{"ip":"187.13.23.87","data_as_of":"2026-10-23T04:33:50+00:00","observed":true,"total_events":48,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["48 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,868 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,868 bytes sent","bytes_sent":9868,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-21T17:09:25","last_seen":"2026-10-21T18:53:46","events_24h":0,"events_7d":48,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":136787,"org":"PacketHub S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":48}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-21","count":48}],"recent_events":[{"timestamp":"2026-10-21T18:53:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"G���C���z�^U+\\\u001f�\u0004���\r\u0007�+\u000f\u001b��K�}��[P:f�8&F\u0003ߎ�Eϲ�X�(\u0012\u0018~f\u001b�\u001a�;\u001c.>C#\u0015[�5���\u0001ڂ\\X��fA�>�K�:m�.j2\u001d\u000e�\u0010g�\u001b2ڥDZ\u0006$tp�9TY�׺�\u0011I�x�\u0005\u001c�\u001d��e�\f�C","payload_hex":"47adb9e443bcedb07ac15e552b5c1f9504decddb0d07b42b0f1b8a834be27da5eb5b503a66b238264603df8eb145cfb29e58c52812187e661b991a953b1c2e3e4323155bdf35d6c2e701da825c58848b6641ee3eb04bd23a6dc32e6a321d0ef71067dc1b32daa5c7b106247470c3395459fbd7bab31149df78ef051c8c1da39b65a70ce343","method":"","user_agent":"","ja3":"","session":"736070df-f4ea-4bf1-b047-bea9484198eb","seq":1,"duration_ms":101,"bytes_in":133,"bytes_out":12,"enriched":{"digest":"06cbc5537742f495","strings":["^U+\\","[P:f",".>C#"]}},{"timestamp":"2026-10-21T18:51:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005�L�1�\u0000£�z$�njW��Q\u00139-qB4390-BWU)QjTizTtO","payload_hex":"13426974546f7272656e742070726f746f636f6c0000000000180005ea4cee318e00c2a3d37a24f4c78c57cede5113392d7142343339302d42575529516a54697a54744f","method":"","user_agent":"","ja3":"","session":"f57aed47-0550-4fa3-a705-1795c92fef6a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0492758a520d5ebc","strings":["BitTorrent protocol","9-qB4390-BWU)QjTizTtO"]}},{"timestamp":"2026-10-21T18:49:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�� �OhI^W�`�^:d�>!�cͶ�\u0019�'����S��E�R�\\'�M\\�Q�\u0015�N�\u00050�G<�\\��LJ�*����\u0000�N\u001fI�f�\bK�\u001f�R\u0004��D���5.��X���)���s�c'��=�I��������\u0002<���\\D���O�X�\n�R������x&mY�\u0002��H�u\u0002��b�{J�Vm\u0006��|\u0005~�D�@�I\u0010��\u0005pz�\u001d�p�\bR\u000e���E\u0007�ej�`mhf�����}\u0019q��1�\u000e�\u001a��\\��3��Ӄnќ�פ@�\u0017�:�\u0014\u000eUϿ�u���D�턜���~���=8V\u000b��*���s�;��*\u0005�\u001d%�蕜�\u0019���\t��\u0019�n�\n�V�^U#L�fS���l*��H��ѡi\u0011��5\r\\v5e[ʯ��׸�g�#\u00131��<#�����\u001d�5$N�Q����q��\u000f�f7�[9I��UI=1*�A!\u0001�'\u001f��N%c��:)}\u0018(P�*����Nf0H2C=�d\t��z�\u0005E+���H��\u0003�-ؘ�Ss\u000fsYo�\u0017�ކv�B#A\u000f�\u001d�J0�ߴe\u0018�NHlt2��U)\u0012\u0010\nJ�?�̚��J⊚[�\u0001�b�>\u001c��Κ���\u0007�QV�8A�9\u0011ң��ٱ#*Zٲf1�J\u0015��ws�����6�x�\u0010\u0005sab�Y�\"lی��%�U�\u0010ڳC�*����8ɲ��\u001cS,+�EꍋԳU���\r��\u0015\t9�z���\f��!E�E|�C�`�θy�K�S�i�\t\u000e\u001cB��Q����Ft\u001e��2��ˮ*?P�Kq�]��N�O� 2","payload_hex":"c013ab50fd8bab7b32bbcefaa69342fb9b353a0e8f0d74543902f83a40977b8a7a31f02044c0aedb139db2c9b848962c64f6fc16ee9df0830ad64bc277cd85ce519e50888283a9d112244dcfa5c0996f6a45f461daf6a952952b9381462839346086ad5a5f3edd19e085af09b4b619ec6eca0aaa56f65e55234cb96653d5ef846c2a9abb48b9c7d1a16911e2a2350d5c7635655bcaaf8ec6d7b8c067d2231331e9cc3c23f5ebe0ed8b1d8435244ecf51f384f9e171cdd60ffe6637cd5b3949c0aa55493d312ac0412101bf271f96dd4e256388a73a297d182850f82af4a5e0944e66304832433d9e6409f6e77ac705452bb6e5ec488cad038f2dd898e953730f73596fd217e5de8676c84223410f9c1dcd4a3095dfb46518e44e486c74329f8b552912100a4ad13fa2cc9ad3cc4ae28a9a5bd701aa62d33e1ceca1ce9a84f2c907bb5156c63841983911d2a3aff7d9b1232a5ad9b26631