{"ip":"191.95.133.56","total_events":57,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["57 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,613 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,613 bytes sent","bytes_sent":10613,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-03T14:41:34","last_seen":"2026-09-03T15:56:03","events_24h":0,"events_7d":57,"geo":{"country_code":"CO","country_name":"Colombia","region":"Norte de Santander Department","city":"Cúcuta","lat":7.8948,"lon":-72.5021,"asn":13489,"org":"UNE EPM TELECOMUNICACIONES S.A."},"source_domain":"Dinamic-Tigo-191-95-133-56.tigo.com.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13489","label":"TigoUne","category":"isp","url":"https://www.peeringdb.com/asn/13489"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":57}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-03","count":57}],"recent_events":[{"timestamp":"2026-09-03T15:56:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-GK*wqr.Cm)do","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d474b2a7771722e436d29646f","method":"","user_agent":"","ja3":"","session":"cada26ec-9b49-47a9-be70-7e10d83d92aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d29f678da3c4363e","strings":["BitTorrent protocol","<-UW1609-GK*wqr.Cm)do"],"iocs":{"domains":["wqr.cm"]}}},{"timestamp":"2026-09-03T15:54:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"8���\u0007��l^\u0019#�����\u0016�R��N~5�.A����\u0001\u001e�wM���O���I~\u0019B̋�D\u0017\u0018�'*$���3�\u000f�� c!?\u0003[��4Ѧ\u0015�Z�gSH��kNg(Xѝ�=D�4�\u001dR_?�c�\u0018��}��CcF���o��T&�lZ���\t�[��\u000f\u001e���O��\u0013�ƈ�5��\u0014��7���^�eo&�t���;R2��Ts\u000f�)��d\u0002���0��%��\u001e\u001a\bс��3��\"~�/�","payload_hex":"3895aff007a5896c5e19239ca1a9a4f116db52a6844e7e35e72e41cee7a2c9011eeb774d9ff5f14f87cdfd497e1942cc8bcb44171884272a249ad2e733a20fa8df2063213f035b8dd334d1a615fb5aef675348fe8d6b4e672858d19d8a3d44c934951d525f3fdc63d818ba8b7d9c96436346b6c3fe6fa6e05426e96c5aa4b6b909865bfed80f1ea0e8ad4f80d01396c688f735ece614daf937e4acc35ed8656f26ea74fffcf33b5232ccd854730fb62983df6402afa1b230e7da25b4e01e1a08d181e59733f7dd227eb32fc4","method":"","user_agent":"","ja3":"","session":"59a3c6ac-1bca-441d-864a-29ee99750928","seq":1,"duration_ms":101,"bytes_in":204,"bytes_out":13,"enriched":{"digest":"1f57f1d01ed1fc25","strings":["kNg(X"]}},{"timestamp":"2026-09-03T15:53:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-5BbmPCe62RhG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d3542626d5043653632526847","method":"","user_agent":"","ja3":"","session":"b1209b84-f527-4ce5-a77c-45dca2f9ed76","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"78e007e524350f8b","strings":["BitTorrent protocol","<-UW1609-5BbmPCe62RhG"]}},{"timestamp":"2026-09-03T15:52:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Y\u0005�f�\u0014�;��d�\u0005��7�����i�\u0014��u���9�`��r{f�Ih�S�f�s}܉�(��\"�dg\u000b] \u001b\n�+���,\u0014x�i�� 7�<�\u001f\u0006�^�T�'ԛ/�\u0004=��\u000e��\u0014�Q%l�L�{��rGA\u0011�����m^�9QND�7\u000b��\u0001r�ߐH�R>KUP�}����\u001f=&�\u001c\u001b\bV\u0018L��u_xL3\u001f�G�r�1G�\u001aT7�F`o�\u0018�,�V�4\"'�M�2�����I��S��\u001b\u001ek��\n�,yX\u0002S���s���ۂh�|��\u0005�H\u000e�j��;�\u0011�\u0011R�9I!