{"ip":"164.163.36.0","total_events":37,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["37 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 8,115 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,115 bytes sent","bytes_sent":8115,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-07T20:39:30","last_seen":"2026-09-09T18:32:33","events_24h":0,"events_7d":37,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Ipatinga","lat":-19.4386,"lon":-42.606,"asn":264397,"org":"SUPRANET TELECOM INFORMATICA LTDA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as264397","label":"SUPRANET TELECOM","category":"isp","url":"https://www.peeringdb.com/asn/264397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":37}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-07","count":26},{"date":"2026-09-08","count":6},{"date":"2026-09-09","count":5}],"recent_events":[{"timestamp":"2026-09-09T18:32:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-8~Ki!EmhlVya","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d387e4b6921456d686c567961","method":"","user_agent":"","ja3":"","session":"80e43644-da9a-44b4-b876-4f6fc2307319","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"3071816802328698","strings":["BitTorrent protocol","<-qB5230-8~Ki!EmhlVya"]}},{"timestamp":"2026-09-09T14:45:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u001c���{n�\t:\u0005�$\u000eY���;�����e��A�d�V)~/gC\u0007@b�t�~fP�zg��ر2�/E�\u0014�\u0002:�\roG/(�Э���������\u000fJ\u0001�N\u0000�\u0007uO\u001d\u0002A�\n��\\\u0001_����8AX��dvk�Tk14�M�_���n������ȏ���\t_Ib��T�\u00134M}�m�i�\u0003�I\u0019��\u0001cv�\u000e�\b����\u0016F��0BQ\f�,�\b�x�᭤�ek\\&��S��_W���5Ƿ��$~��qA�I��D\u000b�\u0012֬ªcrChZ-�h˴�a��\u001b\u000e\u0002F��:\r�����\u000e���1L\u000e\u0014\u000b!��!�|1\u001bZ&\u000f���C�[&�dZ\u0004�AA���ݙ��=ﱀן�6*��\u0011�7\u0011H4\bVb��=\u001fثs3ϵUѢ�|J����^kHh���Lj�����2�2�I(�)ٝ(2_����q�)�U�w#6�>\u0012�u��\u0002N�&�\"5�D�r�&\u001d`���r�w}��m��E��U>\u0011�*B޾���l��\u001d�/����Ϫ'\u0019Z�����\\5]�o;$C���\u0000\u0018�X��DZ�Ea�lZZ�����ޓ*�F.ƞl�Zk�'����\u0011'vƏ\u0004[�k��\u001bG)$|o,>B��\u000f�\b�.*^�r���੘�~\u001c�D8�iZ�{#6\u0007�Q?�U�\u0007�:��0|���[�9�","payload_hex":"121ce9f8bb7b6edb093a0594240e5992bf9e3bbca3a7b4d865fd864197649256297e2f6743074062a974d77e6650a07a6789dfd8b132842f4586149a023aa30d6f472f28f6d0ad81ebf2c1fc80faf7cc0f4a01da4e00b507754f1d0241cb0a8e9c5c015ff091f2e0384158a3cc64766b91546b3134a14df05fabe1e56ea9aa84faabf9c88fb1b1ac095f4962a7c0549813344d7dd46db369a103ae4919bded0163768d0ee308cbe3e2c016468ff23042510cf02cab08be78e1e1ada4c5656b5c2688d853e8a15f57b4d5e435c7b7eba0247ecbe171418c49f3ef440b8712d6acc2aa637243685a2daf7f68cbb49e618ebc1b0e024686893a0d9284ec82e40ea79ef7314c0e140b21a4fd21c87c311b5a260fc6c9ee43b15b2685645a04f64141f09799dd99c3e73defb180d79fb3362a848111c537114834085662f1c73d1fd8ab7333cfb555d1a2817c4aa7b0c8fd5e6b4868be9dcd4c6af7fa81ae88328732ad4928e929d99d28325fa8abc6c6719f29935585772336eb3e12d37580a8024eca26912235c044af72af261d60e8b1f072f3777d8af86df9ff45edc8553e11fb2a42debeebc1896ce3f61de37f2fa2e7c7d5cfaa27195a86a0d1f6f65c355dab6f3b24438b98e30018e85899a0445aef4561ff6c5a5a86afe7f48bde932a85462ec69e6cd55a6bc327879fe9fe112776c68f045bdb6ba7b61b4729247c6f2c3e42abfa0fa108c92e2a5ea972e988dce0a998e37e1cfb4438d1695a817b233607d4513ff65594078f3a9683307ce496db5b8039ce","method":"","user_agent":"","ja3":"","session":"0e00d1da-dfde-4e6c-b006-798239a5b801","seq":1,"duration_ms":100,"bytes_in":564,"bytes_out":12,"enriched":{"digest":"380b2808eb42e00a","strings":["V)~/gC","oG/(","Tk14","ek\\&","crChZ-","^kHh","o;$C","G)$|o,>B"]}},{"timestamp":"2026-09-09T06:48:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E4\\����y]\t\u0010C}��N��L�����\u001f@WF����â�Y�T��\u0017�'r�ږ\u0015�\u000f̝���K9�4��jb\u001fYذB�g�W�eM�ȱ�0\u0001�G�%r�{��=�W�C\u0003-\u0000JT�(\u001a�~xc����@�2��3��\u001d\u0013�TF��Œ�,�D��������;C��$�:�\\L��{�9O�\u0016z��\u0014��?pn\u0013����9�G*���|������a��}Yw~��YŤ)�G�4u9A4��*�<�\u001b��%�\b�+�\u001d\u0001�{r�>�-�o�?