{"ip":"168.196.28.84","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"544 bytes sent","bytes_sent":544,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-16T05:14:03","last_seen":"2026-08-16T05:35:21","events_24h":0,"events_7d":8,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Vicente","lat":-23.9613,"lon":-46.391,"asn":28649,"org":"Desktop Sigmanet Comunicacao Multimidia SA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as28649","label":"Desktop Sigmanet Comunicação Multimídia Ltda","category":"isp","url":"https://www.peeringdb.com/asn/28649"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":8}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":8}],"recent_events":[{"timestamp":"2026-08-16T05:35:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����F|�{\u001aab�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b898ce467c8a7b1a6162e1","method":"","user_agent":"","ja3":"","session":"d5df0a6f-1319-4cb9-a2d7-071b686af0f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6a83e83f57c48489","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:28:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��y���T�\u000e\"V�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87998def154d60e22568c","method":"","user_agent":"","ja3":"","session":"bdb8a756-04f8-4b04-b30c-5b6e690425ad","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"144aa53133467653","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:24:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��+x\u000b90X=%��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82b780b3930583d25f7f9","method":"","user_agent":"","ja3":"","session":"c52772a7-f8b6-4529-aa53-a190a4f8658f","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cc2b47afde8fb043","strings":["BitTorrent protocol","<-UT360W-","90X=%"]}},{"timestamp":"2026-08-16T05:21:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0019��\\�y��V","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f119abfc5cda798abe56","method":"","user_agent":"","ja3":"","session":"23d76a95-94f0-4cc1-b9cd-01dc3735710b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ac238901cbf11bc5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:18:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001fk\u000e��́\rK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ec1f6b0e8c9acd810d4b","method":"","user_agent":"","ja3":"","session":"3bdd9ac3-7a58-4b7f-b1b1-c625480bbc3f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6a7c946c645b2aa5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:17:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Y~���\u0005���-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8597efddbf30582b2a92d","method":"","user_agent":"","ja3":"","session":"f0e70433-8152-4cb9-bc2b-897cc9988f0e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"17d2fd6f8100c29b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:15:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��9�\u000błD#�\u0017\u000b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b839b30bc5824423c5170b","method":"","user_agent":"","ja3":"","session":"91f5c6ba-4547-4ade-ab8c-7b46986dbb4a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d060bcbaa87f680b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T05:14:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��8�ȃ�>�\u000b\u0018�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83890c883903ebd0b18db","method":"","user_agent":"","ja3":"","session":"71345dc0-925a-423b-a444-7957b1f9722d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"fcb5159d20c3675d","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:36.666315+00:00"}