{"ip":"177.1.19.198","total_events":85,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["85 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,474 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,474 bytes sent","bytes_sent":18474,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T18:59:47","last_seen":"2026-08-31T22:02:33","events_24h":85,"events_7d":85,"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Colombo","lat":-25.2932,"lon":-49.221,"asn":8167,"org":"V tal"},"source_domain":"177-1-19-198.user3p.v-tal.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as8167","label":"Vtal 8167","category":"isp","url":"https://www.peeringdb.com/asn/8167"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":85}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":85}],"recent_events":[{"timestamp":"2026-08-31T22:02:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-SR-I3kpdIHBF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d53522d49336b706449484246","method":"","user_agent":"","ja3":"","session":"252c448a-0a2d-4bbc-a9e2-90672b40b886","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"49d78b76fcdebd13","strings":["BitTorrent protocol","<-UW1609-SR-I3kpdIHBF"]}},{"timestamp":"2026-08-31T22:01:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��hu;�ǣ\u0000�\u0012�]I�X�\u001dP��T����\u000f�(�\u001f\u0013_�5��\u0007,�Y[���)\u001f�m�\u0004\fj��4��G]�NMQp\u0016D�\u000f����\u0016�'^Vi�n �\r�����\u0013�-\u0005WĞ\u001av��z�3�\u0007����9��O_\u0000=!\f����\u0002U��[�ּ��\u0000�)\b{���G�Xא��ή\u001f�t�̓6�V\u001c�K��֨ee\u0003�&�\u000f_3 \u0005)�ޟ�DCY9�h�>��E�Pz��\u00009I\u001dr��o4+\u000f��.l�i\u0001k9����U��΢�o��\n�f���s\u0002\u000b�T\u0010�l\t�`\u0012[;��`L��a�\\\u0019� a�!G�D9L��x�\u0006���\u001a$\u0012�۠=J�\u001e\n�+\u001aN��[%�w���RŶ�z]��B�b �'Oi�|��4����\u001dp\u0014%���x\r~^�*\u001aw������\f\u0018�\u000b'��ky��ʌ���������\u001f��!��@��\u0012g�˸\u001e\u0016��X��ٜ[��s��\u001a\u0010�DF\u000e\u000bi�dL��; ��\u0011�D\bzL\rX�\u000b���\\Ǫ�ɀ}��Z0��'��_U�`�m\u001f�Vz`\u0010�r;�5=�\u0001/\u0016Y�[|I��\u0004����s}�漶\u0011T�غ1��崈b�>>�$\u001f�(�)�<�\u000b�A�\u000bˆ�\u0016�d[����\u001f\u001eJ��\u001e�D\n��v��\u0015k\u0019��\u0002�ށ��|C","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3280a999-841b-478a-8428-78d5690ded36","seq":1,"duration_ms":101,"bytes_in":555,"bytes_out":12,"enriched":{"digest":"86e10c3820dbc821","strings":["NMQp","'^Vi","O_=!"]}},{"timestamp":"2026-08-31T21:59:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-P)pJXbOAFZqm","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5029704a58624f41465a716d","method":"","user_agent":"","ja3":"","session":"4c08ac6f-8485-41d8-977d-2bd8100856fe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b18afcb7404c93db","strings":["BitTorrent protocol","<-UW1609-P)pJXbOAFZqm"]}},{"timestamp":"2026-08-31T21:58:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�s����vD��������a\u0015��\u001a>�C�L\u001d]V^\u001a���)�\u001c��s�2�!)�H��ۿ�׽�]�E����R\u0019=��S��?�<e\u0005�+�{\r:�\u001a�0�\u001df�\u0016���|\u0019�X�h�\u0000�\u0002\u0015����O�Ż�\\�\u0015�/=����\u001d�gJ�\u0014�Z�-�B�\tfX��P��U<�)WK8������\u0013>\u000ep���{��H(������Y�N�\u001f\b\u0001s2s�\u0019߼��_�ːo\u001cŪj0��5�!��","payload_hex":"817388fff4f4764499eaeee28bf4bbc76115fcce1a3eb643bb4c1d5d565e1afec9d629fd1cd4e173cc32f62129ce48b38edbbfe5d7bddb5dd645c09ceb9f52193debef53ddcd3f983c6505b92bdb7b0d3a911ade30bd1d669d7f16c5e3a47c19c558f968b600a10215bb98a8c54fadc5bbf45cba15952f3d81b9b4891daa674ab214df5acb2dfa42ff096658c3ec5087a4553cfb29574b388fdcc2f3fdbc133e0e70a5c2f37bf4b04828b9d0fa9ff18d59d74ef01f0801733273fe19dfbccedd5ffdcb906f1cc5aa6a308df735df2196d9","method":"","user_agent":"","ja3":"","session":"8e6aaaf0-7b2c-4360-a590-a9ee8faa3ff8","seq":1,"duration_ms":101,"bytes_in":209,"bytes_out":12,"enriched":{"digest":"3ead0312d555df45","strings":[")WK8"]}},{"timestamp":"2026-08-31T21:57:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-dn2d-7i5(Y8D","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d646e32642d37693528593844","method":"","user_agent":"","ja3":"","session":"da1f1529-8fa2-4056-b464-441595164747","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6e7b49d111827bf3","strings":["BitTorrent protocol","<-UW1609-dn2d-7i5(Y8D"]}},{"timestamp":"2026-08-31T21:55:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�.