�\u0012�'r\n�\u0016���\u0004?ؖ��X�R\u0001\\\n#�U<r�>\u000be\u0004��XȷEE�\u0003V�l��������S�\u001f���&+W�5��}���M��\"��أ=���I����\u0015��\u0014*l�\u0004��I��e�pQg�h�C���19�w�/�ҡI5���5��#!{]���5\u001e��m�}��* �L7\u0005\u000eG�@[Z3�\bU�R��54\u0000?>���#\b�������/���j��p���,|A��斋\u0019\u0004Os�Է)\u0014u�K","payload_hex":"fc59058f66de14ab3be6c564a005ec9537e296ebadd369d614fff87595e7cb39d360affd727b66b84968a6538b66eb737ddc89dd28acbf229164670b5d201b0ac92bbaeeec2c1478d669e8932037de3c961f06b15ee254c727d49b2fa8043df6f60efbe914eb51256cae4c997bf7c172474111c6eed8c0846d5eed39514e44c9370bf19d0172d2df9048fc523e4b5550b27dba8cb5851f3d26e51c1b0856184cb59b755f784c331f80479372be3147b81a5437a646606f8918bc2c8156ce342227f94da032fbedc8fcfe49858753f8a51b1e6bfca70a852c795802538f91b173be9792db8268de7cfbdf0599480e816a87e63bc211c111528e394921eb128827720aed16cae79c043fd896fb8c58bf52015c0a239c553c728a7f3e0b6504bad958c8b74545c90356c46ce793e8c0f9828ae053991fafb1a9262b57a035a2e47d9890e94de1db22a682d8a33da785d149cbc6eaf21594c1142a6ca604aa8149b3d465db705167ce689c43b0d5d33139ae77da2fa1d2a14935bbd2e335e9c823217b5dcde2cb351ee5866dc27dfdef2a20fc4c37050e47ae405b5a33c00855ba52b79a3534003f3ec1dee22308c2f082a8c4c4d42faebcb56aa4e47085a9832c7c419e9fe6968b19044f7391d4b7291475be4b","method":"","user_agent":"","ja3":"","session":"6b67ef76-a370-4226-b085-00e743903a0c","seq":1,"duration_ms":100,"bytes_in":466,"bytes_out":13,"enriched":{"digest":"00f452d0abca68ff","strings":["9QND","R>KUP","u_xL3","@[Z3","54?>"]}},{"timestamp":"2026-09-03T15:50:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-loDT3hrenXbL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6c6f4454336872656e58624c","method":"","user_agent":"","ja3":"","session":"9c49044e-4ff5-4c96-b4ac-7c0cda421043","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"426ebc936ad697f1","strings":["BitTorrent protocol","<-UW1609-loDT3hrenXbL"]}},{"timestamp":"2026-09-03T15:49:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"3\u0004oV��bP��\u0007O���a�{z��\u0003��ʖYRv�)��\u0010�d�Wi}\u000e�\u000fy\t\u0014_\u001dN\u001c\u0000���+��������J�hVِ!��[0��8\u001b�u�\u0007û�d����(q���yB暼\u0014��V�u-X �_8/\u0005\u001cCl�J]\u001fv|(��R��\r������\u001a���x�|\u001e�\u0010-�\u001d&\u0010���(��>����\\�Id\u0014'�G\u0019���\u001fձ$\u001eW��T�J3T��,��t�D���)�P���8���\r��9\u000fG-G�%��za�9}��I��v���墂��U�d�]��z���\u0016Ͼ\u0016\u001fOb\u000fC@�����\u0001i,��2\u0010\u0004\u0004\u000b£\u0019�\u0018�_R'j����}\u0001��*��I���¾`\u0018\u0014:Ac����u�5�‹�\u000e�142\u001eó\u000b\u001a�\u0012]k��qH��cg�Ő\u0014O���|�t\u0019c�`�D�M�&j(պ�/�\u0012��6��\u0001m͇U���l\r\"n\u0015C�\f�S\u0015�\"#��v�~��t��;���`�m�-p�x�\u0013��M�����ќ�\u0013,�w�Kw��(��}P0��\f\u0017��a\u0004�À��]","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d82e7b80-dae2-4299-bfe6-72582f6ab4bf","seq":1,"duration_ms":100,"bytes_in":462,"bytes_out":13,"enriched":{"digest":"4c50c388a7feafa4","strings":["_R'j"]}},{"timestamp":"2026-09-03T15:47:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-hp-_d*EIwhxX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d68702d5f642a454977687858","method":"","user_agent":"","ja3":"","session":"7f95790f-0671-42e9-8ec2-5bb6ee98b2c0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"55acf909e583f1da","strings":["BitTorrent protocol","<-UW1609-hp-_d*EIwhxX"]}},{"timestamp":"2026-09-03T15:46:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ƶf������7i\u0018{Y\\���d\u0000y�\u0001�}&���u�r\u001e�j�\u0014�d\"��\u001f\b�����\u0010چ�W�=��l\u0004�\u001b��UZD/��\u0000�V\u001a\u0005n����)jM���4��.�b�\u0003�K�X\u0003\b\u0013�\r��(0��r`���IH\u001b\u000b}l�Y��@��gͲ�K��(\u001c���34E����\u0005ThP���q�\u0017塩�\u0004������\u001a��\u000b6W��U�E�\u001a\"8�o�I�;\u0018˗\u000e����GG$�=hMKM���w\u00165��$�!�O","payload_hex":"c6b666969cc0c8cfcd3769187b595cb4c4d3640079d501f47d26f897b975e9721ead6a8d14e96422dde51f08c9f997dace10da86b1578d3dc7c56c04b41b96c4555a442f9fa60088561a056ea887aaaf296a4dd6d7ed34cef52eb762b303a44bdd58030813980d89ae2830cdf87260b2fdd449481b0b7d6c8c59b3c040f1b967cdb2f24bfac1281cc8ea9233344592d5f5f905546850ad80ab71c417e5a1a98e04eebce6edc7d01a8ce60b3657a3f655c145c01a2238ca6fb749af3b18cb970e8e80ddc5474724f83d684d4b4dbca2b377163592e024b421984f","method":"","user_agent":"","ja3":"","session":"03da1e4c-09bb-413f-8083-a716c24d636b","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":13,"enriched":{"digest":"9f532fe1047daca4","strings":["UZD/","=hMKM"]}},{"timestamp":"2026-09-03T15:45:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-9LI2g1uvnnPV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d394c4932673175766e6e5056","method":"","user_agent":"","ja3":"","session":"e6ac2f2e-cbe3-4fc1-b79f-7e7b3c46b86f","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a4cce94017cc8b51","strings":["BitTorrent protocol","<-UW1609-9LI2g1uvnnPV"]}},{"timestamp":"2026-09-03T15:44:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001c�����W|�,�\u0010@\u0014:�c�\u0016���gW�o^�}D��똸\u000e��x\u001b�ј ��R\u000e\\l\u0016I\u0014$\u0003�ߏb�Y}o�\u0001�(''AI��U\u001b��\u0000˰����%�M#���$�L\u0013h��5����#����\u0013l�","payload_hex":"1ce9c0f291b6577cd32c931040143ae3639f16c4ef9b6757fe6f5ecc7d44dcd6eb98b80e88b6781ba5d19820bfbf520e5c6c1649142403b3df8f6283597d6fa601ca2827274149fe8d551bb29900cbb0bfa28cda25c24d23c0c08c24814c1368b59d3586e6eccd239b9ed0dd136cab","method":"","user_agent":"","ja3":"","session":"caccb636-aeec-4915-8feb-5341a030040d","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":13,"enriched":{"digest":"eb63ca582174be3c","strings":["(''AI"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-09T06:46:48.825814+00:00"}