\u0005˕?z�18�N\u001c�ˆ�\u0004̳��-\\^C�⻊\u0018ݶه\u0016�vD�.�9���B�=�\u0010\f��߄^I(��jA��\u0010=!��r���\u0012Q������k\t����\u0014�hZ����*3��4�Q?��ZָJ�D�0TH.-�\u0016�ٳ���\u0015/\bI�\u0019�h��x>��.�x\t:�@p\u000eϕ����ǩ�\b\u000f","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4ec897ca-0fe2-41ec-b9e6-17fea6e7eb01","seq":1,"duration_ms":101,"bytes_in":397,"bytes_out":12,"enriched":{"digest":"3532a76b2d438db1","strings":["}Yw~","4u9A4","-\\^C","0TH.-"]}},{"timestamp":"2026-09-09T05:01:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-KqFjesC)i__r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4b71466a65734329695f5f72","method":"","user_agent":"","ja3":"","session":"46f88191-d142-45eb-84b0-b0e92d3f6dff","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"071c0122b3d5b2e5","strings":["BitTorrent protocol","<-qB5230-KqFjesC)i__r"]}},{"timestamp":"2026-09-09T04:59:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-YCd_z3uSqbyC","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d5943645f7a33755371627943","method":"","user_agent":"","ja3":"","session":"3e31bfdc-ebf1-4142-9609-394a471961ab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d2e775409af5f3e3","strings":["BitTorrent protocol","<-qB5230-YCd_z3uSqbyC"]}},{"timestamp":"2026-09-08T12:16:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"P\t��\f�\\��j-·ᰟ�&S�������l�ta+�#�k�$��\u0003�[���Te�\u0007\u0016���\u0013L�']�)h�\\���>{��qZ���یm�P��\r\u000e����]��,�9o\u0004\u0000��<\u0000R��7[����j\u0018�nM��SåNR�S^\u000eG�\"��v?","payload_hex":"50099bc30cdb5cf9f16a2dc2b7e1b09ffa2653aa9efdd9d2f9d06ca774612bee23936bbc24cdfa038f5bf8a69454659d0716aeccfd134ce9275d932968945c9e9c863e7bccea715a93f79ddb8c6d8a5091d90d0ebb87daed5d99ba2ca0396f040084d93c00529a9c375b8bf0b8bd6a18ef6e4dc09253c3a54e52a1535e0e4789227ff3f4763f","method":"","user_agent":"","ja3":"","session":"5de3a5ed-45f4-4af2-af88-7196e6e175cb","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":12},{"timestamp":"2026-09-08T05:07:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0007\u000bD���O�AW�����!B[\u0015˗�ig�\u0010�vZqk�G�\u0001��(�/}��������\u0000�^R���l\b� O 5?8އ��|�s \u0010�5�nS�KTE��c!��g�=�Nv��\u001c4�� \u001e�c_]\u0001�P\u0013��$I\bo���I��9�ǹ\\�%��4\u0012�Ψ\u0006Ggm|�f\u0007\u000e\u0000B�덄\u0005�\t��?���\u0011��V\u000b��'�륡)\n��yF�:��\u000b\f�\u000b�\u0011�q'\u0000�i\u0003 �c����W\u0019>\u001b'\u001f\u0019'o�\u0011�\u000e\u0007>|�;�U|�z�t)T�RF��\u0011�\u0013�i\u0004�%!�e�\u0012[\u0000��sJ�z7)9�x\r���5s�]�n�\u001f߆:TPu�������r4��D�\u000f�����YH$�n�%~��\u0010D����-�����\u001e\u001c��\b���\u0006���\u000bbF��k\u0003n�Ԍr\u001d6�D�\u0004�\"d�t\u0005zs/�\t�����}sԈ���d���wX�t�����\u0006���l\rE[���p��t� �?�:��F@Q{\u0015\u0019��H�\"Ht���̃C+\u000f��o\t�;�E\u0019G�M�r_}M?#��YE۟\u0013�g\"�1�\n.