{"ip":"164.163.36.2","total_events":28,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["28 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,774 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,774 bytes sent","bytes_sent":5774,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T23:41:12","last_seen":"2026-09-09T06:07:56","events_24h":0,"events_7d":28,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Ipatinga","lat":-19.4386,"lon":-42.606,"asn":264397,"org":"SUPRANET TELECOM INFORMATICA LTDA"},"source_domain":"164-163-36-2.supranet.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264397","label":"SUPRANET TELECOM","category":"isp","url":"https://www.peeringdb.com/asn/264397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":28}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":4},{"date":"2026-09-09","count":24}],"recent_events":[{"timestamp":"2026-09-09T06:07:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��ǻ\f\u001a�ـb�gs\u001d��\u0003:\u001ẽG\u0001�\u0002/�9�V�*T޿��\u0016\"\u0012qPu�1�ThT>��=up�L�ai��L\u001dGD�����4+\u0019�\u0014����2\u0000\u001c[�\u0000���Af��\u000fx1mG{?\u0018���'\u001f\b6\u0007�/\u000f��5�0Ԧ]3\u0003Sw���c�\u00039\u0000Q��1�h�\u0005�Ǵ��K\nF��\r\f>�;/��<;YVi�s��\\a�J(��\u0015\u0010d���L]�cP��ǀ�\u0004�\u0016�>��\u0001g���0i��4�D�\u0004bvjc�qċ&Fsb��^����#o\u001cFޜ���\u0006/���sC\u000eM�\u0004>#���*\u0018�Ȭ��!��E�Q[h�k�,\u0019i�\u001b�\u0012��\u000b�>nr���\u000f(]�D�p�tV�W�!\u0004\b�|�2T�{G8Z���H�؄O�.O��'ڂL\bE�\b�\u0019)��m�`����f��[�\u0000Z�\u001a\u000e\u000e��_��\u0019����TYl썒�@\t�-}��.�N��%�|Oۙ�M�B��K�����k\bi~�1�Yx�(\u0014�;��I�]�\f\u0003�dԨ��H��@3�48\u0013b<?\u0011dj�Rx�z�x*fU�^ܩ�\u0016\u0015�//�0��1|�}��t�H۲bu��NK�\u0002�]�qx0�-ha�\u001a2a)�J\u0001U�ҫ\u0018&,�_�g��QyAfn����.`��[��C���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6bff7444-e541-4d6b-9a64-23e44898d8e9","seq":1,"duration_ms":100,"bytes_in":548,"bytes_out":12,"enriched":{"digest":"4f468a7508322351","strings":["ThT>","x1mG{?","<;YVi","bvjc","&Fsb","{G8Z","x*fU","QyAfn"]}},{"timestamp":"2026-09-09T06:05:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"O�\u0000�ʺ�;\bc[\f�\u0018�,�Q�V�8tPб�O�\u000f_�\u0007�j��d?m��0}���=@�\fj����\u0003\u0000\u001fD\u0000���`\b���cE.�~���+��B;`��������s\u0016�g���3\n\u001a)\r���p.�*�әȓ\u001b��\u0005U�O[m���3\u000b��@\u001eLL�\u001cP�M\u0007�I����\u000e�Ʉ��\"\u0004y�J& �$����J3HG��7�'\u0000�\u0015\u000f�!P�����O�R��Ȑz���'\u001d����;\u000e8T��C�\u0019�휬O��J\u000e;�w?���GU�}�2|\n�OZ+$\u0014��\u000f.O��ɪS�\f)�\\\b��aU\u0012\u001e\u0010���0c#]�\u0010b�u�v\u00079,s���\u0010����<�1�V䟴&\u001e�\u0017!���\u0007�RL�\u0019�§ɶ�\\���\u0011�\b֋�J�c�3Oya\"�q�[\b����%\b��p�R���}Nr�\u001c|.Ҳ\u0013�WODz\u001f0�\u00111�r\u0019�LW2,��;X�g�\r��\u0017�\u0011��6Ȼ*>^��Sci\u001a\u001f=~\"�N$�\t\u0012,Ռ&�j��;�E\b���e\u000e��\u0006�\u0010�*9�/_�5<p���-ȗ�\u0005�\u001c\u000e�h\t-��u(�.�5_3�8�<y�\u001f�Ρ�)\u0017_q*��\u0000N<�\u001a0$���f�\u0016'�\r!qR,\u0003p��ets�_��KN�R+�\u0016A�\u0015��7M\u0010��]�X�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"81c7a216-85c4-4b61-bce3-726cae3212cf","seq":1,"duration_ms":100,"bytes_in":550,"bytes_out":12,"enriched":{"digest":"dc016c1e654a5630","strings":["J3HG","OZ+$","0c#]","3Oya\"","WODz","LW2,","!qR,"]}},{"timestamp":"2026-09-09T03:18:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-0r8lxqbLn_TJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d3072386c7871624c6e5f544a","method":"","user_agent":"","ja3":"","session":"08e8226d-6d42-42d4-9339-3efd110d1384","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6be7d743d44872af","strings":["BitTorrent