{"ip":"164.163.36.1","total_events":23,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["23 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,812 bytes sent","bytes_sent":3812,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T05:33:12","last_seen":"2026-09-10T03:33:13","events_24h":20,"events_7d":23,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Ipatinga","lat":-19.4386,"lon":-42.606,"asn":264397,"org":"SUPRANET TELECOM INFORMATICA LTDA"},"source_domain":"164-163-36-1.supranet.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264397","label":"SUPRANET TELECOM","category":"isp","url":"https://www.peeringdb.com/asn/264397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":23}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":6},{"date":"2026-09-10","count":17}],"recent_events":[{"timestamp":"2026-09-10T03:33:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%L�\u001d����3��\u0000���b�݀^a�\r\u0017�\u001fz��?x\u0004:�����}\u000e�� �4{���\f�Ԝ�\"�\u001eV�舦5��4�\u0016\u0010bs���M\n\u001bX�|,\u0013�_\u0001��Y�uᐬV�\\��Q\u0012�A�\u0014��\u001fǚ�i؃\u001dt\u0013��Ѐ�)e\u001f��e$��]�\t\u0002D��\u0017u�,\u0004����)��m�3ẜC*��X�~`�\u0018��\u0018/F��D�\fi\u0013��_zPՇ�>\u0003�W�\r�LH헷��u,�1�\u001fk����\u0014Ig���J��","payload_hex":"a9254c961dff9cb1c433f5e400b7e69f62f4dd805e61b80d17a81f7afff43f78043a9ae9f6aaf57d0ed7ca7f20bb347ba9ebde0cd4d49ce922cf1e5687e888a635faa334e816106273f0bb924d0a1b589b7c2c13f95f018fef598c75e190ac56d15cd8c551129f41b6148bc01fc79aa269d8831d7413a9cfd080cc29651fa7b2652494ec5dbd0902449cf41775952c049f999dd12980ee6da033e1ba9c432aa1dc58d07e60fc18e387182f468b8644d50c6913e9ff5f7a50d587ac3e03e257a30db34c48ed97b7ff90752ca831861f6bf1b9fbe9144967b7f48e4ac6c9","method":"","user_agent":"","ja3":"","session":"b26354e0-c2b1-4472-915f-a3944c09e544","seq":1,"duration_ms":100,"bytes_in":221,"bytes_out":12},{"timestamp":"2026-09-10T03:30:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ZՄ\u0003�5=��?���\u001a7�Y7�\u0016R��T�@���JF��>�~\r�^\u0014���BP�i�V%2�X\u000f\u0005��Tu� \u00055�/��/�3\u0010�vNU��\rk�t�kth�u\u0002GY��+��&��SGލ�`p\u0004=\byo�%�A�P\u001a����g�\u0004\u0017�\u0015.8��F\u0006j�\u0010\u0017N�kB\u0007�r��OB6{�m��kRi\\%��\u0011:G4z'R��\u0010�\u0018C��Z+ͪ�K_\u0002�O궇N@\u0019��G�`@���i`��c6V�?\u0013��V1p)�{�p~��e�\u0018��\f�����-�ep������elA%4JAmQCJ�ށ�rī\u0014_N���d��x���E�6}5�O�δj�F\u001f\t\u001a@�/p�'��U�pYɻ�Gl�G]ɝg�hq\u001d�?�b+4^�\\�bm\u0014%�E\t=5�f�o�\n|X.\u0000q\u0017T\u0018\u000bL�-�T�!