{"ip":"177.130.69.167","data_as_of":"2026-10-24T01:52:28+00:00","observed":true,"total_events":1483,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,483 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,483 requests against 1 service(s), so the activity is deep on few services.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload was observed, so this describes volume and focus only.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"307,330 bytes sent","bytes_sent":307330,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T20:54:52","last_seen":"2026-10-23T01:24:05","events_24h":0,"events_7d":1188,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Formiga","lat":-20.54,"lon":-45.4751,"asn":28198,"org":"SEMPRE TELECOMUNICACOES LTDA"},"source_domain":"177-130-69-167.sempre.tec.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28198","label":"Brasil TecPar (Sempre)","category":"isp","url":"https://www.peeringdb.com/asn/28198"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":18,"protocols":[{"protocol":"udp","events":18}],"ports":[{"port":39131,"events":18}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-13T20:54:46","last_seen":"2026-10-23T00:21:04","recent":[{"timestamp":"2026-10-23T00:21:04","port":39131,"src_port":40536,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000P\t��'\u0019\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000F\u0000\u0000","payload_hex":"41005009b9c227190000000000000000467f0000","sni":"","session":"12643972-75b0-48fd-adbd-d58c8931a1fe","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-22T20:23:53","port":39131,"src_port":40241,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��iP��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100a7a66950ae890000000000000000fbc10000","sni":"","session":"4a4d25c7-f311-4dd4-acd6-c496f47db8c5","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-22T09:56:18","port":39131,"src_port":40883,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000:���7�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0017\u0000\u0000","payload_hex":"41003a94a4a537800000000000000000d6170000","sni":"","session":"f021d8e0-ec89-43a3-b30d-95d7a8c8a24f","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-22T08:51:20","port":39131,"src_port":40275,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000#~�\"��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000Q�\u0000\u0000","payload_hex":"4100237ebc228cdb000000000000000051df0000","sni":"","session":"414cdd65-c974-4b0c-acf8-3a62cd8d0963","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-21T22:52:44","port":39131,"src_port":40355,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��_,��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0004�\u0000\u0000","payload_hex":"4100ebe25f2ccfea000000000000000004b10000","sni":"","session":"136f4d6e-9e51-445c-9046-c01997748e13","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-21T22:52:43","port":39131,"src_port":40057,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&��ݍ�Ϫ`�\u00001{�\u000b��VI9:info_hash20:&���\r�� \u001e:��'\u001cd|�\u0016r�e1:q9:get_peers1:t2:,�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c1887fdd8dc6cfaa60a400317bdf0be6bc5649393a696e666f5f6861736832303a26c19b930d86ef201e3ac1b3271c647c9d16728665313a71393a6765745f7065657273313a74323a2cc6313a76343a4c540102313a79313a7165","sni":"","session":"f6490ab9-b210-44ab-a682-fd5a080a21b7","bytes_in":104,"source_verified":false,"enriched":{"digest":"d7ba2a1d0d26a6f1","strings":["d1:ad2:id20:&","VI9:info_hash20:&","e1:q9:get_peers1:t2:,","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-21T22:50:17","port":39131,"src_port":40057,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&��ݍ�Ϫ`�\u00001{�\u000b��VI9:info_hash20:&���\u001fЌ.U���᧕',�n�e1:q9:get_peers1:t2:Z\u00111:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c1887fdd8dc6cfaa60a400317bdf0be6bc5649393a696e666f5f6861736832303a26c181931fd08c2e55c9e4aee1a795272c9d6eea65313a71393a6765745f7065657273313a74323a5a11313a76343a4c540102313a79313a7165","sni":"","session":"02845734-4de8-4af7-bfc6-08747531d622","bytes_in":104,"source_verified":false,"enriched":{"digest":"e8ea2c604d07d8ce","strings":["d1:ad2:id20:&","VI9:info_hash20:&","e1:q9:get_peers1:t2:Z","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-17T22:24:30","port":39131,"src_port":40840,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000o�fb�Y\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000?