{"ip":"191.107.140.156","total_events":67,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["67 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 13,468 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,468 bytes sent","bytes_sent":13468,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T13:04:29","last_seen":"2026-10-04T14:20:49","events_24h":0,"events_7d":67,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Kennedy","lat":4.6074,"lon":-74.1459,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":67}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":67}],"recent_events":[{"timestamp":"2026-10-04T14:20:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-WzuTcZVhsC.G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d577a7554635a566873432e47","method":"","user_agent":"","ja3":"","session":"1820a330-b6d5-42e6-ae40-9fb988f4e367","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25c775cb60c43d08","strings":["BitTorrent protocol","<-LT1000-WzuTcZVhsC.G"]}},{"timestamp":"2026-10-04T14:19:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005Z��2�P�1�\u0006OW�\u001fK\u000fs�ґ^�\u001dG�j��d��V\f��q\n�����]©A�$�A���S5�B>����̍jB�]k*=j�\u0002\u0016n\u0017^\u0016g-Q��0��ɡ�b�\u001f��~�@Q�$\\��p�\u0019\u000b �~L��à;��;G��\u0005\u0019O��\t�y�9b�i�6\n\fr\u000e\n�R˂�@�\\=�\"oŷ!��\u0014��,�(��,^mל�\u000fvV�B<\u0011#��ZA�D�痨}Ҷ�K��NOL�0�wc\t\\�u�\u0014��w\u0017\u001a˶$#Es\u0019�\u0011�����M�f�\rg�C \u0011v\\�s\u0001�o<�eG��v�$,�'��l�G\u0014���hk֤�f��s�Yn�5R4�U��N\u0004�T�^�z�'L_b��C��\u0013\u0019OK�\f��\u000f\u001f","payload_hex":"055ae7ee328f50cf31aa064f57921f4b0f739fd2915ee41d47e26a91bc6493b5560ce9be710acde5f192b15dc2a941bc24fc41aebce3533587423ef2f1d9f1cc8d6a42945d6b2a3d6aea02166e175e16672d519bc8309392c9a1c162e51fa7d07ee54051f4245cffab70b0190b20a07e4c98ccc3a03b80f63b47f0b405194f7f929a09d379b739629e69de360a0c720e0ac852cb82e8409d5c3dec226fc5b7218fe814d8fa2c8e28b5f62c5e6dd79ca00f765687423c11238ef85a41b344efe797a87dd2b6a64bcfd04e4f4cba30dc77637f095cae75c014918177171acbb624234573199311dcf0ff95b14ddf66980d67e3432011765ccf7301e76f3cfc6547f79076ce242ced27dce26c854714ba9acb686bd6a49366a6ac73e5596ee43552349955a5cd4e049354e05e8f7abe274c5f62fbef43c0d213194f4bd60ce5d30f1f","method":"","user_agent":"","ja3":"","session":"edd6ec2d-731f-4f90-ab75-8202ea6ae9cf","seq":1,"duration_ms":100,"bytes_in":321,"bytes_out":15,"enriched":{"digest":"f3718363ac2f80fc","strings":["]k*=j","$#Es","'L_b"]}},{"timestamp":"2026-10-04T14:18:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-WzuTcZVhsC.G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d577a7554635a566873432e47","method":"","user_agent":"","ja3":"","session":"9cdebe4d-5b50-4042-9d2c-707b672b49bc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25c775cb60c43d08","strings":["BitTorrent protocol","<-LT1000-WzuTcZVhsC.G"]}},{"timestamp":"2026-10-04T14:17:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ts�\u0006��EU���)\u0002|�+0\f����\u001f2�\"�\u0016\u0005��냕��v\u0003v��\u0005��\ne�\u0018�I\u000f�+�5�`\n$~���B��ڤ����$��+�`�F=���buwn��\u0001ş�<�S�\u0004 