{"ip":"177.130.68.226","total_events":230,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["230 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 49,487 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"49,487 bytes sent","bytes_sent":49487,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T18:20:48","last_seen":"2026-09-02T01:25:00","events_24h":0,"events_7d":230,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Lagoa da Prata","lat":-20.0006,"lon":-45.4964,"asn":28198,"org":"SEMPRE TELECOMUNICACOES LTDA"},"source_domain":"177-130-68-226.sempre.tec.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28198","label":"Brasil TecPar (Sempre)","category":"isp","url":"https://www.peeringdb.com/asn/28198"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":230}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":183},{"date":"2026-09-02","count":47}],"recent_events":[{"timestamp":"2026-09-02T01:25:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-XTBp2xlQsrNJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5854427032786c5173724e4a","method":"","user_agent":"","ja3":"","session":"62fed2a1-59db-4bc7-9b43-a84efb70de1b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"85103a1f6e9949b9","strings":["BitTorrent protocol","<-UW160N-XTBp2xlQsrNJ"]}},{"timestamp":"2026-09-02T01:22:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�d�zu�&>�99��B�V\\0I���xa�l��w4`�\tEd��\u0014\u001c��\u001b(\u0010F\u000e���9�%�'\u0010�&4��ـ�f�l/ʼn�\u0015��e�\\б�� \\-��y\\�g���\u001d\\�}�T,�\u0012�n�d�Y9+n\b\b� \u0002�F�^E��\u0014\u0000E\b53@r�]0��<y+�\u001c��x[w��*��<\u0012��������B�\u001cIn�6*\u0016%o;yN��4O���\\�xN�4sh�i8�����s%�YH\f\f�,\u0016�Ep6wv�8\u0013\u0016���5���\u001d\u001d\u0016_8�N\u001e\u001f�Qו��\u0000�\u0003����ިZ��ypQ\u0001#cp�\u0000x�\u0002�q�+q�\u0003x��h�T�����w�����I�r䗡�\f�\u0019-��\u0001CJ�!�X�A��՘E�r���\u0017\u0019����\u000f-��=9쥩�A�\f\u0018r\u001f����A<O>�B�\u001bX�>�vco[^�4���\bk�c��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2db23298-7c3a-4d8d-a960-b6c1e666b955","seq":1,"duration_ms":100,"bytes_in":373,"bytes_out":14,"enriched":{"digest":"51d7af1429ab9e1c","strings":["V\\0I","Y9+n","53@r","%o;yN","Ep6wv","A<O>","vco[^"]}},{"timestamp":"2026-09-02T01:20:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-PfsCW1-2LjR!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5066734357312d324c6a5221","method":"","user_agent":"","ja3":"","session":"d3714695-6326-4447-8798-84af0fda1620","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"502b0a378afe9192","strings":["BitTorrent protocol","<-UW160N-PfsCW1-2LjR!"]}},{"timestamp":"2026-09-02T01:18:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��V&���ΟZ��\u0014\u001e���]F\u001ep�V�/󱶚?J%�w����\n�<���?Y\\�\u0016���ř��nN��m��$��\u001bq{Eg\u0015��:x�\u001d��P�l�?M�����՚�O�r�68��0[�q�\u000e&�\b�Ў���Qkh��\u0001\u0001h��q琽�k̇���f\u001e^\u0004��\u0003��\u0012�$�\u0005ÔI=m\u001f�A��Z�L���3�����\bLǚ�C�'�3��^��ͣC�\b����j��dv�\u000fu��}�R拢J����C��^\"�⼜0N\u0002Q��\u001b�_��'�ݫ��\u0004�\n�,�z�<�Z\u0007�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f6afb790-6aff-4878-9b1f-03599e8601a5","seq":1,"duration_ms":100,"bytes_in":260,"bytes_out":14,"enriched":{"digest":"403e0299c95f545d","strings":["q{Eg"]}},{"timestamp":"2026-09-02T01:15:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-AZx0SC9u(Mnh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d415a783053433975284d6e68","method":"","user_agent":"","ja3":"","session":"2f55fa97-5553-47c4-902b-4159098992e7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ff31d82142395097","strings":["BitTorrent protocol","<-UW160N-AZx0SC9u(Mnh"]}},{"timestamp":"2026-09-02T01:13:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�O��ԤO�Yyc(�3r��g�7[\u0015�\u001a���M�@M��S�TX/�q�ѿ9�;Eb�Z���+,��|�b2\u001aJk�TS�<7Q����>���-�Z\u0019+u��\\\u0010��\\���;c�R�y��\u0012\u001d���͞Y�\"\u0014Rp̺\u0006\u0000'N\u001c�B(�Y�*V����vg�`u�B�l�U���C�at���Ҝ��$!