�\u0000\u0000","payload_hex":"41006ffa6662a45900000000000000003f9f0000","sni":"","session":"3deeaf80-146f-44c9-8e86-063ec1b009f0","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-17T15:13:33","port":39131,"src_port":40893,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&���G��� v\u0000�z���\u001cq�a9:info_hash20:&��n7m&���]|M�\\�ir`!e1:q9:get_peers1:t2:a�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c18f8647868187207600ac7a9491e81c71c261393a696e666f5f6861736832303a26c18b6e376d269997935d7c4df85cdf6972602165313a71393a6765745f7065657273313a74323a61d7313a76343a4c540102313a79313a7165","sni":"","session":"0b86697a-fccd-463c-bf64-e7dd67fd3520","bytes_in":104,"source_verified":false,"enriched":{"digest":"d39a41775384a559","strings":["d1:ad2:id20:&","a9:info_hash20:&","n7m&","ir`!e1:q9:get_peers1:t2:a","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-17T14:46:23","port":39131,"src_port":40893,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&���G��� v\u0000�z���\u001cq�a9:info_hash20:&���j��\u0017\u0001�\u0013��M������e1:q9:get_peers1:t2:b�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c18f8647868187207600ac7a9491e81c71c261393a696e666f5f6861736832303a26c18ab36ab6e31701f513d8c54df6b79cc9c4d265313a71393a6765745f7065657273313a74323a6298313a76343a4c540102313a79313a7165","sni":"","session":"dbd4a231-5e03-4749-9fad-172cf6dd2c15","bytes_in":104,"source_verified":false,"enriched":{"digest":"224d5631d059bb31","strings":["d1:ad2:id20:&","a9:info_hash20:&","e1:q9:get_peers1:t2:b","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-17T14:27:29","port":39131,"src_port":40322,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u0011|�+k?\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100117cbc2b6b3f0000000000000000f6f70000","sni":"","session":"d873daaf-e73d-4d3c-ad8e-24a90229aa08","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-17T08:57:14","port":39131,"src_port":40104,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u00001�\u001e�1�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�q\u0000\u0000","payload_hex":"410031ec1ee531b0000000000000000091710000","sni":"","session":"5a0da8c8-ca5c-4abe-bb9e-12d743bba40a","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-17T01:03:45","port":39131,"src_port":40640,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:\b�\u000e2�\n��D��C�ۧ\u001b6��\u000e9:info_hash20:\b�\t�>���\u0015�\\�\\�ͫ���5e1:q9:get_peers1:t2:<N1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a08e20e32b00aa2de44eca043d6dba71b36fbee0e393a696e666f5f6861736832303a08e209be3ed4f0be15dc5c815cc4cdab88c4e63565313a71393a6765745f7065657273313a74323a3c4e313a76343a4c540102313a79313a7165","sni":"","session":"0e415881-fdab-45f3-bccb-180977abe0dd","bytes_in":104,"source_verified":false,"enriched":{"digest":"7fb5d75ab7171299","strings":["d1:ad2:id20:","9:info_hash20:","5e1:q9:get_peers1:t2:<N1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-17T00:44:26","port":39131,"src_port":40386,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000?u<M�Z\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000s�\u0000\u0000","payload_hex":"41003f753c4d935a000000000000000073f10000","sni":"","session":"8bfa5b71-6ded-447c-8092-2adeae6f4772","bytes_in":20,"source_verified":false,"enriched":{"digest":"0f0ebb3b535ff5b6","strings":["?u<M","A?u<M"]}},{"timestamp":"2026-10-16T19:14:47","port":39131,"src_port":40888,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�ա+��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000ˠ\u0000\u0000","payload_hex":"4100abd5a12bc1880000000000000000cba00000","sni":"","session":"042150eb-eeeb-4546-8d72-fc72028903f4","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T19