��\u001dR[������\u0000��\u000f\u00148s���7@�\u0007Qi\b�S�T8�&Kg�[@=\f;-�I��\u0003h�s e�2T��ƪ�","payload_hex":"5ad58403d7353d82cf3fffb29f1a37a75937831652918654c840e58bf14a46b5b93e867e0dc25e14bf89ee4250b269ab56253281580f05fbd75475b5200535fe2ffbb22ff33310c8764e558bf30d6b9f74a96b7468b97502475985d12bccf72690fb5347de8dea6070043d08796ffc259541b4501ae797c6d967af041785152e38c1ec46066aa610174ed86b42078372f3f84f42367ba26df8fa6b52695c25c8c4113a47347a2752eed310ef1843a3cd5a2bcdaac44b5f02d44feab6874e4019c4d747ca6040afb6cf6960feca637f3656b63f139ac0563170299f7b9d707ef3e2659718b2e40cb0cdc1f69a2da165708ea1b59abfdf656c4125344a416d51434aa5de81f472c4ab145f4eba889864bac77889d9d145ac367d35ca4f82ceb46ac0461f091a40d12f709327eccf55d27059c9bbc9476ce1475dc99d67c168711de33ff0622b345eee5cd9626d1425ae45093d35c366956f9a0a7c582e00711754180b4cef2df154dc21e3ab1d525be7fd98c0b7e900b7970f143873f6a0d23740f407516908ff53d15438f7264b678e5b403d0c3b2d8b49d4c60368cf732065963254aee2c6aa88","method":"","user_agent":"","ja3":"","session":"bc36beb4-ba5b-4896-bf3d-b906802e7947","seq":1,"duration_ms":100,"bytes_in":423,"bytes_out":12,"enriched":{"digest":"5e17897c36eb3f93","strings":["OB6{","kRi\\%",":G4z'R","V1p)","elA%4JAmQCJ","b+4^","|X.q"]}},{"timestamp":"2026-09-10T03:27:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-ZFcO6-1E9Kkw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d5a46634f362d3145394b6b77","method":"","user_agent":"","ja3":"","session":"9a5eb0ff-d13b-42c2-bced-8df78849af76","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ffb475d6ce96ae84","strings":["BitTorrent protocol","<-qB5230-ZFcO6-1E9Kkw"]}},{"timestamp":"2026-09-10T03:21:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"<��9\u001e�\b��6}yC\u00048x�Զ\u000b&WH�\u001bߨ||r���\b���\u0003\fݸ�\u001d84��L֮^:N���1��� \t��n�ɕ��̢���o)���^�\u0003�N�\u0007��\u0010w���63\u001fqI�kS��\u0005X`�\u001a�o��1\u0016Ӎ�������.�o[��\u0011\u0010\u0017�\t�<�ƚi>j���fI�\u001dU\u0002�\u0015\u0002�9���\u0002q","payload_hex":"3ca0fd391e8908afba367d7943043878bbd4b60b265748cd1bdfa87c7c728eafe708b9e59f030cddb8af1d3834c8c94cd6ae5e3a4eade9b831ee90e320098ce26ecec995d5c1cca2a0ba846f29e283d05ed6039b4eba0787e81077c4eaff36331f7149ef6b53d3d5055860a11a846fa1b13116d38d96fd908d9880a82eb56f5bb2a91110179509f13cf2c69a693e6ab5ead06649c81d5502b31502ee91bbfa3996a4fe0271","method":"","user_agent":"","ja3":"","session":"287f271d-d845-4086-b9a9-b721634bdbd8","seq":1,"duration_ms":101,"bytes_in":165,"bytes_out":12,"enriched":{"digest":"98f5018d222e179c","strings":["6}yC"]}},{"timestamp":"2026-09-10T03:04:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-sEhywq3Hxsjb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d734568797771334878736a62","method":"","user_agent":"","ja3":"","session":"b5c0ad5b-ba03-4511-97e2-5b50e18653b2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"3571ad783f16f60a","strings":["BitTorrent protocol","<-qB5230-sEhywq3Hxsjb"]}},{"timestamp":"2026-09-10T02:17:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0007ömdvM�Ɖ஄��'_�OJ��\u0005���\u001c'g�qh_�v����n���A��z׏I%0PN!�8��f��j�\u0001\u001fcXȰ~���?Y��ۻ�����F�K\"�\u0010-Q�mB\u00173��\u001bVL'M\u001b���h��O��e�\u000fg�%����-5\n�g\u000b��x�\f{�fr�̽�ӗ�@\u0017,���/7\u0005uF�%��{Ō�s�g\u0003�q\u00064b��xI���C̽����+�\u001d�~D�\u001ab�ׇo�~��8�\u001d�T�\u0012��ʪc��G\u0003�\u001c̬S'��m']�?