5a0b238612af58bf25150ca37d08796dadf86f0e135de89df60fa8e04cd44aecc78e0e6311fc10c4d3f485fca7cbed29851192129f93f9e8fbf8581d1f2a12b3fb759ceb5157992bc9f7a85766c45a743b84bf75cefe49c32b14f2997df4aee2c3ac589de5f3fe86bfaa3920a724bcdcf522c3feb644c4e24a03246f4cb","method":"","user_agent":"","ja3":"","session":"78e33a76-a81b-4fb8-bd9e-5ded6bf6d076","seq":1,"duration_ms":100,"bytes_in":386,"bytes_out":14,"enriched":{"digest":"14c2f333c5648438","strings":["_D>'","Pqi]",".@yB","M?H_","dLN$"]}},{"timestamp":"2026-10-05T13:49:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-bbsolftlF0q_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6262736f6c66746c4630715f","method":"","user_agent":"","ja3":"","session":"040126ff-8dbc-4b74-a103-1ae06be0c076","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4899cbd77b74c8b3","strings":["BitTorrent protocol","<-UW160N-bbsolftlF0q_"]}},{"timestamp":"2026-10-05T13:46:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000e�ǚS4$\u000eHz��\u0014����R\u0018��RT4�g�O\"A����\u0001����n\u0016�L\u0007�d�\u0010�b/ﮂ�;1x\u0003�V�;\u0006|8�`X�\u0012��bc7�R����.�Aq���\u001a�?_j�Fq�7\u0017��-?\u0016\u000e��L�\u0006r�C��*��Dl��].\u0019��q\u0003B��K!w.�4�#�����\f\u0007S�j\u001bbљ�\u0000","payload_hex":"0e93c79a5334240e487aada314a3b8e6c75218e8fb525434bf67eb4f2241d5c9e8e30190f4fe926e16cf4c078364fb10a7622fefae82a23b317803e956883b067c38fc6058ce12cfc3626337d752a5b4ebc62ef94171f9b48f1ab43f5f6ae1467194371798dd2d3f160ebe874cf30672b943efa12af0d0446c95a55d2e19fa87710342f2d44b21772eb834db23c1c7e189fa0c0753c36a1b62d199c800","method":"","user_agent":"","ja3":"","session":"6f8ea19b-53bc-4131-8ef3-b45431f05345","seq":1,"duration_ms":100,"bytes_in":157,"bytes_out":14,"enriched":{"digest":"a3bbad21e0ba4c9c","strings":["K!w."]}},{"timestamp":"2026-10-05T13:44:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-swxWndPcQi~~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d737778576e64506351697e7e","method":"","user_agent":"","ja3":"","session":"a63e9748-09ed-4d38-911f-71ec03cf1c5d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2e89ec87ccbc79bd","strings":["BitTorrent protocol","<-UW160N-swxWndPcQi~~"]}},{"timestamp":"2026-10-05T13:42:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�^�i���>�Y|�}_S\u0007�Lʍ}�=&����HԻ�[gJ�\t;����s���\u0012��2\"w�\u0017�r�����g�\u0002�\u001f�r�<#���&*�v���\u000et�\u00113+\u0000^\u0006���\u0012��ʜ��\u001b\u001e2l�e��\u001d�c���!�� I\u001e�w\u0016\u0015�$�\r\u000bU)���lFN\u001dǙ�t<��}�s@�<\u0003��+\nt L:^�����˰�\u000f�~S\u0014�ѣ�^\u0007�;�B��\u001c@k����%ơ����&�a4�cϕ!Ӓf\u001d$\u0012@��m���.\u0016��\u0015�Χߙ�G\u0013\u001a�b��\f��YLH�`8禛�H��C�5�\u0018��-»zU\u0012","payload_hex":"9d5ea169fc8b983e87597cc57d5f5307894cca8d7df63d26ada7f5d248d4bb975b674ae3093b9f94ff8c73a59eff12edcc322277be17e372f28fb0cac067a002f11ff072e53c23e3b3c5262afe76eec1ef0e74ec11332b005e06b0adff12d9f7ca9cf7a31b1e326c9e659ca71d9263f1d5c021819a20491ed3771615bd24a20d0b5529a79ba56c464e1dc799ca743cd1fd7d877340e83c039cff2b0a74204c3a5eace5a2c0cacbb0d00feb7e5314b4d1a38b5e079d3bac429a821c406bd3f493d925c6a1bbf285a226bd6134f963cf9521d392661d241240b1ae6db7a8992e16a5a315cdcea7df99a147131aa762a0e50cbabb594c48866038e7a69baa48a98243f435f318a9d02dc2bb7a5512","method":"","user_agent":"","ja3":"","session":"979d39b1-43a7-4714-9507-f0600d05cdbf","seq":1,"duration_ms":100,"bytes_in":269,"bytes_out":14,"enriched":{"digest":"cc9d1cc153cfa368","strings":["t