#�&@���u*ӥ=����\u0010��z�C���.m`yˀ�El�ˤ5�)_�=Fc��RX\u0015ڀ}��9A����\u0007\u001e�\u001e��v��h߽:��� �����l\u001f��<1)gNF�S\u001dwx������B��>�����\u0003-\u00065���:��l_�I�{,�L���!`\f��|��U���[P�e\u0003k�D����a���l\f�敎6-^8�>��y�`���\u001f��\u0018�Z\u000b���<��j�v��\u0010>�N0LU�sm\u0007�[��<H\t\u001dm\u0003�\u001b�_b�r����+�z����]�\u0018V\u0018k���ﺢQ��y*XT����\u0001���Ɣ5�1����\f<zp�z��S_f�\t\u000e�U��0�[u\u0001�\u001d'^-&I�&RN3��1\b(�Pq)�Y�����k��\u0005��\u001b\u0011��\u001am��bRķhb��H�t\u0003���\bH\u0007\u0006��\u000f\u0015��\"Q�b��7\u0002\f��m0�Vf���{�q�(rb-\\\fN\u0007���0����e���(2޳$3���1v$c\u0001<����\f)���\u00161\u001fut\u0012\u001a(�5�NW̶���\u0015#Dd?�\r��Y���I���&�'=�J�o|u�/G��rq�6�K��\b��Ō�\nۨb�,t~�U\u0017��p���\u0011�X�LV\rc��J��3XZ\fa*�тQ��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c023ccbc-7067-44f9-96bf-05c156c65e37","seq":1,"duration_ms":100,"bytes_in":541,"bytes_out":12,"enriched":{"digest":"32bef0745528fbb7","strings":[".m`y","<1)gNF","6-^8","N0LU","y*XT","'^-&I","&RN3","(rb-\\","1v$c","#Dd?"]}},{"timestamp":"2026-08-31T21:54:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-_6f8pGtNpRJ9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5f3666387047744e70524a39","method":"","user_agent":"","ja3":"","session":"93e2a9fd-efa7-429a-9e48-f34df70c3582","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"17bcdf31bd701e22","strings":["BitTorrent protocol","<-UW1609-_6f8pGtNpRJ9"]}},{"timestamp":"2026-08-31T21:53:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014�\u0015k\u0016�A���Iۜ���m͇���\u001cn\u0015�P\u0013��_�:E\u0013Ɋ\u0001HVڊ+�(����\bz��P�\u000f�n�\\#>Q+ǩ�\u0010<��X諴�F�\u0003g\u000bbUJ\u0003\u0006�\n��3jܛ����St\u0010B\u0015��* ���\t�Y\u0018��x���\u001b\u0000�x�\u000b2�I��!\u0001�>��O\u000fRK�r�f�\f�\u001c>��H������\b,u��\u00162�\rU�\nyc�\\\u001c�v��g�%$\u0016\u0004�y�\u0002%���;s\u001d�h��Wqy�|:�c���sl��\u0010���]Qm+���^\u0011ܭ�F���\"�s\b�\u0018]#\u001d\u000e���\u000b�Ѓ��^�!\u001e��\u001a�6�O�\u001b\u0006����?�L��ˠ�����w,��t����#ͽ\\�U��rD��ii������o\u0012�\u0003!���&\b,���j�%�\u0013\u001a�\f?��l�3��3�R����\u001d\u000e��w�\u000e\u0014�U�o]\u0010[\u0013�\u001a8]�Ղ\u0001>p\u0012��_�޼\u0015I\u0017��a0I������d'YQR�\u001a\u001a�#��W7\u001d\u0004�\t/�'\u0011T\bl܊r�\t��+�ڮj�\u0017�Ѐi~?U�\u0010~z\u0016���>\u0000�sJ+�?�R�Y'�8�\u000b\f�6mT��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ed1d9e79-d3bd-4ef5-82c4-0efb728e6b78","seq":1,"duration_ms":101,"bytes_in":480,"bytes_out":12,"enriched":{"digest":"367d864d143dd9d9","strings":["\\#>Q+","]Qm+","d'YQR","i~?U"]}},{"timestamp":"2026-08-31T21:51:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-YO8kYxgl3de*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d594f386b5978676c3364652a","method":"","user_agent":"","ja3":"","session":"ceb3a8f4-30e9-4446-b2ee-67ca24ecf080","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"3a2ecee91064a3ae","strings":["BitTorrent protocol","<-UW1609-YO8kYxgl3de*"]}},{"timestamp":"2026-08-31T21:50:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"”Ɓ��n�\"��\u0006�(�H�D�hĢiA�\u0019�\u0000\u0016�]��N���g��5�D\f���\u0013D5Z\u0002��Xx8�4��.f0�J���[�]eVh�c��\f���Ǟ�x�\u001e�@='o�|���\r\u0016������#4���\"D\u0018��F��\u000e��bX��X1��t\u0012��¬Q����D{R}��rR\u0018�H�Cs�ո\u0016E�<~�|�E�\f��68�-�u�XmM�C�6�K:�X��$\b�����Q�s��\u0004��K�,��cs��X��lh�Տ�Uɷ�%�v��<�h����z���Y���Ac\u0018��R\nA\u0014�CJ�5��m\u001c�s���v�/�A\u000f�a\u000e�\u000bP�z\b�\u0002�Q��/��\bE���x�a9|���cX�q����m�>\f>\b<M{B�:\u0019O\\\u000e�����(G�KR�ăӨ���J�a�����1j�ߴ����Z\u0000�9�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2f094b8c-e1a3-477c-a025-c75a948e0dd6","seq":1,"duration_ms":100,"bytes_in":376,"bytes_out":12,"enriched":{"digest":"f08e4ed7a60a70e3","strings":["]eVh","@='o","D{R}","<M{B"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:46.970950+00:00"}