g�/Hp&a\u0016�e��A5�s��_-�Uhc�L\u0018��\u0016P\u0003�uWE�T\b]�@�����BF����=��\u0016c�\u0012X�����+��0_����\u0001\u0001$H�\u0001\u00069Y\u0007�\u0005I�b����\b����t\n�Zakv��\u001a\u0015�g\u0011�0h�\u0005\u0017���\u0019\u000bE��\u000b8��X9\u001dZ�Py �k��n\u0018�Tb���O\u0000\u000fn��]��X�����M\u001e{ ��APZg�\u000e�\u0010���a=P�t�\u0016�T\u0014\u0005�9ސpb��]�N��G^\rՊ@���]��>\u0017�*�m����5��s`\u0010��}%�\u0011�<�\u0006��of[�\u0014��~'�X�\u0000�\u000e$�\u0003�Wa�u�4愖\nj�\u0012c\u001b�<���\u0013s�wV�ԝ\b;�\tZ�f�:\n=S\"��ȹ�L�H�\f\u0012�M�;d4�/�7�)�/\b5c\\\n�\u0005k�r�2v\u0016\u000e� ��4Ѝ-α�^���\"��,sr�A��K\u0015�B�j\u0006�'\"�pͪl\u0018\u001f��Fg�����\u001d�b1�ݟ\u0004�g9�JO{�G#�A��i�E�_h����Ws�'w\u001a��^\\H�)�I�","payload_hex":"7473e606fbf34555f5bea429027cfe2b300cd6fde7821f32da22d6160590f7eb8395bdee760376bad105f9ac0a65af18db490ff92bef35be600a247ee891cd42b898daa482a694c0248cd82ba060a3463d88b2ea6275776e83ba01c59fc93ce253c2042067fe2f4870266116bf65e8a34135e473b0f25f2df9556863974c18e2eb1650039f755745f354085de440a08191978a42469ff9bc823de78c16639a12589da7a9f2a32bb29c305f94f3f8dd01012448800106395907b70549e9628c939ec00894dfd9ec740af85a7f616b768dd91a15fd6711c53068dd0517b0f5f1190b45a6b00b38e6a958391d5a8c507920a76beec76e18fb5462a890d24f000f6eff985de0b158e1f4e5fa9c4d1e7b20c1c341505a679d0efb108a9bcc613d50c074cd16d3541405f239de907062f4875da94ebbb0475e0dd58a40c1aeb85dfac23e17812aaf6de1e0efc535848e736010aaa57d25fe11e03cbf06f1996f665ba714f2da7e27fb58ae00900e24eb03d45761df75eb34e684960a6a9d12631b9e3cfda2ca1373dc7756a9d49d083bb2095aca66e63a0a3d5322a6dfc8b9aa4ce848f20c12f94dd93b6434f52fb337ac29fd2f0835635c0aa7056b8472f23276160ed7209fbe34d08d2dceb1855eb6aad62288ea2c7372a64187b84b15b742d06a06b72722a570cdaa6c181fe9e74667edbfa3d9fc1d916231e8dd9f049f67399c4a4f7bd34723a74186de69e045e95f68d3f5cfe15773d227771ad1c85e5c48a5299a49ed","method":"","user_agent":"","ja3":"","session":"6c52191b-f1d7-4d3c-87ad-79a0fc5da11f","seq":1,"duration_ms":101,"bytes_in":547,"bytes_out":15,"enriched":{"digest":"c52fb69f9aa5305c","strings":["buwn","/Hp&a","APZg"]}},{"timestamp":"2026-10-04T14:16:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-WzuTcZVhsC.G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d577a7554635a566873432e47","method":"","user_agent":"","ja3":"","session":"4b2a79b0-ab96-4646-b2ea-54a278dd7dae","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25c775cb60c43d08","strings":["BitTorrent protocol","<-LT1000-WzuTcZVhsC.G"]}},{"timestamp":"2026-10-04T14:14:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�`ޠn<��Z{���\u000e1}��<���B^n\nl\u00194y���\tK\u001e;3�Q\u000e�^X\u001c@\u0003\u001e�U���z�Ll��n�^�T�SɂΦW���\rh\u0007b-b)Y؉����.��XH���~��2n\u0010��`7�,��K\u0003�<d�ڙ���[��\u0002���T ��\u0013��\u001b���)�&��&��W��4�J@M","payload_hex":"b660dea06e3cd0e25a7bc8e0ee0e317dd2c33cd4e5dc425e6e0a6c193479a5d2fb094b1e3b33dc510e885e581c40031ee355d3eccb7ac54c6cb78d6e945eba54f053c982cea657b3c5df0d6807622d622959d8898afc9bf72ebd8b584890edcb7e90b6326e10c4e460379c2cadad4b03973c64f4da99a28ea05ba89402ea7fc37ff7542096991393a31bd2eef229a926f4b92692da57908534ae4a404d","method":"","user_agent":"","ja3":"","session":"dff112f8-0c72-4824-a315-ec350dce13a4","seq":1,"duration_ms":100,"bytes_in":157,"bytes_out":15,"enriched":{"digest":"b944825b615567f9","strings":["b-b)Y"]}},{"timestamp":"2026-10-04T14:13:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-WzuTcZVhsC.G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d577a7554635a566873432e47","method":"","user_agent":"","ja3":"","session":"91d62cae-901d-4131-b2d7-c59d8921ce82","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25c775cb60c43d08","strings":["BitTorrent