{"ip":"164.163.36.5","total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["3 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,281 bytes sent","bytes_sent":1281,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T14:45:24","last_seen":"2026-09-08T15:03:15","events_24h":0,"events_7d":3,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Ipatinga","lat":-19.4677,"lon":-42.5379,"asn":264397,"org":"SUPRANET TELECOM INFORMATICA LTDA"},"source_domain":"164-163-36-5.supranet.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264397","label":"SUPRANET TELECOM","category":"isp","url":"https://www.peeringdb.com/asn/264397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":3}],"recent_events":[{"timestamp":"2026-09-08T15:03:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%(�\u0012#Ziֵ�\u0000�\u001d�T4����\u001fms�7�\"/�\u001aq\u001cU\u0015_�\u0001��]�t鳆;���RF�\n�y��\u001f��_�\u001a7��\u000b\u001clPj�p�-Zip�z�\f��,���fc��r\u0006�mzW-\u0001w�`�,�t\u0011J���phf\u0006�IA\u0017�@�*�ـH�\u0000\u0014�ęQl��\u0005�S�u-\\v(\u000b�\u0004M�Ȓ\u0004�iyC�\u001ayM<EaXp�\u0006�����ո��0u��|��C������\u0013_�\u0005\\��\u001b��D�ZL���\u001cX��f��Δ��\u0011\u0015�|��\n/�巶\u0005,���4+��䉯�\u001c�\u0019�+?\u0010�rc�x��\u0016T�\\޴��9f���k>g{���>����?am�\u0000NSb\u0001Wn�:(v(5�.��z���r�\u0001�Q{C(�Aa�R�ik�Q~�]�*3�]��iG8ʽ��:p\\�_;om�*�EI4\u0002{�q�_v��N��H�t\u00149_`\u0004J��;C$i��\n\u0005tTAlq\u0003;�̔��PD\t@M�Q�\u000fLEU��\\7�;���I(:U\fܟ\u0000�\u001d�\u001c�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fc888716-1fd5-4e18-a3c0-4809ddf906c5","seq":1,"duration_ms":100,"bytes_in":439,"bytes_out":12,"enriched":{"digest":"d4fd0caee0ef4a62","strings":["-Zip","mzW-","u-\\v(","yM<EaXp","k>g{",":(v(5","Q{C(","_;om",";C$i","tTAlq"]}},{"timestamp":"2026-09-08T14:52:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"fGj5\b�q~�p��(�\u0002 mq�l��8�X&\u0012~�{�����k^\u000e��+Ԑ\f\u0002\b���~0\\\\P�\u0013A&�+�ig��l�\u001e�\u001b��F�1c\u0001�9:*+����%`]u�&�Gї�F)\u001c�Vc�V��\u0001k�,#&����\u001a\u0010��ip�*�\u0006��K\u0001�Լ\u000b�>\u000f�;Ĉ�(H�f5D�郦*����\u001eܥ���d�3��@���\u001bq�|�P҇,��x,�A\u0019���|�o�\u000bN�1\u0004\u0006��5� ��XC\u0013����\u00162Ť�2�\u000b��A:k\u001fk��\bv�Ӎ#�{V\u0000�so��_4%ʫ���C�ӦG��;����PJQ��Z��\u0006$�\u001a�B�\u0001�o�m���\u00129tW��U\"ԫiǙVg\u001d�\u0010\u001c��ɞ퉨h\u000e�\u0002�\u001dܖ�~\u001ceb\b�;\u001bW��\u001fiW�qȥ<:p�2\tSc�ȶ��5�!\u001f�5�o��K��6(\u000b�\\8h�\rQC","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"72065d61-8891-4caa-8da9-2c09eb5b761d","seq":1,"duration_ms":100,"bytes_in":383,"bytes_out":12,"enriched":{"digest":"4b2d466068a144c2","strings":["fGj5","~0\\\\P","9:*+","%`]u"]}},{"timestamp":"2026-09-08T14:45:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����[x�.Q�S\u0005Ә��>��\u0003�S\u0000���y'87��:���^k{\u0006�d`�Ƀ�\u0014�����R`'?�#�@z�I��Ɩ{�O\u001e\u0017dl�pG��u�r�e�\u0005����n\u0014D�K���]����6Dyj��ͽ�k�o�^�~�Y�W�6>B\bĭ/)�����ʯF$�i��Q���f��5C0�9��\u0001\u001d��\u001e�6�x�Uvk�b7k�����\u0005C�'�p�%\u0004\u00159\u001d�\u0003p���}h�\u001d���]�d\u0018��ce�x��+w��X����مM�\u001f�wC!�\u001b\b#T�g�\u0018���)_.� �R�Fa�b�)�bƞ��m_U��+�I�ȟqn\u0003ⵄ�zR���4ix��7�L������H�9��˵�D��w�\u0007%N��]�\"��:��{��P%��?\u0019��\u000f�LnY��t&L\u000e�\\t��- Dg?g��d�$\u0000�(��겂�\u0019Ӏ���I�J424�����d���`��46-\u001a�Pn����F5T8�i�Y)\fJ��y+�� \u0013,���G�ր\n��k�\u000b��\u0001�x�o8���\u0004","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e52c8f30-9539-44a9-b9f6-09ef6f49faf6","seq":1,"duration_ms":100,"bytes_in":459,"bytes_out":12,"enriched":{"digest":"f08afbad8c741cde","strings":["y'87","R`'?","6Dyj","- Dg?g","J424","F5T8"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:19:37.623474+00:00"}