protocol","<-qB5230-0r8lxqbLn_TJ"]}},{"timestamp":"2026-09-09T03:15:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-MJvS~aEueyyI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4d4a76537e61457565797949","method":"","user_agent":"","ja3":"","session":"d08320aa-43d1-4e30-a299-ddf0b5bd4e97","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"9948efd9ddf65396","strings":["BitTorrent protocol","<-qB5230-MJvS~aEueyyI"]}},{"timestamp":"2026-09-09T03:00:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-~7Qg2JwK-DE1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d7e375167324a774b2d444531","method":"","user_agent":"","ja3":"","session":"83db57d3-12ba-4b45-802d-ba37efd15722","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"7d799d9b373285ec","strings":["BitTorrent protocol","<-qB5230-~7Qg2JwK-DE1"]}},{"timestamp":"2026-09-09T02:59:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":".lm\u001d�n�`\u0019�na�iT���3Y�3.����q��,R\t�:��\u0018D<^��\"�2\u001e���\u0007�\u0016Tb$��g\u001c{\u000f��4�h�\u0000�\r\u00053Z��?��\u0003̩#�r\t��C�0���%vy�۶}*","payload_hex":"2e6c6d1d966efc6019d76e619c69548dfeb73359ce332eaeebbce771c6ef2c5209b63a9ac718443c5efcd122c0321e9a8cf307ba1654622482ea671c7b0fc19f34a668c400da0d05335aeeac3fc7df03cca9239372099ab843ed309fd7f3257679a5dbb67d2a","method":"","user_agent":"","ja3":"","session":"2e715ab9-0f08-4273-9b9d-58a6c173505e","seq":1,"duration_ms":100,"bytes_in":102,"bytes_out":12},{"timestamp":"2026-09-09T02:58:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-RdY4.FnCOJQH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d526459342e466e434f4a5148","method":"","user_agent":"","ja3":"","session":"036d2e93-1d7f-4526-9930-4848b0054163","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"4eddcb12927662f1","strings":["BitTorrent protocol","<-qB5230-RdY4.FnCOJQH"],"iocs":{"domains":["qb5230-rdy4.fncojqh"]}}},{"timestamp":"2026-09-09T02:55:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-cE3tbjp9YqQ4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d63453374626a703959715134","method":"","user_agent":"","ja3":"","session":"b7f3cafc-4f5f-4863-ba37-97cefe6cd563","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"fd4147dedbc0e33d","strings":["BitTorrent protocol","<-qB5230-cE3tbjp9YqQ4"]}},{"timestamp":"2026-09-09T02:54:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%�t���ސ\u0005\n�\r!�-�mF.�s;y�2�\u0012D��[�t\"?�g���\u000e�K\u0006������\u0014�y�%H����_�\b\u0012��D\u0016pOH\u0013�{\u001el����龀��wW��\u0007UЭ��}`��Dڱ8\u00175ΠM��\t>\\�}{��L{��~��1�?���\u0012���/H%g�~R5��\u0018\u000bۇAj�\u001e��c�\u001f8W\u000eͣW<�\u0000�Hi�#��=��j)�\u0018;�:vo;���)\nٰm��vx[C��\u001doR�8\r��x��.Z\u001fd��l�՚g�[�����\u0001��<w)0�k鉓�������\r�\\wo\u0000i�\t�\u000b��x+\u001f\u0015&VN8\u001bd댏�\u0005\u0001�#F�ׁ��Ƀ�ѹG�9q�J\\gK�!=Q�8\u000b�*0g̞4ζrl�NW>\u000e����\u0012P��\u0017:�m��l\u0002�\u0013���k�\"l���DxjB���v!�Yˆ�*�(�Hb�݌���i�ec}�\t�!���ZIKp\u0016���r\u0000�K�g\u000b�)�w{`߹!��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c9282544-9016-4512-8c95-91f8ae121ada","seq":1,"duration_ms":100,"bytes_in":418,"bytes_out":12,"enriched":{"digest":"bf5e6d3020526ff9","strings":["/H%g",":vo;","vx[C","<w)0","&VN8","J\\gK","DxjB","ZIKp","\\woi"]}},{"timestamp":"2026-09-09T02:53:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-OjOCAD*r~3.c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4f6a4f4341442a727e332e63","method":"","user_agent":"","ja3":"","session":"bc7a1b5a-6243-4981-b644-f368d8420f52","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"9c7b239c3940bb04","strings":["BitTorrent protocol","<-qB5230-OjOCAD*r~3.c"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:19:18.346045+00:00"}