{"ip":"164.163.36.4","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,095 bytes sent","bytes_sent":1095,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T17:36:11","last_seen":"2026-09-09T20:49:56","events_24h":0,"events_7d":4,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Ipatinga","lat":-19.4386,"lon":-42.606,"asn":264397,"org":"SUPRANET TELECOM INFORMATICA LTDA"},"source_domain":"164-163-36-4.supranet.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264397","label":"SUPRANET TELECOM","category":"isp","url":"https://www.peeringdb.com/asn/264397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":1},{"date":"2026-09-09","count":3}],"recent_events":[{"timestamp":"2026-09-09T20:49:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��������Z�Wlq\u001e�ӹm\u0006��\u0019��P��qٽ��A$�\u000e�5e.2�D��<\u0003\u0004N�E����Ef��\u0003�^�@�_�\u000b!&ϚsV#'�6�R\tY4�ئj9\t�x\u0004@�#(A�3��(\u0010�m�1yt\u001a���,�{\u000f�*��4n9�S\u0016�����\u001d>7�\u0005z\\�\\ţ�a[�\u0013\u0016����2p\u001d���-\u0014�\r\u0006����\u000f D� �@a\u001b\u0007�\fK�)'�\u0003\u0006l\u0012nE\u0001�q!$��2�Vy��_!L|2lM�0\f�S���.J�\t�����\u0019E�/,\u00002��VE�k�h`�Tڗ3���\u0007\rI\to\u001fS�����ØWdƎ�_��f�\u001f��1z�\u0002F��\u001b���'B�A�\rl!hz�~�LG��t���T�*ȶ�VT�J�\u0004�WA|��O$ #w���������xC�,A�M��96�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d7d51697-fd1d-45dd-be38-cb7edcd6a909","seq":1,"duration_ms":100,"bytes_in":356,"bytes_out":12,"enriched":{"digest":"7712b4bd5715cfe6","strings":["5e.2","sV#'","_!L|2lM","l!hz","O$ #w"]}},{"timestamp":"2026-09-09T20:34:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0006ĬY��p`b{E�2*y��\b5����ѭ�\f!(}�y�_\u0012p1���R\u0002\u0000�=RT����4<\f][�LW\f\u0010\u0015\u0019�M(�B�ՖL�\u0005���(�\u001dɍ�\u0007_�5d�U��\u0007@�V���D����X�,W��/%�1IP5�\u0013�\u0018���١�Ea�Ψ�p��(�G6�[֩V�lw��R����������v%��J����'g#���\r�\u001cu�I\\�s��]K�N�E����Mu^�fnEN\u001e�CԎ*\u0012l\u0001z2\u001c����$%]к�4FiFTV\n�&AK�����atu���RKjJ���!+R>�\u000bX����Y\u000e�3�`�M�*�2��2cL�\"�\u0011�\r����n7��)A��d\u0005\\x�J��\n�Wo\f'\u0003fŏ�\u0003MQ�\u0006�\u0019c���`�\"�`","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"680eb963-8b48-404b-b8ec-0c200d16c7e4","seq":1,"duration_ms":101,"bytes_in":345,"bytes_out":12,"enriched":{"digest":"17e44044a4dc7e6c","strings":["p`b{E","1IP5","fnEN","4FiFTV","RKjJ","!+R>"]}},{"timestamp":"2026-09-09T20:23:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-AZ84028o8F!o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d415a38343032386f3846216f","method":"","user_agent":"","ja3":"","session":"ee49c751-540d-4034-96e9-6d238cdc4626","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"74f3dff6897e2bab","strings":["BitTorrent protocol","<-qB5230-AZ84028o8F!o"]}},{"timestamp":"2026-09-08T17:36:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\n%\u0018ϒ6.�Z�\u000b*nx�Nԋ�/\u001b�I�{x�aet7��`�\u001b�5���\n�O_\u0011d$G���/�ɨu\u000fb�o\u0013Gv�� O�b'�21Ed��;F$��>�@-\u000b�}^�Z@\u001f�\u001e�Ԯ��/�_͹\u0018�\u000fl3�_T>��VT\u0016�Q�\u0015�\u001b�8