\u001e\u0011�\b�������8","payload_hex":"ac070b44a5b7d14f81415791e3e2efe921425b15cb97e76967ed10af765a716ba747a801b8de28802f7df69ecbc7f695c1bd00df5e52dcfdfd6c08d0204f207f353f38de878d837cc7732010e035df6e53bc4b5445b6a06321f2b567b53db84e768fa31c34a99b201e85635f5d01995013ae802449086ffaf4894998dd3995c7b95c8225bbbc34128ccea80647676d7cd666070e0042feeb8d8405b9098df43feab8f611efad560bced42798eba5a1290a8bae7946d43ab9990b0ca40bb51184712700a46903209d638281ede057193e1b271f19276ff011bc0e073e7cd73bd5557c9d7af6742954d452469edc119013cb6904ff25219665ca125b00a5b0734ae47a372939ce780dfdeca73573e65df66ea51f7fdf863a7f545075bd7fb2c4fa91f2f07234f0b144f20ffebe8e93cc594824926eed257edb7fe21044d0cdea9c2df99b9b93871e1c859b0884eea406ffbef10b6246ea896b036e86d48c721d369844f204d222648174057a732fce09aa86c197be7d73d488c1f28e64f2e2e97758dd74c8caeac9e706be9db86c0d455b99a3ef70cdd6747f8d20da3ffb3abbf74640517b1519fe8a48a5224874e5dff5cc83432b0ff7976f09b13b85451947854dc0725f7d4d3f239ef55945db9f13e56722eb318c0a2e1e11f708e7d0feb0e7f9e838","method":"","user_agent":"","ja3":"","session":"df4ecf65-f7b9-46c6-a2b3-72fc2ba2c2da","seq":1,"duration_ms":100,"bytes_in":483,"bytes_out":12,"enriched":{"digest":"90d1cc6c2046e107","strings":["vZqk","Ggm|","z7)9","F@Q{","r_}M?#"]}},{"timestamp":"2026-09-08T00:07:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��H�0�\u0017����3���vbl�ki|\u0019��\u0018��ݟ�\u0012 \tP\\��q\\\u0011��u?EL���\u000b\u000f-�\u0004�\u0002����.g�=\u0014������:�vg�,C\\^H!�z���<O\u0013|ݚ�\u0001gv\u001f\u0004�g������f,�\u0006��D\u0001=��$-���|\"�2K$���ԕ�,?OSY�����A�k\u000e\u0015CE?\u001d�o��W�+X�?�v���JW�z4��R)�z��?\u000e�\u0013c,�J�98��B\n��g�R0��o���Ur����\u00134\t\u001f\u0001V\n�߄\u0016�\u00129�b�K�zn1spF��\r�G/bUw�v10>\n�[\u001d\u0018��l���:\u0000Rs\u001bC�\u0018†�\f'T�e\nH�\u000eu�N��U��@\u0013\u001f�W��ۤ�X\u0001m�ƘL��!��\u0012�\u0001��l!DW�\u0017\u0018,�O���9��L\u0007E3-E�� Ƌ\u0010�\u0006�j��׫q(){B͓G�u�q4\\�������d�x�s<��\\�}�A\u001a2�I\t�\u0003���q�\u0016㷦��/\u0011BC�P�\u0000 s�,a%\u0019�ɍ\r�y�\u0010�1�~������\t�\u000eͣ��\u000b.a���t0�s�JO�P\\�\u001ac�\u0019�\u0006�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a23e4418-1bf1-433f-b296-880b4c11b48c","seq":1,"duration_ms":101,"bytes_in":478,"bytes_out":12,"enriched":{"digest":"980e9998b254aa4b","strings":["u?EL",",C\\^H!",",?OSY","zn1spF","G/bUw","v10>","l!DW","E3-E","q(){B"]}},{"timestamp":"2026-09-08T00:05:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@w\u000f�\\UT���5T���8�R\"\u0010C�-Ʃ���%��kЙmD���aԡ��p��&\u0010Gb\u001c��r�\u001aC��ڝ�i�n\t���@���&\b�j�K>�K�������䙢RO\n�o4��,���.���\u0010\u000e�\u0003���/���y���!2��[�/\u0016�f�\u001b>�N���IVh\u0005�vgZ%�QV{\u00164������\u0002rᙋuX�Iv��\u0013���\u0012��KU+\u0002T�3ϥ�-T\n&�y-�MmM�","payload_hex":"40770ffe5c5554a9c1f5355489e09038cf52227f10439f2dc6a9d3f1fc25e1a06bd0996d44e991c761d4a1fca670f887261047621ce8cb72841a4396d9da9dc469bb6e099387d540d9f1812608c46aa94b3eb94bb79db294bf918ce499a2524f0acc6f34dad52c95edd42efaf7d3100e9903c4d9e32fac919379d0eff62132f49a5be12f169266c81b3eb54ef4bec3495668059176675a25ab51567b16349eb68bb7a7a00272e1998b7558e84976c6ee13a3e39d12ed894b552b0254b533cfa5852d540a26cc792da54d6d4dc3","method":"","user_agent":"","ja3":"","session":"5bc8f306-2cdd-4d9d-9154-2ab78152a480","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":12,"enriched":{"digest":"529af200bf75bc11","strings":["vgZ%"]}},{"timestamp":"2026-09-08T00:04:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-8GI_ui6EAEt0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d3847495f7569364541457430","method":"","user_agent":"","ja3":"","session":"9ee9c057-cf54-466b-8aee-3bfee2a1e024","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"bcf2c18a1f74243d","strings":["BitTorrent protocol","<-qB5230-8GI_ui6EAEt0"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:14:24.518276+00:00"}