{"ip":"138.204.60.23","total_events":28,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["28 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,247 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,247 bytes sent","bytes_sent":5247,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T15:22:15","last_seen":"2026-09-09T14:40:58","events_24h":0,"events_7d":28,"geo":{"country_code":"BR","country_name":"Brazil","region":"Santa Catarina","city":"Pomerode","lat":-26.7235,"lon":-49.1706,"asn":28343,"org":"UNIFIQUE TELECOMUNICACOES S/A"},"source_domain":"138-204-60-23.unifique.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28343","label":"Unifique Telecomunicações","category":"isp","url":"https://www.peeringdb.com/asn/28343"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":28}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":27},{"date":"2026-09-09","count":1}],"recent_events":[{"timestamp":"2026-09-09T14:40:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-ANP06kp-UVD_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d414e5030366b702d5556445f","method":"","user_agent":"","ja3":"","session":"92d753ce-df83-4711-b8fc-3dd0f05f41a0","seq":1,"duration_ms":0,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bc18c390234893f2","strings":["BitTorrent protocol","<-UT8360-ANP06kp-UVD_"]}},{"timestamp":"2026-09-08T15:55:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-lH7ryv*6_adb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d6c48377279762a365f616462","method":"","user_agent":"","ja3":"","session":"33ecfa93-be82-4644-b95d-4ca545c41c21","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4ac08f2315048e68","strings":["BitTorrent protocol","<-UT8360-lH7ryv*6_adb"]}},{"timestamp":"2026-09-08T15:54:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�#�P�n^��ѿ�\u001dE!cw��0f��)y\u0006��+\f���QŴ&��B�;�_(\u0014���X5�\u0006榭\f�Xc�'���\u0001 ���\r�q��\t7э\u0011���A�,\u0017�U&\u001b3�eoQ\u0012�\u001aQM��\"*�\u0005\u0006���\rܟ��}�\u0017�\u0017TkW��J\u0017$���AQ�v��e���\u0002X?���u��kE��\u0003yː�\u0002���\f=(1\n\u001a��mI�G4ҔW?4Cc-\f�Wj�\u000f;|��uV�k����h�+k5��ҵq<��ߟ�&�\u0013��\u0003�\u001b\u000e��P�$��L�u�t�cz\u001c�|\"�&�~����BRx\u000f�>i\u0007p윥lkP\u000e]4�_��Ն�YT%v�:��Ď��\u0015\u0010�\"'!K��忽=���\t'Ň�����\u0013�h\u0006�%����5Zi,�\u0013\u0015\u001fiA$�4F\u0016* �Κ���A�:U�ģ\u000el��\u0004��F���\tM�>�\u0019�\u0012ʠ�HY/��\u001c��\u0004�j\u0013�x�\u0013�ˊ���zs|�z2�x��h�w�?~_��luT\t���?zQ�R�KVR8v\u0001v�\u000b=V���\u0017��t%f���T��1B��S�5.ֆ\u0000����\u001d�48�;��~/$\u0006�\f\fRz�\u0003�w�o�؜My\u000f8���±��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8cdd82b3-a357-4207-9c3f-1f470f59816d","seq":1,"duration_ms":100,"bytes_in":513,"bytes_out":13,"enriched":{"digest":"872c28fd1d1ebb3c","strings":["E!cw","W?4Cc-","YT%v","\"'!K","5Zi,","KVR8v"]}},{"timestamp":"2026-09-08T15:52:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-1lKeLWSsHch*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d316c4b654c5753734863682a","method":"","user_agent":"","ja3":"","session":"276bf7b7-e4df-482d-8554-2c86105f0e58","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ce376bef47e0e86b","strings":["BitTorrent protocol","<-UT8360-1lKeLWSsHch*"]}},{"timestamp":"2026-09-08T15:51:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��R,\u0002�\u0003�A���֏o��\"��\u001b6\u0003F�%u�\u0012~��M5�en���4�i�\u0019���\u0001�\u0002�����b�oT^���׉���\u000f���k<6*\u0010C��Rce��\u0016-\u001e.�\u0003\u0007���n��S\b�¯�vR�.