{"ip":"168.232.130.18","total_events":136,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["136 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 25,861 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"25,861 bytes sent","bytes_sent":25861,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T00:10:13","last_seen":"2026-08-15T03:06:57","events_24h":136,"events_7d":136,"geo":{"country_code":"BR","country_name":"Brazil","region":"Piauí","city":"Campo Maior","lat":-4.785,"lon":-42.1102,"asn":264942,"org":"ANDERSON ALCANTARA DOS DOS SANTOS EIRELI"},"source_domain":"168-232.130-18.alcantaranet.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":136}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":136}],"recent_events":[{"timestamp":"2026-08-15T03:06:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-dp!0Ahoewt0m","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6470213041686f657774306d","method":"","user_agent":"","ja3":"","session":"0305a20f-9d48-4233-b96c-ce0effb7c2a9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9ddcc249fe84547a","strings":["BitTorrent protocol","<-UW1605-dp!0Ahoewt0m"]}},{"timestamp":"2026-08-15T03:05:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���6�\u0013r��p�%ۋ\u001c\u0019\u0006/�R\f�sV\u0010���D/%┐t�\u0007\u000b�@�#/\u0002�\u0005vNaC2eZ�~8T=*\\�(��e;la��/�@bMh�8\b������Ҡ�\\��\nI�C|S���Ӿ~RR���Ԍ\u000bY��W3N@����\u0013��(Nq�y�cI�hI���I4�\u0012e��x\u0004�N�o8*�Xm\u0017U��\u0015���d�\u0019�\\��3���)2�C��\u001d��","payload_hex":"98bb8a36931372aed170a025db8b1c19062fbe520ca6735610dbe4bf442f25e2949074a2070b9640de232f02b705764e614332655aa87e38543d2a5cb328f3f3653b6c61ffd02fe640624d68f83808c183c0a39eb6d2a0f35c9ffa0a49d2437c53d3e78dd3be7e5252f1e5c5d48c0b5985f057334e40a2f1f5bb13ebcd284e71bd79d063498d6849dfd7cd4934a31265d1d97804894eb06f382a81586d1755eb8e158782f664be19d55c9fa733a3cfd12932ca43d1da1da393","method":"","user_agent":"","ja3":"","session":"e8cd3f3f-3308-4353-b24a-de03ab85bf1b","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":14,"enriched":{"digest":"20f35a00dab6ad6b","strings":["vNaC2eZ","~8T=*\\","e;la","@bMh","W3N@"]}},{"timestamp":"2026-08-15T03:04:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-jaxMTq.7dcWs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a61784d54712e3764635773","method":"","user_agent":"","ja3":"","session":"0b3ffde0-36e6-4673-a067-ec4d1e330ba0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"33ba9c927f405608","strings":["BitTorrent protocol","<-UW1605-jaxMTq.7dcWs"]}},{"timestamp":"2026-08-15T03:03:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�;�c\u001d|:�\u001d��z�c�D#�w.\u0015Zw5��U��\n�ޮm��4a���M\u0006�[7\u001e×�8��lJE;��P�\u001d\u001b-t\u001cN�Vf$�(�7W�w�������8>���I,�.\u0011$'��F7g�z�hw��\u001cPԷ��\u00005�ˤd���Za%��6�T�8��'���]��e\f\u000b3��\t�ˉ��\u0018��3z`Ka\u001a,�;�cGM��\u001c[��\u00076Z��`�i�}!�ZN\u0001�zgtl\u0000>\f��h\u0010�E,�߈TL),��c\u0005&��*�׵x#N�;SL�\f`��ew�\u001c��:Q}�y�\u0002�̄\"�g�i�\"|�8Υ������\u0014SqvҔ����,��\u000f��\u000fmm:+�\u0016��\\޾��3�\u000bX�Z���\u0004�����]�\u0006\u000e���d'Ԯ�W��'bJ\u0013�\u001a7�K\u00198���\u0000���̾\u000b�;}�\"\\�ϊ����\u0000��4","payload_hex":"aa3baf631d7c3a921d94fa7aaa63bb4423cb772e155a7735dbd755e5e90aa2deae6dbbd93461c5ebd34d06db5b371ec397cf38d3e36c4a453beff050f11d1b2d741c4e9c566624eb28923757e6779de5d7dbf093bd383ecbffec492ccb2e112427c9cd463767827ace68779acc1c50d4b7fda90035aacba46483cdc15a612585cd36fc54d338fbfd27aef6af5dbbe1650c0b33a6d80990cb89d7e718adb5337a604b611a2c9d3be163474dadb91c5bc5d207365ac9ed60bf69b37d21bb5a4e01887a67746c003e0cc2ef6810f7452c7faadf88544c292ce4a8630526e5f42adcd7b578234ed13b534c800c6090c56577b21cd0df3a517da879f302d6cc8422ae67e269e1227c8b38cea5c7f889b2f78e14537176d294e49cf6db2cb7ce0f80920f6d6d3a2ba616f2d35cdebef1b033900b58ef5a85e58704a6b192b7d55dbd060ecdf38f6427d4aee75799ad27624a13c91a37ab4b197f38a2c3ff00a6d1d1ccbe0bbe3b7dad225cd7cf8ab0f0e09300c4f534","method":"","user_agent":"","ja3":"","session":"3529302c-d2f7-4a91-809b-4e8dc16424e8","seq":1,"duration_ms":100,"bytes_in":371,"bytes_out":14,"enriched":{"digest":"c33e74a80338f0c7","strings":["lJE;","3z`Ka","zgtl","TL),","mm:+","zgtl>"]}},{"timestamp":"2026-08-15T03:01:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-cOd1tkOsXhbT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d634f6431746b4f7358686254","method":"","user_agent":"","ja3":"","session":"a8b655ee-23ee-470d-90a7-577f81ece665","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"214b6dc6e77fac4b","strings":["BitTorrent