:14:46","port":39131,"src_port":40046,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&��o��\u0007��\u0015�����R\u0000���9:info_hash20:&��C�HH�\u001daS�|C��|�&qe1:q9:get_peers1:t2:\u000e�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c1886f90fa07b6f9159ac9cbc5e8520082f291393a696e666f5f6861736832303a26c18f43bd48489b1d6153ba7c4389817c8a267165313a71393a6765745f7065657273313a74323a0e8a313a76343a4c540102313a79313a7165","sni":"","session":"d0a6503f-a55d-4b24-9e6b-fccac0b366de","bytes_in":104,"source_verified":false,"enriched":{"digest":"ebd67d230fce0978","strings":["d1:ad2:id20:&","9:info_hash20:&","&qe1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-13T20:54:47","port":39131,"src_port":40035,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000OG�bp;\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000U�\u0000\u0000","payload_hex":"41004f47ac62703b000000000000000055b50000","sni":"","session":"93d1eb8f-8615-4bcf-895e-8bcd5ed69b5a","bytes_in":20,"source_verified":false,"enriched":{"digest":"5816c6f4ac1c4b18","strings":["bp;U"]}},{"timestamp":"2026-10-13T20:54:46","port":39131,"src_port":40673,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:&���h���?�PQ8N\u0015�\u000b8��9:info_hash20:&��\u0010\u001f\u001e��C;\u0017� l�\u001c�N\u0013Ke1:q9:get_peers1:t2:\u0017�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a26c188aa68909bed3fa55051384e158d0b38edd9393a696e666f5f6861736832303a26c182101f1ed2ed433b17d4206cc21c974e134b65313a71393a6765745f7065657273313a74323a179a313a76343a4c540102313a79313a7165","sni":"","session":"0768eb11-a0aa-4e64-966a-16eadcd60827","bytes_in":104,"source_verified":false,"enriched":{"digest":"3fc7b71f5d1b00ba","strings":["d1:ad2:id20:&","PQ8N","9:info_hash20:&","Ke1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1483}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-13","count":113},{"date":"2026-10-14","count":14},{"date":"2026-10-16","count":117},{"date":"2026-10-17","count":452},{"date":"2026-10-18","count":203},{"date":"2026-10-21","count":41},{"date":"2026-10-22","count":495},{"date":"2026-10-23","count":48}],"recent_events":[{"timestamp":"2026-10-23T01:24:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"L��QA�VF�\t��\u0017�\\2����V̰�U�Q�ā��\f\u0015��TCZq��H�E\u0013\u001c�m\b�ت�:bt�sF\u0011�>��A{W��\t\u0016f�\u0012\u000b��\u0001��Y�K�ω��~�p�R\u0003�\t\bk��s;�/��$}�0ވީ42��H� \u0000��~QK�\u0011��׺����ý�M���64Lr�p\u0018S���3�h9�N�z�T���,>�K6�\u0005���\u0017\u0017;�7��\b��oI�&�%�|!�Şc���rQ�B\u001b���s_8\u0010ѻ���w�TjO��\u0003\\Re\t\u0017B\u00168\"���^t\u0000���\u001e\n\u0015�\u0013�a���n?0\u0012{�W<n!17�7�����2(�t�^�3\u000f:���ٽ��J��!��xĎ�Y-^E���1�{��k��!��\u0006.�7�\u0004Wo\u001bO���\u0002]�P�&���K�]Q���\\\t#(z��k���\u000f�lcq�W\u0012w\u001b��\u0000�b�����oMYc\u0011��0�t;�4��I/O��\u0011�f�\u0003\u0011F��\u001a�\u0015\u0011�Z\u0019E���17K8_\b[��\u0013���}\"����P{�$|B)�\u001bx�9�\u0002\u0019V\u0018Pٞ!ex����)�\u000e\b\u0005�\u0000�7K���'�����i�θ$r�Zzq޽�%�1�~x\"x","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"04a09e50-1507-489e-ba3d-013f84754a3b","seq":1,"duration_ms":100,"bytes_in":509,"bytes_out":14,"enriched":{"digest":"63cebe60fc9b1a0b","strings":["TCZq","64Lr","W<n!17","Y-^E","oMYc","17K8_","$|B)","~x\"x"]}},{"timestamp":"2026-10-23T01:22:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-X7YG3(o32YbC","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5837594733286f3332596243","method":"","user_agent":"","ja3":"","session":"2491cf00-1279-440c-b52c-0c17b3dc57e4","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9db948e3de297ba7","strings":["BitTorrent