{"ip":"187.13.11.96","total_events":31,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["31 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,368 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,368 bytes sent","bytes_sent":6368,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T23:52:33","last_seen":"2026-09-29T00:36:25","events_24h":31,"events_7d":31,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.6115,"lon":-74.0833,"asn":212238,"org":"Datacamp Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":31}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":7},{"date":"2026-09-29","count":24}],"recent_events":[{"timestamp":"2026-09-29T00:36:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-L!QvV5FqsTCQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d4c2151765635467173544351","method":"","user_agent":"","ja3":"","session":"0839f999-0535-42b2-8ecc-8fa7bd9cb5b8","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"365f282f4890b62f","strings":["BitTorrent protocol","<-qB5240-L!QvV5FqsTCQ"]}},{"timestamp":"2026-09-29T00:28:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\nTD~s���\u0006C.�\u0017H�b�%���\u001dK��\u0004��w�⑴гYq��kG��\u0002\t��?�;N\u000f��\fI=vp���q㞁-�1���$��\u0005'�\u0017�\"#%�\u0018��\u001e���7�IJN��D\u0003ˑ���9�C�)��z","payload_hex":"ba0a54447e73ec9dd606432ee417489f629a2593dfc31d4be5d804e58d779de291b4d0b35971f9e36b47eea20209ddcb3f9b3b4e0f80ad0c493d76709bcbde71e39e812dc031dde2e6249e9c0527ff17d2222325b018bcd31ebb9ab137ff494a4ebcd04403cb91e4d1c639b043d62995977a","method":"","user_agent":"","ja3":"","session":"8ca882c4-8b95-4808-ae2b-f6b5fe8fd1f8","seq":1,"duration_ms":100,"bytes_in":114,"bytes_out":12,"enriched":{"digest":"1ca1de141a792335","strings":["TD~s","I=vp"]}},{"timestamp":"2026-09-29T00:26:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-6rqSfWrurWqa","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d367271536657727572577161","method":"","user_agent":"","ja3":"","session":"4fcdbd2f-1747-46c2-aece-72aa1cd0d59d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a7bfaae08cfdcfe0","strings":["BitTorrent protocol","<-qB5240-6rqSfWrurWqa"]}},{"timestamp":"2026-09-29T00:24:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"UZ�ţ[��:>1#b؞����::[t1�|�>�k\u001a\u0016\u0016T�8SFD�.�z\u0000�\u0015�/�B���1\u0017�\u000fAd�\u0014iG\u001c���A��i�m���\b�s\u0010AB��.\u0005V�$ZyM����\u0005\u000fS\u0007�Ň\n0\t��\u000f��$?��r�=b���Խz���Ȓ)(�q�e���=","payload_hex":"555addc5a35b98933a3e312362d89ef39498dd3a3a5b7431cb7ce93ef56b1a161654e138534644ab2eaf7a00d415a42f844290b0b43117d10f4164be1469471c8fd9ef41af89697fe56de4d1ec08e473104142958e2e0556c4245a794db9cce0dc050f5307d2c5870a3009989b0fd8f7243feac972b83d62d0e4d1d4bd7ab890bcc8922928ce71c16590d8c23d","method":"","user_agent":"","ja3":"","session":"32d1bd53-d386-4c3a-8bc4-398024ad74cf","seq":1,"duration_ms":100,"bytes_in":141,"bytes_out":12,"enriched":{"digest":"c5b7c10d6e2ed15c","strings":[":>1#b","::[t1","8SFD","$ZyM"]}},{"timestamp":"2026-09-29T00:22:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-lVBa-Fjz(QjN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d6c5642612d466a7a28516a4e","method":"","user_agent":"","ja3":"","session":"8c162e8e-1c59-40db-a5af-6f03df046d56","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"fdb2e570f062f554","strings":["BitTorrent protocol","<-qB5240-lVBa-Fjz(QjN"]}},{"timestamp":"2026-09-29T00:21:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\r\u0000\"o+��1ni�!��:\f�\fB��\u0003�Ot}\u001ea������;]w\u0007�\\F�ߢi�H\r�\u0010�@n�\u0015i�����\u0015�`�bs�Ui�m���^0���\b\r%a��R�q{��8\u0004�8�\b�˙\u001cN\"l���bd��\u0018g\u0018��_ά\u0014t��hD`\r\u0003�\u0014\u001d�S]�|\u0012i�1\u0002\u0015����l�n��\u0007\u0012��\u0012D\u0007��\b7\u0001� \u0017\u0003t��&�\u0000\u0006��ս\u001dB�N�ۍ���]�0XZ�5\u001eR�bV.