{"ip":"190.96.230.139","total_events":34,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["34 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,387 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,387 bytes sent","bytes_sent":6387,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-13T23:20:56","last_seen":"2026-08-14T01:36:15","events_24h":0,"events_7d":34,"geo":{"country_code":"CO","country_name":"Colombia","region":"Santander Department","city":"Floridablanca","lat":7.0595,"lon":-73.0909,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":"190-96-230-139.telebucaramanga.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":34}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-13","count":7},{"date":"2026-08-14","count":27}],"recent_events":[{"timestamp":"2026-08-14T01:36:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-ydUFM31sHE2g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d796455464d33317348453267","method":"","user_agent":"","ja3":"","session":"e347fe68-fd3b-4910-bb65-c7e1f567c354","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"605264d912fde622","strings":["BitTorrent protocol","<-UW1605-ydUFM31sHE2g"]}},{"timestamp":"2026-08-14T01:33:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"2\f�u\u001b����93(�I��Ԡ:\u0005�B\u001c@\u0017 �35�<���\u0001�Xr(A:��\u0000�M�y�]�\u000e��UO��G���aY��eg\u001a���>�P�R\rp3ju\u0003�I��v����-\u0001�\u0015�\t_��\t\t�m'��eR�\u001a�ʶ@�\u0003?<[��\u000fx����9�\u0003b\b�G����~p��\u001c\b���jo�Z\u0003��\u001e�}�=o\b �-goa�����\u000e?lu�gR���3��P�q�\u000bY�\u0000_��b�va�wK\u0013\u000b�v���\u0006!�g��m�|�\u001e��\u0016�f\u0002��\\\"T��\u00134�\u001c\u0019M�ʽ\u0019��p\u00019_�����3�<���O,��\u001c9�N��#��7$�\u001aغ\t�I��\u000ew�Ή���+\u0005\u0006��ӥw\u001f?�\u0013�Ұ{�b[Q \u0013\u0011ʉ��ʥ���n\u001d���F�|�]E��P$��ui\\\u0006��\u0014�����Z�U0F�'�q�\u0001W�E��Q���A���2p���{\u0010F���<_��!�@%O�������z��3f���,ο~\\\nNw�(\u0005G�C%�p(��\u0006\u000b1�\u001c\u0019a�����]`\u001eO[{�$�\u0002�\u0019u��80�\u0003��ӑ�\u001e�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7d6a5378-f63a-4e50-a1e2-b24e843ebea2","seq":1,"duration_ms":100,"bytes_in":475,"bytes_out":14,"enriched":{"digest":"8136deef5def5746","strings":["Xr(A:","p3ju","-goa"]}},{"timestamp":"2026-08-14T01:29:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-nxJTToB4cDsp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6e784a54546f423463447370","method":"","user_agent":"","ja3":"","session":"337312eb-b6c9-41bc-aa23-e27d8ee7455b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1930ac6bd23876b5","strings":["BitTorrent protocol","<-UW1605-nxJTToB4cDsp"]}},{"timestamp":"2026-08-14T01:26:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���cJ�<\u0015\u0011 �\u001b�M�\f�\t\u001d���\u0013\f0\\���L�y�s�\f�m�3\n[��r�\u000f[ұ�\u001b���\u0002�\n!\u00175�b�\u001b\u0015����U�T��9q�\u0002�\u001eM�R��ms�\u0001V~�����^T�`2\u00000�(�ڲ\u001a��B\u0015]l��\bXb\u000b�\u0005����Q��","payload_hex":"ccffbc634aad3c151120e31be74dcf0c8f091de5e9a8130c305cf6e2e94cdb79c373e30cf66df7330a5bb3f772c30f5bd2b1b61bc6eb8002870a211735e462e41b159b91ffba559954c4d13971cf02ca1e4dfb52c0f26d73d001567e809bba80f75e54c9603200308428d2dab21aafa742155d6ca2940858620bc105dfe8fc97518eee","method":"","user_agent":"","ja3":"","session":"6379121e-73c7-456f-94ba-b1e7c8d6ff6c","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":14},{"timestamp":"2026-08-14T01:22:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(lh6~lqblo1M","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d286c68367e6c71626c6f314d","method":"","user_agent":"","ja3":"","session":"0c28459b-c967-41c6-b314-b35d4fdc9a10","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bb2ef8bd8a148875","strings":["BitTorrent protocol","<-UW1605-(lh6~lqblo1M"]}},{"timestamp":"2026-08-14T01:19:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0002� _\u0012�~?