\u0001�\r�Ħr\u0015��\u0010���PԪ���G�]�~�\u0003�^i��j\u0007<�v\u0001��\u001a�,\u000f��鲕X�;۩/\u000210�����\u0010","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d260f84d-0e39-4174-a8e4-aabe7d8c75a2","seq":1,"duration_ms":100,"bytes_in":301,"bytes_out":12,"enriched":{"digest":"29dcd5245aa2df9c","strings":["mdvM","I%0PN!","VL'M"]}},{"timestamp":"2026-09-10T02:11:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-!R4u6lB!CMla","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d21523475366c4221434d6c61","method":"","user_agent":"","ja3":"","session":"f15acce7-faf7-4458-9ddc-d97cc0e36041","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b2068e5318053c1e","strings":["BitTorrent protocol","<-qB5230-!R4u6lB!CMla"]}},{"timestamp":"2026-09-10T02:06:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-Fv~gsX*Y4DaB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d46767e6773582a5934446142","method":"","user_agent":"","ja3":"","session":"06ff6cb4-a0da-4d97-8f75-ee73bdd4bc2d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"024ea21e8000873e","strings":["BitTorrent protocol","<-qB5230-Fv~gsX*Y4DaB"]}},{"timestamp":"2026-09-10T02:03:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-nD)t4aJeDKIO","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d6e44297434614a65444b494f","method":"","user_agent":"","ja3":"","session":"90e1ceeb-4058-476b-abd7-7a4b2164e313","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"27426dc88d98841d","strings":["BitTorrent protocol","<-qB5230-nD)t4aJeDKIO"]}},{"timestamp":"2026-09-10T02:02:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"{�\u0011\u0016ԳH�'Ӝ�p00��\u001f\\�T\u0004\u001e.<g�۩�Y�i�������N�_��sӹ=�e^\u001eW=$-��\u0019�\u0000�;�P0\u0002X���8ߚ\u001c�UM��.h\u0018F�]�\f�9݊\u0013�\u0001��U\u0017�h?\u000fL�\u0012�\t��r�`�\u0017\u0018f�\u0001\u0019w�*�Jq�eA\u001dS�I��V���\u0000��\u0007i�� Ե��ى��q�6g�e�\u0013\tmf����\u0017�ـ���7\nj��U\\�\br����\u001e�R<�͓M�:��F\u001fm��%�\u001eR^�,�p���\u0018�����[V@�\u0017Ƃ_o6��\\'E\u001du�O^p\u0005���\f��\bH��&��J��!�c[|�0�xE�t���\u0003e<\u0019�Y�T�r6���kuʠ\u0010�B�ȯ��(�\u0011u�\u0002bx\n�%n�:|�\u00072\u000b't\u0000�~�!�:\u0014O�\t\u0014�o\nFQ\u0019Q1�^�g�k��Q\u0015���0�63�5)Pz>�����q�6/�(�;oюAd�\u0002�6�\u000bi�S�KU��/�\f�q���>�ϥ�\u0019\u0016�L�/�o���궿zK\n��OC��F/�\u0006�pz���J�T��\u0003��3�wua\\\u0007�i`�&\u0010.��\u001dgr_r�q��h�#A1E[K��w��H�q���~\f\u001eh�٫q]3�\tL�͠.!��t偒�'¶���Ѧ$","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5537a007-98a9-47d9-9e49-a8e04354e744","seq":1,"duration_ms":100,"bytes_in":538,"bytes_out":12,"enriched":{"digest":"2e4b5088b450dc00","strings":["W=$-","5)Pz>","wua\\","gr_r","#A1E[K"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:16:43.309119+00:00"}