A network device may receive a peer-to-peer (P2P) activity record corresponding to a P2P data flow of P2P activity in a network. The P2P data flow may include content information communicated from a first user equipment device (UE) to a second UE via the network, and the P2P activity record may include information identifying the P2P data flow. The network device may insert the information identifying the P2P data flow into a P2P activity map and compare the P2P activity map to a P2P pattern of interest. The network device may also determine a P2P activity of interest probability based on the comparison of the P2P activity map to the P2P pattern of interest, which may describe the likelihood that P2P activity of interest is occurring in the network. The network device may also generate a system response based on the P2P activity of interest probability.