\nmA��\\��y�+�]y�?�(�\u001d��:�ե���l\r��Ӄ\u0017j�c��M{��d\u00195�\"m[OS�~n��L\u0016b!æ��u�\u001d���[�ڎ)mQ\u001dj\u0016�@��0�\u0013>\u0001r\u001b/.\u001fB����9Ҹ��&1�\u0017�5�8�F�4���S��\n��\u001eb�\u0006:�m�\u0018��IM��&�ֿQ0�G�#����\u001b�1b�u^�*�-R��\u000f�\u0012\u0018-\u001f�K[.6Ҷ\u0001\u0013-B��\u001c��0\r��#y�1���39\\�\u000f;�@#f\u000bO~$A�l%96n��֪H�4�P�B\u0010!\u001a9b߮BW\u0006E�\"M\u001aFٜ�\u000b1@-޳<�k煦 e�GȮUS7\u001c�\u0007\u0007>�ֶ$�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"26b6e5d6-ab69-43b7-9fc0-e8e2cf82c0f4","seq":1,"duration_ms":101,"bytes_in":294,"bytes_out":14,"enriched":{"digest":"495d3872b86e95a8","strings":["\"m[OS","K[.6","O~$A","l%96n"]}},{"timestamp":"2026-08-14T01:16:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(hFFuKp7N*Ls","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d28684646754b70374e2a4c73","method":"","user_agent":"","ja3":"","session":"434b72ca-ced5-488c-9d9b-7b5e3c30d215","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9d309ad5ef02900a","strings":["BitTorrent protocol","<-UW1605-(hFFuKp7N*Ls"]}},{"timestamp":"2026-08-14T01:12:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"݁�qԖ�\u000eF\u001c����*\u001e�(x�dZ��O�1r�8S���4��7\u0000�շ�O�\u0000�2�W\u0014\u0002j\u0001��6\u0004>M6�^r�\u0016���\u0007��8M\r�x��5\u0013KHL��Z\u001b�\u0004�P���\u0003^��rєA7ِ\u0011I�?�K�Q\u0003Ag߀���.n���o~(r�\u0005�U=��q\u00076,�aP��6�\r\u0000beϹ�f\"�`���e@\u0000_cbD\u0001��\u0019\u0000^m�\"���\r�\u001ey�4�8g鶶\tH-\u0015\u000f�$^5\u0010","payload_hex":"dd818f71d496980e461c8fa1c1b82a1eb92878a7645afde44fdc31729238539ab2a034eb893700a3d5b7d74fe2009332ed5714026a01f2bd36043e4d36e25e72d916fcb0f507eef5384d0da778a3c835134b484ce1a05a1bfa04f7509e87ed035ed2cb72d1944137d9901149c33f984b8151034167df80bcb2a72e6e999be36f7e2872e205aa553daac07107362cb4615083b636d00d006265cfb9c466229b609ee6956540005f63624401ebbe19005e6dab22f5e9aa0d921e79be34953867e9b6b609482d150f8f245e3510","method":"","user_agent":"","ja3":"","session":"cd58399a-eac0-41cd-90c3-8be37a98bcfc","seq":1,"duration_ms":100,"bytes_in":204,"bytes_out":14,"enriched":{"digest":"6c7cb146bd282444","strings":["o~(r","_cbD","e@_cbD"]}},{"timestamp":"2026-08-14T01:09:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-*OlzrONLTIdr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2a4f6c7a724f4e4c54496472","method":"","user_agent":"","ja3":"","session":"464ae00b-ba37-4fc8-8b0b-e653662bcf00","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6546bcd3ab3bae24","strings":["BitTorrent protocol","<-UW1605-*OlzrONLTIdr"]}},{"timestamp":"2026-08-14T01:06:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E�jfz\tBy���H��B1vE�\u001e\u001c�ꮙn�T�~�\\�\u0002Ϥ������5\u00187\n��ү&�\u001b1��3hض�\u000b�^��a\u0015��$x��]��x\nI��\u0017��e\u001eP\u0016���\b�U����\u0002���_/�\u0019Nh �|}\f��\u0000��5�$��^�ky��\r\t���((\u001a\n��\u0019�ڜ�i\u0004BI�Х���S\\�ݸ�l_��d\u001d\u0006���O�5\f�ŀ#�����tr�i��|hŒŹE�F���(�v(�","payload_hex":"45b66a667a094279a4879548839942317645f51e1ca9eaae996eeb54967ee75cfe02cfa4d9f8bf9e9e8a3518370ac0c9d2af26d81b31a8a43368d8b6990b915ee6c16115ef862478fcd05da3b8780a49a3ce17b0ab651e501688e3d808d655828399e6029ca3c65f2fa0194e6820da7c7d0ce2ec009eb535eb24aff45e9f6b79b2d20d09dddfdb28281a0a86fd19a2da9cb069044249c8d0a5ebe2cc535cbcddb89f6c5fccec641d0688dac84f9d350ceac58023fbe09fcfd47472b469dfc97c68c592c5b945c246c7c09728f076288b","method":"","user_agent":"","ja3":"","session":"4d159bf7-a977-4d65-8e23-c37b570aefa1","seq":1,"duration_ms":101,"bytes_in":208,"bytes_out":14,"enriched":{"digest":"62b563765e12479e","strings":["B1vE"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:15.988767+00:00"}