{"ip":"168.232.130.0","total_events":155,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["155 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 30,397 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"30,397 bytes sent","bytes_sent":30397,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-08T02:02:00","last_seen":"2026-08-11T02:24:48","events_24h":0,"events_7d":142,"geo":{"country_code":"BR","country_name":"Brazil","region":"Piauí","city":"Campo Maior","lat":-4.785,"lon":-42.1102,"asn":264942,"org":"ANDERSON ALCANTARA DOS DOS SANTOS EIRELI"},"source_domain":"168-232.130-0.alcantaranet.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":155}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-08","count":13},{"date":"2026-08-10","count":35},{"date":"2026-08-11","count":107}],"recent_events":[{"timestamp":"2026-08-11T02:24:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�3\u0014�\u0011O�_\nS�b����$� \u001c�6�5��~c5����H\u000f8Q�UG\u0015U��:s~��g�Q����\u0016L�\u0014`H;�\b!�N�)��\u0002)��6�&B҈�9����\u0003�\n�\u001e\t*����^��h���<�\u0003R#��\u0014��m�'_�G�9��~�T\n!\u0013��Y���}��ځ\\��\u000b5\\|&jC���\u00127�**1�x\u001aT�B�]W��}","payload_hex":"c23314e5114faa5f0a539762ec97dbd4249a201cce36d135f3867e6335d7dbcfc7480f3851f255471555b1fc3a737effca67ad51f0e9fcf0164cb31460483ba10821b84eb32994c30229e7e736f92642d288c539cbf2c3c703a60a831e092a9f9893945e8ef168eddbdc3c96035223a1f314ecfa6dde275ff247c539c0e77e9b540a2113c2c45992ef887db0e3da815cba840b355c7c266a43e2e58a12379c2a2a31d4781a54ab42975d57b5e07d","method":"","user_agent":"","ja3":"","session":"44cb3f2e-a5c8-4f86-b1a7-28807ac617f0","seq":1,"duration_ms":100,"bytes_in":174,"bytes_out":13,"enriched":{"digest":"fdeaedc4dedd8119","strings":["5\\|&jC"]}},{"timestamp":"2026-08-11T02:23:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-vpyn9Zzt)OvS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7670796e395a7a74294f7653","method":"","user_agent":"","ja3":"","session":"15908ca1-06ff-422f-8c3c-217557172dce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ac5d76c621ba9d15","strings":["BitTorrent protocol","<-UW1605-vpyn9Zzt)OvS"]}},{"timestamp":"2026-08-11T02:22:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%R��Bn\u0011� f\u001bv\u0016�\t��|N��h��\"�s5\u0012�EP�˘\u001f���~\u0003���T\u0010���\t\u0004\u0015n\u0007�*��b�1�'\u0007C�|�쳚:\\�\u000f\u0002`�W�IiC����p�i�Z+CL0\u0000\u00185�9.{ \r\b�/�dL9��.mJ�T�20X#\u001a���٣:�\u001b�cE�E�(�#���V\u0004����Kl?�r�v�\u0018t\u0016���6\u000e\"�Jsp��\u000bt2�e\u000e;�J�m�Q�>b��\n\u0003���'\u0019��1o�ʹש�TH\"%J����\u0006�;7Q�����l\u0016+Q����ϲNj\u0012#�3{v@����7�Pߺ���Lj�;6��>�\f�.�\u0006�i�V9�q\u000f�f��]��={�*���;���N;�\u0005��\t\u0018��^\u0000�ʅ�]�yU�s\fs\u000f�l\u0006\u001eƩ\u001b","payload_hex":"ce2552c2ee426e11c520661b7616a209d6c67c4e91ca6885ff22d9733512cb4550cecb981fa6abcf7e0386b4f35410d9dbed0904156e07aa2aace162a931fd270743ea7cedecb39a3a5caf0f0260df578b496943c9efef8370a769cb5a2b434c30001835897f392e7b200d08ee2fae644c39a1822e6d4aee54e1323058231aa196edd9a33aa01bb16345b0458b28be23d0f8865604c099e2bf4b6c3ff072b576da187416a98af2360e22ae4a737094b30b7432ca650e3bf14afc6db351d23e62f1e90a03c7d6ee2719dcf5316fa0cdb4d7a992544822254ab1b483a906cd3b3751daff83a6dd6c162b51ba9bb3d2cfb24e6a1223e6337b7640c4f1acb637bf50dfba84b9b4c788bd3b368dbe3e860cbc2ee806c769b95639f1710faa669c8d5deac03d7bcd2af9af8e3ba9e29d4e3bdf05e5c90918d9d85e00b6ca85f35db97955e57f730c730ff76c061ec6a91b","method":"","user_agent":"","ja3":"","session":"821c1a8f-9087-4c09-b107-ff11e6b109fa","seq":1,"duration_ms":100,"bytes_in":334,"bytes_out":13,"enriched":{"digest":"dc088fafd7b3528b","strings":["Z+CL0","20X#","TH\"%J","3{v@"]}},{"timestamp":"2026-08-11T02:20:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3z5rxqoIT-n7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d337a357278716f49542d6e37","method":"","user_agent":"","ja3":"","session":"7a562bc6-00a0-49bd-b85a-a219f5c40b0a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"be704df7c34be806","strings":["BitTorrent protocol","<-UW1605-3z5rxqoIT-n7"]}},{"timestamp":"2026-08-11T02:19:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���F�\u001e�-��cS�YX��Li��l� �� �C\u000b��\u0011�\u0019\u000f�!