{"ip":"168.232.130.15","total_events":48,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["48 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,170 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,170 bytes sent","bytes_sent":10170,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T02:46:06","last_seen":"2026-08-09T05:09:39","events_24h":0,"events_7d":48,"geo":{"country_code":"BR","country_name":"Brazil","region":"Piauí","city":"Campo Maior","lat":-4.785,"lon":-42.1102,"asn":264942,"org":"ANDERSON ALCANTARA DOS DOS SANTOS EIRELI"},"source_domain":"168-232.130-15.alcantaranet.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":48}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":48}],"recent_events":[{"timestamp":"2026-08-09T05:09:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-7pzMQ6-V_6B3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d37707a4d51362d565f364233","method":"","user_agent":"","ja3":"","session":"95a6d563-109c-472c-8dcc-d7b82d5f3864","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2c2d046f8c956217","strings":["BitTorrent protocol","<-UW1605-7pzMQ6-V_6B3"]}},{"timestamp":"2026-08-09T05:05:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�®�-h��\u0014�i\u0003�0\u001e�\u0011�^ZpX����\u0010�Ц�����<�\u0012��#��1g�*����^�I�KR�Yek�\u0001��\u0019�\u0004yV�\u001d3\u0005\u000b֦�ʨ���b�iߦ��]�\u0015*UţroE���l6���;{d���W\u0001=u�(D\f\u000f�ݍ���7I�\u0010t�*�+�+b>�n�G$�Ё��t�0ۓt��\f�f6l����\u000b��X�1UK\u000e@�\fP�u�\u0014�\b�V\u001a)S����\u0002��O���\u001a:�p�K\u0007�\u0015Ȏ\u000f�\u0006��TvN\u0005H�\u000b��w��C;Ϟ�9xVQ�\u0003!-y�\u0005P��3�PqҜ��)\u0018\u0010=�\u001bT�%\u001av�\u0004ID�%e$���c��[-�g���y�t�H���R�\u001a�A��Ba\u001f��\u0005\u000e����Oe�/��`>�0#���8��������\u0000�J��4�Q$]ajv|�\n@YLn� \b�h�i�,T���SS�,��C�ߛ1��>��u\u0014\u001b�:Uۧ�7\u000f��>^Z��]@�!\u0004Y��ɞ6��#W0��q�5�\\i\u000b�+b��Pr�SiP��\u0016�\u00053\u0013�}ʺ��⚩�^>��<�Z�0T]0�d�5쨥�x�@��.\u001boլ��]/��eR\u0013�\r���9������g�ց�v5�qG���}�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ab7829c2-952c-496b-891b-ea3b170ad350","seq":1,"duration_ms":100,"bytes_in":608,"bytes_out":14,"enriched":{"digest":"c0f3097dac0d51e0","strings":["DTbU",",RuP","MPR_","I5'u","9xVQ","Q$]ajv|","@YLn","0T]0"]}},{"timestamp":"2026-08-09T04:52:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-DnE3D7AFV!hH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d446e45334437414656216848","method":"","user_agent":"","ja3":"","session":"a0fd047d-deab-41ea-9bc6-93a1c705d381","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"022a69b586b3b199","strings":["BitTorrent protocol","<-UW1605-DnE3D7AFV!hH"]}},{"timestamp":"2026-08-09T04:49:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"t�Ѩ�hRi!