\u0019�NG\rH��7�O�O��k\t���ղ\u0002��;�Z","payload_hex":"b8a10d00226f2be69e316e699321fea83a0cb90c42bab103944f747d1e61e4e5e7ccdffc3b5d7707a65c46a3dfa269eb480d8c10f0406efb1569f18ce1c2da15ab60f06273955569bc6dd2edc55e309ba49d080d2561d0ef528f717baf913804db38e408fbcb991c4e226c93c1d56264b1fa186718b1895fceac1474d8c46844600d03ac141dcd535dc07c1269d53102159486d1fb6cef6efdea0712caeb124407b8dd083701b920170374bea426e10006e3ddd5bd1d428f4ef8db8daaa0b45d8930585a85351e52f962562e19f84e470d488fab37e84ffd4fd7e76b09e8edd8d5b202f2863be95a","method":"","user_agent":"","ja3":"","session":"6566a0e4-ec18-4f09-b747-b22daca6a0d3","seq":1,"duration_ms":100,"bytes_in":232,"bytes_out":12},{"timestamp":"2026-09-29T00:20:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-ONR_N6q.yXRp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d4f4e525f4e36712e79585270","method":"","user_agent":"","ja3":"","session":"d80bd2f1-ff15-4437-90a6-329760c17fd6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a278c7aee99abb49","strings":["BitTorrent protocol","<-qB5240-ONR_N6q.yXRp"]}},{"timestamp":"2026-09-29T00:19:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t�\u0010�gJk�kA�\n#�\u001dv�G���!�J�\u001b�1|\u0018\u0001��� ���W�5 \u000b�;�\u0006cw\"e��8PX\u0015!t�\u001flF��X����(�c8�sR(�oK�\u0017(�\u0011�K�z�0:^�%:�X\u0014�皞W���\t�Ú�\f\u000e�(1��Z'7..\u0001�U'�$h�N�\u0003��n�����L5uMmd�u��$}�;2�38\u0004|��xL5���\t�\u001dhᐦ:���pr\u0013(��a��qAp��T��\u001a\u0014��^�_\u0014�K��1f�vl\u0002-��\u0004ӓ�s��@[|�s��CW�zf��<w�","payload_hex":"099a10ed674a6bfd6b41d70a23d51d76ae47dffcc521fd4aa41bbb317c1801fde0ca20f9b1d457a035200bd73bdb0663772265b18d3850581521748b1f6c468b9758b0b3ed9d28cb6338df735228916f4be117289b11c14bb47afe303a5e9e253a9d5814a47fe79a9e57bb92fe0990c39ae30c0ea32831dbf75a27372e2e01d25527ef2468ac4e9c03bdb96e92e78cffb34c35754d6d64f475b2dd247db13b32eb3338047ca2ca784c35c4edbd09b11d68e190a63ab28dbd7072132897b561f7ce714170fcb254e9a71a14b2a25ed55f14884ba67ff83166fd766c022de2ea04d393e373b5c1405b7caa73fa894357e27f7a66e89e3c77b2","method":"","user_agent":"","ja3":"","session":"3bfaa3ac-3ff1-4759-bedd-f5e7e15d3821","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":12,"enriched":{"digest":"c5c2bd3e6211f52a","strings":["cw\"e","Z'7..","L5uMmd"]}},{"timestamp":"2026-09-29T00:17:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-m!LRjyZRijH~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d6d214c526a795a52696a487e","method":"","user_agent":"","ja3":"","session":"c124ab71-82c3-4ef9-b106-1e0b622c65ae","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f9e90a11eb9dd18b","strings":["BitTorrent protocol","<-qB5240-m!LRjyZRijH~"]}},{"timestamp":"2026-09-29T00:16:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��8K����l��1v\u0001��%�S��)�5�\u001b�G��b�kܨb�O��1�\u0014�{)\u0005��x/�t�g͐�D4 �\u0016!�7\bU�׮8m.����1�\u000fl����&A>f�L���[�p�ͣ�{���t�\n���0�\\`�v�ٶp}Ց�����!u��\u000b�E\u0004�Om�l%���Yؒ��:�aFIq�7��\t\u0017+OU\f���\u0016\u001bP\u0012;�]\u0015e�u�F�{\u0018e���N�d&[\u000fQpB䟘�O�rlr�����K�\u000f\u0007J�e4�&d�X���P]�(�e*\u0003\u000e�\u0018��pv�шg\u0000�/�2R�բ���G\u000b�y]0�V��uK���h\u0001�aU=9I���Q��\u001aT�\u0014/�!�o�(c�0��Zi�����^%��{�\n�y�Q�!op�����c�,�3p\u0017\u0011�i�\u0017\f����\u001d��(��e;.49�k�\u0019��h\u001d\u0002\u001a��d�B.���Пs�ܕ\u0007z�3X�MEGH�rl�I�1+��ՠ��V��yI\u0010 ��W�%d�\u0004��ZEp�Ջb�����3HMaýl_�<��|\u0017<��k�p8�3���]���\u0006?\u001dN�\u0013핏��y\u0013�<�\u0007)���<q�M��C]����\u0018��jv\u001fdD�\u0002j\u0004�Q","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9ed09caf-7ca6-44fd-88e3-211871f5d480","seq":1,"duration_ms":100,"bytes_in":517,"bytes_out":12,"enriched":{"digest":"4c6237ebe28f62d3","strings":["&A>f","aFIq","aU=9I","e;.49","MEGH","3HMa"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T22:14:53.900977+00:00"}