protocol","<-LT1000-WzuTcZVhsC.G"]}},{"timestamp":"2026-10-04T14:12:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��[ݏ��\\�]�@$e\u000fm���V�h����\u0000T?�\u0016�*I\u0011\f�޷�\u0001�>6�d����\u001f\u0000�'��\\��U�����\rQpd\bJ�\u0016��4\r\f���\u000e�\u0000M�?o�`�\u0005�D2�@^,��u��\u001d#�\u0018+*\u0007�M��L��=\u0019�b���\u0002��\u001bh瑛�B���l�\n�L��\"�Jwϧ�C�\u001e~xM��~��\u0015�z��R�U�\u001f�kէ�G�2�[�n\u0015\u0014��F:�ft�\u0002��~�6534��^U�\u0002���N�f��Kz��'Z\u0005sl&5*0��{\u0004��y�&�S��gP/�pU��'�Rd��/V��&��\u0010���PI\u000fGr�\u001a�vS.\u001eTP6\u001b$\u001b��v+\u001a_„�n%\ḃT���0�\u001d�\u0019�£zՏGz\t\u0005̞\u0012��V�X\u001b$����Hv�\u0003��\u0003 \u000b���4�k\u000b[A�n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b84cb416-e5b1-4db1-b403-c298f0840bfe","seq":1,"duration_ms":100,"bytes_in":355,"bytes_out":15,"enriched":{"digest":"8712e09c9e06270c","strings":["6534","sl&5*0"]}},{"timestamp":"2026-10-04T14:11:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-WzuTcZVhsC.G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d577a7554635a566873432e47","method":"","user_agent":"","ja3":"","session":"e93ca8a4-23eb-411b-9504-9330524f497f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25c775cb60c43d08","strings":["BitTorrent protocol","<-LT1000-WzuTcZVhsC.G"]}},{"timestamp":"2026-10-04T14:10:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"V�<v�0y�9�\u0014cy-�ܪ*Ю[��\u0001\u0000�\u0017u�?�d��[̟�Z?֌�\u0010��\u0017\"ʊA�]������\u000f��ۏ�\u0004#H��\u0001\u0006\r�\u0010:c;+��\u0010���)rEY7M��\u000e�s���E4�z1q�xcP�\u0014uR\\�\u0002C=�$��&x\u000f�\u0015+\u001a\u00022�'��\n���\t2=�y����f�`o\u001c�L,��I\u001d\u0010����\u001c�oT}��w�\u0006�48A\u0004\u001b�8∕��l\u0019Ʈ�&�\u0019\u0006U�Q^�����b�l���;F��w�I\r@�i\t\u001a�`3��\u000f���8m�eQVI�J\u001b*�s�q���D�\nh\u0004a�ĥ���l�m�Q������}��rLA�����i���U�\u0018a�","payload_hex":"56813c76cc3079ba39d31463792db4dcaa2ad0ae5b98b90100a21775a73fc664a1ce5bcc9fd25a3fd68c9110f2c01722ca8a419c5d9c8d8babef930fef9fdb8fc4042348fefe01060da0103a633b2b95cf10b0b08429724559374da08c0ede7399ebd84534c07a3171cb786350911475525ceb02433db624f1b326780ffe152b1a0232a727b8bf0abde7c109323dbe79bbc2d5fa66a7606f1cf24c2c8ee7491d10bfb8a8d21cb66f547df1d877ca06c1343841041bbd38e28895acb26c19c6aeec26ff190655c9515ed5fba1959162936cb896883b46a6d577cd490d409469091a936033bdc80fbeecd9386db565515649a94a1b2ae273d171829ad344fe0a68046189c4a5a6dbc06c9b6d9151aef4e08482e47db7ee724c41fdf6f9f58a6991f8e355c31861d4","method":"","user_agent":"","ja3":"","session":"e6f841a5-52b5-42db-8833-32afefa864e9","seq":1,"duration_ms":101,"bytes_in":295,"bytes_out":15,"enriched":{"digest":"b01e98117a9a626d","strings":[":c;+",")rEY7M","eQVI"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:18:39.351912+00:00"}