��\u000b��\t��2�\u001fY��Þ�LO�}�P5:I�\u0004\u001fbE�\u001a��-Mc�[�Z\b���\r�a6t`T]��b�\r�C2\u0019\u0003�c�","payload_hex":"b890522c02f003844195bb9dd68f6fedea2288e61b360346e42575a0127eadf84d3585656e9691b834cd699919eeafc501b0029894929fb062dd6f545ed0e399d789e390f70f8bfec36b3c362a1043bca85263659bf5162d1e2e8d0307e185cf6ee5d55308fac2afd27652942e8aeb0bd4fd0994b232a51f59fe99c39ece4c4fcf7de050353a49b8041f6245c91ac7f72d4d63805b9d5a08aaaa8f0dd461367460545d938462f60de543321903fe63f7","method":"","user_agent":"","ja3":"","session":"cdd09ee5-a965-47e3-9a5c-f0101e3be970","seq":1,"duration_ms":100,"bytes_in":176,"bytes_out":13,"enriched":{"digest":"af158d67ff425772","strings":["k<6*","P5:I","a6t`T]"]}},{"timestamp":"2026-09-08T15:50:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-J(PGKtNn0).p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d4a2850474b744e6e30292e70","method":"","user_agent":"","ja3":"","session":"aa35fea6-f536-4207-af27-4a53e7f097e1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7a7adeaf0c3931ba","strings":["BitTorrent protocol","<-UT8360-J(PGKtNn0).p"]}},{"timestamp":"2026-09-08T15:48:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�.N|\\���t���\\�\u001e�x\b\u001c�6W\u0002r�\u001fIl\u0014�`�==\u00178gnNod'%0�NN�*\u0017p�\u0012�dm�,[D)K��(����Ë����\u0000����&[]��_PT\\}w���9iA\u0016:\u000eK\u0004\bF9\u0010\u001a��\u0016�?d!�=*a�\u0016��M!�^��� \u0019��9ih�XF<�w�He��\u0019�\b�)[X2���\u0002\u0012ƚ�\u00195�#%\u0007B�\b���L2��\u0014�A��r��l�nT�\u0012\u001e�K��[\u0016����hL��c.\b�0W*�p\u0014u�(==K-�u�\u0017��\u0002��D1B���(�P��N\u0001���","payload_hex":"b72e4e7c5cfcf79674fee7f05c8f1ec878081ce836570272e51f496c149a60e43d3d1738676e4e6f64272530934e4eb92a1770bc129b646dda2c5b44294b899e289b98f0eec38bfd97c2d200e6e3ffcf265b5dcff35f50545c7d77b1af93396941163a0e4b04084639101ab1f416af3f6421aa3d2a61d916d2c24d21825ea7eaf32019f4c4396968de58463c9477e14865cbf319c2089b295b5832a1f0ce0212c69a871935e0232507428408f0b1fd4c32e4ed14ad41acbe72afdb6ccf6e54d3121ef64b8a8c5b169dd7e587684cbac6632e08b630572aa470147595283d3d4b2ddf75bd17b6cb028fad443142eae0ce28fb50c7d14e01939395","method":"","user_agent":"","ja3":"","session":"4a04256b-aaf4-4970-95d9-f0060ab1465a","seq":1,"duration_ms":100,"bytes_in":250,"bytes_out":13,"enriched":{"digest":"c54a43cb6dc1a75b","strings":[".N|\\","8gnNod'%0",",[D)K","_PT\\}w",")[X2","(==K-"]}},{"timestamp":"2026-09-08T15:47:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-p3t7FFuvjAAt","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d70337437464675766a414174","method":"","user_agent":"","ja3":"","session":"9e4a674e-6a9a-4b7b-aa24-d6b09dd2302a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0fccd3b97edde9e7","strings":["BitTorrent protocol","<-UT8360-p3t7FFuvjAAt"]}},{"timestamp":"2026-09-08T15:46:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"}D?\u0019�\u0013���[\u000e\u0004+k���6\u0012��X�`��7J���5�f<\u000b�\u001b�eOѶ��H�5\u0018b)\u0012M1�=,�<�9������\u00190x}G<�6�\u001e��Eno�\u001b�����\u001a�\u001f\u0002r�\u0010e\u00135�D7��kZq0eH�0\u0006��ۻW�A���I(0t�\u0005D��\b(M�e��G-�1�_�\t�[�~ZT$����O\\ )����\b\u0005@V��z{sh��Z�{�6)U:y�p��>h\u0011\u0007��#@������\u0018¤1}ͭ&�{�\u0017���\u0000�Q��?\u000e\\\by��.X��J���N����<N\u001e)��㾾\n!�Ku\u0001�<��[4ȩ ��.t�B\u0006�-!�t\u0006~%X%?/[U��&�\u001d�H��\u0004��\u0003]0�GNL:rSD��c��p��c���3Cj;\u0011��w\u001a�`��\u0016ߵ+\u0007�j'\u0001�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c8e63a0c-4b25-49b8-822b-776e15e9d298","seq":1,"duration_ms":100,"bytes_in":349,"bytes_out":13,"enriched":{"digest":"faf0d95b14ba5a8c","strings":["0x}G<","kZq0eH","I(0t","~ZT$","O\\ )","z{sh","6)U:y","~%X%?/[U","GNL:rSD","3Cj;"]}},{"timestamp":"2026-09-08T15:44:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-(3awTQg)zyW3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d28336177545167297a795733","method":"","user_agent":"","ja3":"","session":"2ceb0600-0211-4985-98a5-0954812da887","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"03c597958643d650","strings":["BitTorrent protocol","<-UT8360-(3awTQg)zyW3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:42.415448+00:00"}