��\u0001�^�����tn3��w���qC�zx�\u0014r(��d�Q��\u0013mM�0+<��\f͙Bd\u0014�;@�c���e\u001f���,��\u0012���w~2��W��=sE\u0000\u001f�Q~YJ��F�M�+\\�L�","payload_hex":"7485d1a8b06852692186ae01dd5efeddc09b9c746e3399fa77b5b5ef7143fc7a78c6147228d0ff64bc51bdcc136d4dfd302b3cddfb0ccd99426414863b40e5638da0ea651fdcfd942c948512b2e0f5777e32b7d157a87fe13d7345001fef517e594ab9a2469a4dc02b5cd44c9a","method":"","user_agent":"","ja3":"","session":"1f17627f-8637-48a0-a3c3-48f713c3c8ff","seq":1,"duration_ms":100,"bytes_in":109,"bytes_out":14,"enriched":{"digest":"8764897c2877746c","strings":["hRi!","Q~YJ"]}},{"timestamp":"2026-08-09T04:39:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2WtlNWC!AKxR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3257746c4e574321414b7852","method":"","user_agent":"","ja3":"","session":"205a8a36-7113-4ef0-8ee8-3a984b43cccc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d7f486e249c26558","strings":["BitTorrent protocol","<-UW1605-2WtlNWC!AKxR"]}},{"timestamp":"2026-08-09T04:33:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��ܧʑ�*Z��\u0010-�\u0004�o����k\u0010\u001e�.\n��~\\��E�\u0017p'CU�eQפr�G���䔪\u001a\u0003�\u0010�*h��D�'^��k\u001f|\u000b_Y�h\u0012 d��V��Z�G\bS�ӒRR#�T���}�\u0015�ܤ뤕�eM\u001d�T\u001bܯ��\u0016\u0012KY�^�GqWjo���\u00003�\u001c^�l�%s~\"�=\f��S꡽D�?��m9\u000b�\u0011\u001e�#��\u0000��\u001e6[�M��\u0000��\bkq�6\u001c��6�\u0012��\nծM��_-\u00027��01ʶ[\u00024�\u0017��T�Hl[O\u001cII�q6*�\u0014\u0012>B�K�s�\u0010ݟ�JK]\bi���ل%V�N�a�\u0006�\\\b�G�\u0018K�\"�6�*M?��Dd}��g�V�d\r&_�N��E}�\u000bt��\u001ca��ʒ:���NGɖ4�1�ȗr���Doj��%\u001fu����Oj�\u0002N��\tZ��b���\u0018�0\u0007:߫\u0003ޱ�8���b$�\f�\u001d/��\u0012\u0005��G�j!�\u0004�6�vC��T\u0006/�ѻ�-�\u0001��\r���8�܊�i4?Q�2���\u0017'-���T��.�҆t\u0003nϔJs���\fu��\u0018�>\u0014�d]�û�=)q�w@��Z�\u001e_\u0006K�a=�ZP⢜�|vG/\u001cرv������\u0006��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"59a632f8-1eff-44cd-93c0-5cba775c0bbd","seq":1,"duration_ms":100,"bytes_in":512,"bytes_out":14,"enriched":{"digest":"67c97c04356561cb","strings":["p'CU","GqWjo","%s~\"","Hl[O","i4?Q","|vG/"]}},{"timestamp":"2026-08-09T04:29:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-h~rQnXEjXDT9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d687e72516e58456a58445439","method":"","user_agent":"","ja3":"","session":"c9d7729b-c650-47a6-94ac-8797e07a9b77","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"dadf50550a9e06cb","strings":["BitTorrent protocol","<-UW1605-h~rQnXEjXDT9"]}},{"timestamp":"2026-08-09T04:23:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"JGx���|V}\u0003,~�j}��\r~@h\u0005w�R�q�\u0001�(\u001e\u0002�a�\u0015�q���w�\u00174�򅳜i�0P��\fp�G�L����\u0010�h}\u001a���\f`��[H,v�:_zYS�Z�FP���\u0017\u0015��\u000b�0~P*�lK\u0019�O\u0005k�R&[\u0010?��\"]��8,BSe1�6��h�����w����%��\u0000��\u0005R.\u0018\u001a�p�\f%I�\u001f?[��\u0013�\u0007�QNw���h���ma`�\u0003�\u001d3ˌ�P�[lS�̡�ȳ��i�1�����ko\t��g���?4\u001ei�^���{\u0005;}�W2\b�\u0016\f�;.�mz��.Q�~\u0013���P�a>]\u0003�'E��\u000f�,@lsc�=��/$\u001a2\u0007��ۓ�x\u0011��\r0#q�\u0005^\u0014��n\\�yw�-se�8�\\\u0001��v�&s�z<�_�f\u0004�q��A=��\u001a�@�3��\u0003Z?�\t\u001f�\u0018�����p�\\�\u0018\u000e\u0004��A\u0002�.:��F���ɘ\u0015e\u000f\u000b���B'Qڌ(Q/�\u0013�%qZ���N�������\u00073��