protocol","<-UW1605-cOd1tkOsXhbT"]}},{"timestamp":"2026-08-15T03:00:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Ū+�qA��MV8��A�~V�хAsK�\f��-ɖ�\u000b�VD�2�o�\u0013\u0017vJ���\u001fO�, Y�m�e\u0013~����iܚ�\f��Ԫm���7zV@�8��l)\u0013���,��\u000fdc`O�7���`\n#�Ed����Mo��mf\f��b���;�3��mn����=�\u001d�I���{�E\u0012w{��\tF\u0001�lDW듴\u0004\u001f/X٫Ȇ\u0003���q�M\u000ed�<\u0001\r�c0\u001bu;XMe�� ^�\u001dh\u001e��\u0010�b[\u001f�:-��z��\u0013^8}","payload_hex":"bac5aa2b98714188864d563881c841dd7e56a4d18541734bdb0cd3c12d7fc996ad0b9356449a32b86ff11317767f4a9ea9ae1f4fbc2c2059d36d8965137eb6a5f2c669dc9aec0cb2d0d4aa6dbbe2b2377a5640d338e2d96c2913948bbd2c9dbc0f6463604fda37e7dbd6600a23ef4564f8b69cf64d6fe7bf6d660c7fdacf62e796c33bf5339c9b6d6efc98a5bd3dc71ddb49e8d2ca7bf54512777bc0eb094601fd6c4457eb93b4041f2f58d9abc88603b0feda71e94d0e64d43c010d9d63301b753b584d6587bf205ec11d681efaea1084625b1fb73a2df8d77a92a7135e387d","method":"","user_agent":"","ja3":"","session":"2316ca60-4003-46ae-b5bb-fbe1fd2f2087","seq":1,"duration_ms":100,"bytes_in":224,"bytes_out":14,"enriched":{"digest":"961d411022ec98dc","strings":["7zV@","dc`O","u;XMe"]}},{"timestamp":"2026-08-15T02:58:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-f7iglWTl5YCz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d663769676c57546c3559437a","method":"","user_agent":"","ja3":"","session":"6878d6cc-9300-4294-adbf-1b14465c5f1c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6c36f0620b6297bb","strings":["BitTorrent protocol","<-UW1605-f7iglWTl5YCz"]}},{"timestamp":"2026-08-15T02:57:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�4lWm�qZ�\u0003y�~IO�����\u0002w9�|���BH=|�FZ��O\t�\u0000\u0010�\u001aC?(ɏ�S����-\u000f)ΧJ�\u000b7;�\b�Ɵ�-�\t����L��;6�r���+>��/�y\r���y��j����#cܥ�JF�6���\u0015|�#P�c@���䅉_���]��ߣ8�(��\"7PS��\u0002W���9�Q�Q�ȅ[�n\u0017r��8�\u001b؋N�Wd��g��\bq��I","payload_hex":"f4346c576dbf715ad40379f67e494f8aa7c1a399027739d27c98ccea42483d7c97465aa9bf4f09c70010b81a433f28c98fa553b7d8f0bd2d0f29cea74adb0b373b8a08aec69f862d910995febd9d4c8eee3b36fa72aaedee2b3eaecf2ff0790dd3f0e3798d8f6ac096f9f72363dca5d44a46ba36f9a6d2157ce82350b66340a5a0b3e485895f93a19b5d81a5dfa3388828a8bd22375053bee202578692e0398251c151ffc8855bc28fbe6e1772b1f138811bd88b4eb45764f2d167f4ac0871fea649","method":"","user_agent":"","ja3":"","session":"2f09c5d7-e62f-4d05-9d81-c910fef97d8c","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":14,"enriched":{"digest":"f4c4bed18543da61","strings":["4lWm","BH=|","\"7PS"]}},{"timestamp":"2026-08-15T02:56:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-uYWrEk(sI--_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d75595772456b2873492d2d5f","method":"","user_agent":"","ja3":"","session":"5e92c114-74d3-4fae-ab61-d6c600f909ca","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"72bc17c927fc3a66","strings":["BitTorrent protocol","<-UW1605-uYWrEk(sI--_"]}},{"timestamp":"2026-08-15T02:55:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*\u001c\u0012��\u00040���P{y\u0017\u0007��\u0011�f�R\u0019�h\u001cʥ�\u0015��Π��J�3�iܓ�*�٩�\\i(Ty!�\u0014�Cvi�}��R��ڝC\r�z7�aM�b\u0013�x��4~�����|���bu���\u0018M��\u001flc7�\u0005D�;ʺ\u000b\"\u0007�\u001et�{\u0007L��P�L���*^�������� �>��U����%�\b+^\u0007\u000f��è�ʣ�&��z�v;t\u0004�����\u001bW\r���#\rܠ�.����Q*�G,x\u001aj�\u0014�\u0015W�`#�c(�\u00125d\u001f��.l\u000b\u0016M���\u0010�*���#\u001e\u001dI\\�7r&\u001a�8�n��~���\f®��M�\fy��r4\u0011��E���B���k�?+�T̷���&��\u0005O���x���MH�_58�L}��2�.Ϟ\u0002","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fbfc36ab-11ac-47ab-b23f-aa3b15f43cb5","seq":1,"duration_ms":100,"bytes_in":325,"bytes_out":14,"enriched":{"digest":"6ac802651495c435","label":"Redis (RESP)","strings":["\\i(Ty!"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T09:47:29.648190+00:00"}