844a158fb27773e7bcc9fb8336b578fe1005736162915989226cdb8c988825f355ae10dab343f82af2a0c7cf38c9b2aefb1c532c2bbe45ea8d8bd4b355b28dcb0de3a0150939ad7ad9ee9e0cc2e42145ca457c95438d60fdceb879aa4bac538269c4090e1c4294b751a69fbfe046741ea1c07f32a28fcbae2a3f50ea4b71c15dc2fc4ed84f922032","method":"","user_agent":"","ja3":"","session":"1cc2d323-7503-4c34-ba72-17599de2cf9e","seq":1,"duration_ms":100,"bytes_in":479,"bytes_out":12,"enriched":{"digest":"01ea14cfc61256bf","strings":["F(94`","^U#L","\\v5e[","UI=1*","Nf0H2C=","NHlt2"]}},{"timestamp":"2026-10-21T18:42:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005�L�1�\u0000£�z$�njW��Q\u00139-qB4390-iDLxFyLWM*oK","payload_hex":"13426974546f7272656e742070726f746f636f6c0000000000180005ea4cee318e00c2a3d37a24f4c78c57cede5113392d7142343339302d69444c7846794c574d2a6f4b","method":"","user_agent":"","ja3":"","session":"e83fd376-0c92-4831-8f20-b46a5a4153c4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2db1d93c36e586cf","strings":["BitTorrent protocol","9-qB4390-iDLxFyLWM*oK"]}},{"timestamp":"2026-10-21T18:40:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�^�ơ�(���P�b\u001e�\u0001\u000b��Ց�\"�e\u001d0�a��A�y�3ǰ2�_������o����!�H�U\\4E��%Pܸ���!ϧ�����Vۡq�h����\u001aLJx\u000e\\!}��t����\u0003��(���8S3K�ԙ\t�9�\"!�F8��\u0018Wv��۸�:N�\t4�?oi���Jӛ9\u001c���ԉ\u0005�;\u0007�F|\u0002��\u0001\f����\u001b^X�����Eل?���g��u�Mo{L��\u0018O��\u0014\u0000\u0010�i��/�*\u0019'Ez%\u0007\rC�.�_K��\"߉?,ݞ�����j��&\u001cw�ߚ�fS4\u000ba�\u0011�6�\u0005ЧX]~H9G���N�-\u0004��D�\u0012\\T�\b�6�5����ʡ�=n���f��_l��\u0017,xc�\u0018��Y\u0002��~�:fÔ���8.��\u0011Xe\u0005�\u0004�C&!\u001eBԆ�e��G;6É\u0016����cr.|3PϜp��4\u0000(Y�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f5b1bc90-e781-4581-a7d2-033d3e51e415","seq":1,"duration_ms":100,"bytes_in":379,"bytes_out":12,"enriched":{"digest":"48f293c7edad322e","strings":["U\\4E","8S3K","Mo{L","'Ez%","X]~H9G","cr.|3P"]}},{"timestamp":"2026-10-21T18:37:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005�L�1�\u0000£�z$�njW��Q\u00139-qB4390-!SzyNkPrk(Kp","payload_hex":"13426974546f7272656e742070726f746f636f6c0000000000180005ea4cee318e00c2a3d37a24f4c78c57cede5113392d7142343339302d21537a794e6b50726b284b70","method":"","user_agent":"","ja3":"","session":"18895861-a725-4160-9c3c-2865fc08a5b9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"eddc804b49b4689f","strings":["BitTorrent protocol","9-qB4390-!SzyNkPrk(Kp"]}},{"timestamp":"2026-10-21T18:35:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��o��Ѓ\u0017\b��y��j���=�R[�������\u0019��;�c�� 1����\u001c�=�6����踟�wZ7,�\u0002��<:\u0002�\u001aX\u0010��y�G�,V!�Ii��+����s� ]�\u0002��O]�\u0003\u0005\u000f%�.$=����\u0016\u000b/^\r���A�.���\u0005(�^^,���f{�\b��|ߺ.�\u000b\u0000H9�5\u0017-\t\b郘\u0006\u0010M�fN�^�`R\b�~���/�\u0007��\u0007�MϺU6Zp\u0007\u0005���>�񎚚�\u001dȂ��՘W�� ;��i-�5\u0001���4\u000e�۳�\u001e�:�|m�6�i�����\u0019�&�F�Ό�!�u�\u0002\u000b�[�\u0012�b��o�*%�\u0001,O�c\r�c��D:���)�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"770b5ebf-ac1c-40fc-abd4-76f5003ed969","seq":1,"duration_ms":100,"bytes_in":293,"bytes_out":12,"enriched":{"digest":"8b37594e0227bc8b","strings":["wZ7,","U6Zp"]}},{"timestamp":"2026-10-21T18:33:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005�L�1�\u0000£�z$�njW��Q\u00139-qB4390-yPzJtpo)myUS","payload_hex":"13426974546f7272656e742070726f746f636f6c0000000000180005ea4cee318e00c2a3d37a24f4c78c57cede5113392d7142343339302d79507a4a74706f296d795553","method":"","user_agent":"","ja3":"","session":"50951271-f93e-45af-9184-cb9155d9091b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c148423eacbaafd8","strings":["BitTorrent protocol","9-qB4390-yPzJtpo)myUS"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}