L:^"]}},{"timestamp":"2026-10-05T13:39:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-b_PVgQ2jo3ru","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d625f50566751326a6f337275","method":"","user_agent":"","ja3":"","session":"4e6b72b2-9586-4d0b-b69e-47db6349cbfe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ba5aeefafad80629","strings":["BitTorrent protocol","<-UW160N-b_PVgQ2jo3ru"]}},{"timestamp":"2026-10-05T13:37:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�@�����1�4�b��-W8\u0014:!��pA�˞[���\u0019\u0001\f\u001b䪑�6�|g\u0012T����vUCQ\u0002���\t溺�G�\u000e��\u0002�؀3�S/9�u��*:\u000f1e��]! \\�q\u000e&�A���&����@&D��K�7z\u001e�ٔ6.Ц��\u0015","payload_hex":"a240f2f980bbb131a934de62a0d22d5738143a21a6e97041a4cb9e5bdef08919010c1be4aa918c36c67c671254fefcf8837655435102a1c1c609efa7acd1479d7f0ea3bc0293d88033c9532f39b875b5882a3a0f31658a9e5d21205c9e710e26e441fbb3cd26bf9998b7402644a2d84ba5377a1e91d994362ed0a6d3cc15","method":"","user_agent":"","ja3":"","session":"8a20babc-34a0-45d4-9f82-b1004e1351ce","seq":1,"duration_ms":100,"bytes_in":126,"bytes_out":14,"enriched":{"digest":"fb92a1105f7c9576","strings":["vUCQ"]}},{"timestamp":"2026-10-05T13:35:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-E6lm7p4R__oM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d45366c6d377034525f5f6f4d","method":"","user_agent":"","ja3":"","session":"57087d50-03bd-40d0-a7f8-257e6f6e3fe2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"418c4d07e2db7a80","strings":["BitTorrent protocol","<-UW160N-E6lm7p4R__oM"]}},{"timestamp":"2026-10-05T13:32:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��O�\u001b|)��פz���%+��>��9n��3#��M��\u000e�0ou\u0006�\u001d���C/[�����\u0017�;�X�������r���?�I�w�yC�c�\u001d�|\u0013��]g4d3�[�!\u0012:������\u0019�]\u0003��\u000b�3��AȀm!!��Y��n��yh\u001en4$��A{�^�/��\u0012�ݷ��+/��~A���MjŒT�.�Ԩ\b}ʼn�\u000bc�M\u001f�\u000eΦȚm�V7�\u0018̊�\u0005>��n9�3\u0019��P�\u001e�~�.�[�\u0019�\u001bG\u0015���+���m\u0006mV��=ʦ�'!���c-\u0002)\u0013��\u0015��KFn�ؑ���l�v��\u0004k\u0014~�f�\n1\u0014�\u001a������y\u0010�\u0006l0�f�","payload_hex":"c1a44ff31b7c29a696d7a47a92f8e9252b98f23e9da6396e83cf3323ec894dcfda0e95306f7506bb1dfdd5e3432f5bdffbd8d9c417da3bbd58baf2e993cce0e272f49edd3f8049b577bd7943d863c21dbd7c13e9875d67346433dd5be921123ac9f6b197feee19ae5d03be840ba433ece241c8806d2121efee59a6936eecd979681e6e3424daf9417bee5ed92fee8412a4ddb7a2fe2b2fd6d77e41abb6c24d6ac28c54942eddd4a8087dc589db0b63824d1f800ecea6c89a6db75637ce18cc8a9c053ebd876e39b8331988ce50f41eef7efc2e9c7f5beb19901b4715f6f4c62bb793976d066d56b8a33dcaa6b227219880b0632d0229139bf315cbcb4b466eb9d891d0f0e26cef76929a046b147ee6668b0a3114d21ad5d7f4a5adc67910b7066c30de6699","method":"","user_agent":"","ja3":"","session":"d37feea2-3808-4779-8fb9-3a36b1a921cd","seq":1,"duration_ms":100,"bytes_in":293,"bytes_out":14,"enriched":{"digest":"31c4ddabed88cec7","strings":["]g4d3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:51.031152+00:00"}