���\u0007ef��*\n�^�\u0003bzv\"���k@��W>���Uz��3\u001d��Op�\u001a��%�M,\u0002��� �X.��o��\"ۍe�v`���bO?��<","payload_hex":"8999cd469c1ea72dc5c76353d25958ebdb4c69b0f56c89208c9020a4430b98ba11fe190ffe219bd7da076566aec62a0a7fd15e9d03627a7622cbd4f86b40f7f6573ec3fffc557a84f2331d89fb4f70d01ad8f225954d2c0283b7a120d6582ec6f46fc9d222db8d65d47660d2e49b624f3f8b853c","method":"","user_agent":"","ja3":"","session":"5f799939-aa77-463e-aedd-7e74620cd41a","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":13,"enriched":{"digest":"c0a0bc0e7e1bc3eb","strings":["bzv\""]}},{"timestamp":"2026-08-11T02:17:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-BfA9HX)_pq~W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d426641394858295f70717e57","method":"","user_agent":"","ja3":"","session":"9294b07d-666f-404f-af55-5371e96b0bdc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d1762e3bb3b9b81c","strings":["BitTorrent protocol","<-UW1605-BfA9HX)_pq~W"]}},{"timestamp":"2026-08-11T02:16:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�2M��D�ž\u0018�\u001fZ���M�hb���MAd��q\u0001?L(B\u001a�U�\u0006\t�\u0006!i�*%�a��?��v:���jJgp?����3��\u0001�����\u001b �\u0006����q+���\u001b��L;����e/��*6��\u001c4��*x\u000e�+QV�\u0018\u0010i��4\u0006\u001a��ri^d_\u001c��]\u001c[��!�S���cp0�H�\u0017{��b�$��ZI\u001bd�ї�\u0006�B�N2C���+}�͐\u001b�)���!�̂���mq�s���N����*!h��\u0001�\u000b�<+���C�>P��xǻ\n�(NVq�ߒO\u0019�\u0017Л�qX\u0000d����Nr�ܕճ*��\u001b�%E��J�UUGٖ����~�\u001c�\u001d\"�2cb\u0010�\u0017zF�Y�&������u�\u0019\\�fN�ګa+K0c�zS�q���;���I�l��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7655afe8-6d7e-4c87-951d-6ac6f7fe93d7","seq":1,"duration_ms":101,"bytes_in":342,"bytes_out":13,"enriched":{"digest":"5ae7d89a449d0a41","strings":["?L(B","jJgp?","ri^d_","(NVq","a+K0c"]}},{"timestamp":"2026-08-11T02:15:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-qn.._!eKZ!!i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d716e2e2e5f21654b5a212169","method":"","user_agent":"","ja3":"","session":"dd969e84-3f34-46a6-b28d-25c294f182cb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c6f8b92c23c11f2c","strings":["BitTorrent protocol","<-UW1605-qn.._!eKZ!!i"]}},{"timestamp":"2026-08-11T02:13:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"6�:�Z:KХ�5<��.�\\�\u000b\u0016|���ê{�!�Q�VV�c�ͪY\u0000�ЃG2����\u0017E9�hf����%\u0003L0�\f����\u0014�w�\u0012��|�q2���\u0010�y�n�,(�B�\u0019I�%n\u0012c��~�5\u0016t~�\u0004�O�\u001d՗\u0006�B��dΧ�T1�b�w���)�o\u001b���KdLT���L\u000eM��pԢ$���ݢ旣gy��\u0019=p\u0002#����vU�0�\u0007��\b�C�<�K\u001e\nGG�M�݊��D+�\u000f�l��_\u0014�)7�u\u001e�h(C-\u001d:2��D��Nƾ�j�$m<Br�؎XD�d\u0017D�t�3V\u0006WN�\u000b","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7ab8be07-b7d0-45da-a529-156bb638660f","seq":1,"duration_ms":100,"bytes_in":267,"bytes_out":13,"enriched":{"digest":"139613cb85ecceea","strings":["KdLT","h(C-","$m<Br"]}},{"timestamp":"2026-08-11T02:12:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-4n99~tuKoHv0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d346e39397e74754b6f487630","method":"","user_agent":"","ja3":"","session":"86c64c42-1ead-4406-8205-decf04e326aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d750dacfe64cb014","strings":["BitTorrent protocol","<-UW1605-4n99~tuKoHv0"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T09:47:31.367175+00:00"}