ۂ�K}י�F_Dq\u0015��7N\u001c�o3\u000b��\u0013\u0007\n\u001a%O3;׫\u0010��@��\u000f�C\u000e\u0003\u0002�,\u001c�t�$��t™R}���ځy=\b�\u0015F��zl\u0002�rbfA@\u0005\u0006�Șm��HI�\u0001�:�T\u001d�S�.���3�KUJ^���ӑ;v͐���\t\u001e׼!��\t7�Mpf\u001f\u0017(��D���@\r/c\u000bs�\n�ȜPbd{�v+��v�!�F����~��\u0006*","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"27df1e7a-c64b-4c74-a7e8-64d5be9c9009","seq":1,"duration_ms":100,"bytes_in":344,"bytes_out":14,"enriched":{"digest":"fe1c24ea742253e2","strings":["Yyc(","F_Dq","%O3;","rbfA@","KUJ^","Pbd{"]}},{"timestamp":"2026-09-02T01:10:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-gGU1gyIWt4h3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d674755316779495774346833","method":"","user_agent":"","ja3":"","session":"5146ca53-e9b8-46d6-b19b-d80bc8363a81","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ca9c6df6c5f2fe56","strings":["BitTorrent protocol","<-UW160N-gGU1gyIWt4h3"]}},{"timestamp":"2026-09-02T01:08:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"z�a.��\f����C��\r�oT9\r�O�=�\u0015\u0001���5:�9�`�U�Q�r�w�M�\u00196��m��\"�����p�o#S��4|��?���`� �\u000f�8�p�$����]��ZmH\u0011K��^E�c@����F�%%���d��#�_{��\u001euo�;�#_Ƕ������\u0007]\u0015\u001aSV\u0014\u001eW�\u0004\f\u001e�x�Cd�nq2^\u0016�R��Z\u000b8S:ȸ|ܝ-<��\u0007jR�L������8��*�H�g(�c�","payload_hex":"7ad7612ee7a80cfcbdd4c143f38d0dba6f54390db84f833dba1501beb1c4353ab839cb60bc55aa51a4729577c44d8f1936e2b66de68222af9acae3b2708a6f2353a4ef347ca3e53fc7fd99608f20800fcf38b870c824fe86ebb65de89f5a6d48114bb8815e45ac6340bce4caf446b4252582c8e564edf023a15f7be0cd1e756fe63bce235fc7b68dc1beb5e2bb075d151a5356141e57d0040c1ec2789d4364ed6e71325e16f552a7ba5a0b38533ac8b87cdc9d2d3c8cac076a52f84c8ff898fd89d638b2d92ae248e967289763c7","method":"","user_agent":"","ja3":"","session":"9d7c15eb-9732-4b74-9361-0de636508fc8","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":14,"enriched":{"digest":"55d89d9f2430f88e","strings":["nq2^"]}},{"timestamp":"2026-09-02T01:06:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-xNo!_(ye368T","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d784e6f215f28796533363854","method":"","user_agent":"","ja3":"","session":"d135daf1-c02b-4ffa-94fc-171cbaca6489","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2702cd2fced10685","strings":["BitTorrent protocol","<-UW160N-xNo!_(ye368T"]}},{"timestamp":"2026-09-02T01:03:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�7xÎ��\"\u0001\u0004J\u001d��P��]A�(���D�?n� GU'��N9�)ȗ\u0017�HٯI��\u0000�j�\u0001�W�B�����\u001eU����k�F\u0006nT�`8<(�\u001a�4mI�p�p��vO틾Xc}��4��0^\ntd\u001aKo\u0016�^��nn\"\u0000\u0000�Z\u0014ԸY@��E�\u000fz¥-?�\u001a�\bpx����-���[�p0\u0019��m\u0006EU��T����h|��U��\u0013S#PINr⊫\u0015[O�\f����\rt��+\u0013�i�˓��0\u0005��~���66�]v�F�0�g��K�\u0000x�\u0001@��","payload_hex":"e03778c38ebefb2201044a1da0c450fdd65d41d528dee1c944c13f6eea204755278b944e399029c89717ea48d9af49a9c000d26aa201cc57e642fbeeb1ffd01e55b4b09db86bd846066e549d60383c28c01ae2346d499970ab70909c764fed8bbe58637daac634b6dc305e0a74641a4b6f16dd5eaeb86e6e220000fe5a14d4b8594089eb45ba0f7ac2a52d3fc81ad4087078f48aed912dcaf18c5b85703019baae6d064555b9cd54f1d0c6d8687ce6ae55b1b213532350494e72e28aab155b4fe60cccc8f3f50d74818e2b13bc69c8cb93c1d2300591c57ef985833636d35d769c46b5309a67d7fd4bfe0078fa0140d1f9","method":"","user_agent":"","ja3":"","session":"60c0c101-a7de-4fe0-990e-ef0c97a3738d","seq":1,"duration_ms":100,"bytes_in":241,"bytes_out":14,"enriched":{"digest":"d51c26e0294f5652","strings":["`8<(","S#PINr"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T21:00:41.150267+00:00"}