{"ip":"168.232.130.6","total_events":82,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["82 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,332 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,332 bytes sent","bytes_sent":17332,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-10T00:36:42","last_seen":"2026-08-10T02:48:09","events_24h":0,"events_7d":82,"geo":{"country_code":"BR","country_name":"Brazil","region":"Piauí","city":"Campo Maior","lat":-4.785,"lon":-42.1102,"asn":264942,"org":"ANDERSON ALCANTARA DOS DOS SANTOS EIRELI"},"source_domain":"168-232.130-6.alcantaranet.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":82}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-10","count":82}],"recent_events":[{"timestamp":"2026-08-10T02:48:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ۑ\u001b�w��(s��p�2y)�ǿ�F��>;O��K�\u001d���CcP�Ւ�]\b~��h��\u0012�p\t�\u001b{\u001c\u0019�*�,�\u0003P���8ħ>�!*K'Cm\u001eV��\u0012\u001f�\u0003}�so\u0005��-��]�ύ�s\u0010o$��m/*9A�,G[\u0010\u0019�Q�I\u0011\u0016��]>RZD\r\u0000\u0019\u0019IՂ��%�֝W�n�\u0001,��5�1C�\u0016\u0017\n�\u0014��b�+���V�~\rLSO9�0\u0001�)\u000e(�6�����J6B\u0003id�\u0002\u0017������x��wP�A��Z\u0015+�K��m/�ݑs��B�N5��\rPN\u0013b��t���{\u000b���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4eec5f1d-1cef-40eb-9004-be27a3db4bcb","seq":1,"duration_ms":100,"bytes_in":254,"bytes_out":13,"enriched":{"digest":"82fe38f60c3f5b40","strings":["!*K'Cm","m/*9A","]>RZD","LSO9"]}},{"timestamp":"2026-08-10T02:46:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-_hL8Aoc4_slL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5f684c38416f63345f736c4c","method":"","user_agent":"","ja3":"","session":"3db96612-66ab-4f01-845b-79e6b9279ec5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"43d1784fcbf7a963","strings":["BitTorrent protocol","<-UW1605-_hL8Aoc4_slL"]}},{"timestamp":"2026-08-10T02:45:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MP�P\u0004E��@Y�R�\u0000�\u0015�E�E\u0003:Q�\u0002@u*��j�%b�����8\u0000J~�~����R;ձ���ը��n�[\u0001�r��Ƨ�1�U�\u001d\u0006�\u0017��\u0007_&#�\u000bg���\u0017w�\u00029�����6'�\u0017�\u0018�\u000b�\u0014\u001f/��S0@����oɶ\u0016I�X��F�\b�!\t�(�\"����=���\u0003�l\u0019�����\u000b�\u0016u5�","payload_hex":"4d50da500445fcf14059f1529d00b91595458445033a51af0240752ab8f56ace256297fd9997a338004a7e9f7eccd4c0c2523bd5b19f89add5a883af6edb5b01df72a684c6a7c231a255a01d06dd17ac99075f2623cb0b6792e1fb1777c80239b2b1eb96ef3627b617fa188a0bbd141f2ff8ba5330408c88babc6fc9b61649dd58f1a346d308b92109af289a22eb94e5bc3dbdf7d9038d6c198df0fa94870bb7167535f8","method":"","user_agent":"","ja3":"","session":"89ce7c94-90fb-432d-a3b0-8be4aa11b36f","seq":1,"duration_ms":100,"bytes_in":164,"bytes_out":13},{"timestamp":"2026-08-10T02:43:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605--Ld~Mms~S5E4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2d4c647e4d6d737e53354534","method":"","user_agent":"","ja3":"","session":"9065dd42-eb9c-43fc-8ce2-1fd1edb0f7f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d8aa91327d22b812","strings":["BitTorrent protocol","<-UW1605--Ld~Mms~S5E4"]}},{"timestamp":"2026-08-10T02:42:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��&6�*�äP�)0��f���C\fQ~^�Ӫ���\u00139W��H)o\u0010\r@]\u0000�L�_�)XJT(�Ku�8\u0010��p�\u0012\t050\u0015\u000e*:�����:��@�y\ni=�\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a4476ecb-4ec6-45d1-8374-9738ac91c7c0","seq":1,"duration_ms":100,"bytes_in":484,"bytes_out":13,"enriched":{"digest":"ba8c10705674dcbc","strings":["c{0Cf","@wM6",">Q~^",")XJT("]}},{"timestamp":"2026-08-10T02:41:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(qt30sjWryh*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2871743330736a577279682a","method":"","user_agent":"","ja3":"","session":"33a16f2e-e2e6-445d-9e35-924969e06dd0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0134d561de627cf2","strings":["BitTorrent protocol","<-UW1605-(qt30sjWryh*"]}},{"timestamp":"2026-08-10T02:40:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005%�akθ��8\"v\t�?UB|-�����\u0004@׳�F��b��\u0011�Y�](�ֻʯ�tI%\u0002�)�Cc�%���\"v�H������\u0001!9�,�\u0013��š;��R�\u0018I�\u0015�:\u0006?�en����9%R֞���7�b0Ď�SO\n�\u0011+\u00042-N�¨��|\u0019���b\r�(\u0016���\u0000sp\u001ch�0RWx}?���g��v���Ra�\rR)%��n����A\u001c�Y5��\u0014_\u0011&l�*��R�������\u001b��\u0003(D�vt�\u001a �Ȝ���\u001d�\u0003T0�H\u0015�9琮�.<\u001b��\u000f�{�\u0002�\u0015<�ޖǶ#hF�mD�\u0002Q7���U","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"75fb5288-2335-44af-8b99-c57d54790b94","seq":1,"duration_ms":100,"bytes_in":441,"bytes_out":13,"enriched":{"digest":"45ec20c8f11c64b3","strings":["?UB|-",".GhW~ZI","0RWx}?"]}},{"timestamp":"2026-08-10T02:38:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-6(m_hamIK6Zj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d36286d5f68616d494b365a6a","method":"","user_agent":"","ja3":"","session":"a32148ff-8e2c-4d77-a618-680b211f7474","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a35e479432a38600","strings":["BitTorrent protocol","<-UW1605-6(m_hamIK6Zj"]}},{"timestamp":"2026-08-10T02:37:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Pm�[8��[�\"��:�i•\t�\u0005\u0013-�w��f�J\u0005QP\"��&�C��:!�L�Um����h\u0015/���Ws?Ȯ�@0gu\u0005�ш]�\"��{�bŒ�`^\u001d��A�(;�����\u000e����;.\u0001:\u001aP����\u0012��ŏ\u0016