protocol","<-UW160N-X7YG3(o32YbC"]}},{"timestamp":"2026-10-23T01:21:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��5�ʰ���x����w�f�U�š�Z�PX�F�Ct0����n�D&����E2���U���\u0002�(\u0003�Z��\u0014�\u0018D\"lR�{�o�0��8��`\nq�&����\u0000;��\u000e�\u0001��\"�FU]�� ���VLj7\f�","payload_hex":"d4c935bbcab09ecbfa78a3e5e28977c966e055e0c5a1a35ae55058ec46cb437430defdf5e76eb64426bba991e64532e1ff7fb555f5f39f02fc2803bb5abbf614f71844226c529f7be56f8430859d38e4a4600a71be26908089ec003bf3c00edf01e8a722eb46555da19020a4f5ec56c788370ca7","method":"","user_agent":"","ja3":"","session":"f151ff17-5fe9-4c3d-90c3-b2e18c40a305","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":14,"enriched":{"digest":"71586d4c113cecf2","strings":["D\"lR"]}},{"timestamp":"2026-10-23T01:19:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-hM*flAXeiR_V","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d684d2a666c41586569525f56","method":"","user_agent":"","ja3":"","session":"645267c5-4a0f-4581-9679-a80089f83805","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4dda752f74d62e18","strings":["BitTorrent protocol","<-UW160N-hM*flAXeiR_V"]}},{"timestamp":"2026-10-23T01:18:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���j�\u0011a�S\u0003 ��E%�o�o�ʙ���53s\r�aC3�ړA�B\u0004���hL��\u0015A3\u001dM��~Ʊ��;\u000e�����A��A\u000f�\u0000�8;$�߁�\\_z+wE\f�3P�@�����bG�$dWP��V�p\u001dL����\u000e���\u0001w\u0002K�3�'�\u0014a\u001f�\u000e���Y�\u0017\u0003ʳ��j��\u0010d�\"\bOa�\u0017����\r,�V�\u001d�/׎%.Ov6�\u0019���]8�@N,\"���fs\u0018\b��\u000et�\u0005i����xWi\u0001�\u0018��jE��\u000eLR1��\"9�jX=��#��㳚��C�wC8\u0016uHZ��\u0001�'�l��\u001f<�z��/W�� �R�[��V�=r0\u001c�98�u��O~�l�4�\u0001�d�_�]Ȋ�-2�����\u0011�d#u\u0018?`�\u0012�~Q�!\u0019>&�P���F;Q\b�\u0016;�,\\o���}��\u0003|=�6���L ��\\�Z��nz>��!U$fU�k�n>Ъ3î?4��\t��M2�3GW�$�X\u001c�j\rS���L�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"14047f35-e755-405e-8e9c-992ca7dc99cf","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":14,"enriched":{"digest":"83d0d14b4d0a9a1d","strings":["\\_z+wE","$dWP","%.Ov6","@N,\"","!U$fU"]}},{"timestamp":"2026-10-23T01:17:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-xxTriy2RaXoK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d787854726979325261586f4b","method":"","user_agent":"","ja3":"","session":"3ab0eff8-cc78-49d3-b494-63d9134ad197","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4c7dc7fcf56501dc","strings":["BitTorrent protocol","<-UW160N-xxTriy2RaXoK"]}},{"timestamp":"2026-10-23T01:15:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�m\"�U#p97�O�[ɔM���\\���hK���&��MѦ�)�M�Y\tJ?�� ��5zQ�\u0015\u0018r���!\u0012����\u000b��h7���\u000fU7\u000fS��Ch͊���*��\u001du��F�U+|������H8��,�V�UM\u001e\u001e:� \\\u000bئ�M\\\u0016n���)u�+y��\u0018��S��-3\u001b�l<\u0000���f�\u0016i�Hը�V�\u000b��#�Z�0=q6��@/�M^s\u001e�\u001cĊ��m\u000b~�'�ʯ���asVu���s\b��\u0014\b���FJ�@D�ˢ\u0017ƕoF�\u0011��v�\u0010��yc��I�����U�1\u0017Ms��\u0013�@\u0010�O\u000fg!�u<\u0016U��\nRR�L�B�}�0z\\\u0001���=W��A'\r��ݗuH)N?\u0000\n�T�w��[.{\u001bͿX\u0011�-��������'\u001e�Ѓ5\b\u001c\u000eZe�\u0015����\u0004��M�>ٞ]L�*����|������f|�'�����7E5�I�M�\u000f\"�\u0012?j0�����5�#���~�Q\u0016�~�(���\u0012�\u0016U�es�\u0006\b��\u0019��12\u001e�zK2�rr\u0012���u\"�n7\u0006L��X�(�v\u0004Qj�Dc֚[7Lx�7\u001fR�.�[�\b�l��P�����G\u0013�кm-4Y�*CL��IY������oXf;��\fN;�\u001aAj\u0002F�> =LhW^\b��|\u0013O��ܔ��?���i\"\rj�Rĕ��~��a�\u000b�bx�䯮��q\u001c�h�@��\u0004�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a11fe7f1-e76e-4a7c-9023-c345614f906f","seq":1,"duration_ms":100,"bytes_in":598,"bytes_out":14,"enriched":{"digest":"52244c69106088a0","strings":["U#p97","0=q6","asVu","uH)N?","[7Lx","m-4Y","oXf;","> =LhW^"]}},{"timestamp":"2026-10-23T01:14:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-osG8YqpT981N","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f734738597170543938314e","method":"","user_agent":"","ja3":"","session":"80fce76b-391c-4784-82c4-1864bb7494c4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"fee846f33cb7bf6a","strings":["BitTorrent protocol","<-UW160N-osG8YqpT981N"]}},{"timestamp":"2026-10-23T01:13:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"r�;���2���T\u000e�J�i�Uν��[0�k[b��эj5U5!��VЖN\u0014y��\u0005�+�\u0007P\u0000���悖�l�H�\u0013_���\u001b\u000b\u0007��|^�O\u0011>�2�4�\n���\tS#@��c3�\u001dw�g�г @R\u001c��h\t>\u001d�����_�hW�h��(�3ܓ����f�t� Њ_�\u001ce��F�Zk�\u001f'��oZ\bJ'�6\u0010ܡ�y\u0017[��J�\"w\u0012��\b\u0005�\u000e��T�\u0019�PCY<F����j�^� ~��07m�\u0000\u0016����S\u001b9�:��W\u0000�2\u00059\u0019����I��W����m�B�o�\bM�h�.\"����\f�RP97�%�������\u001b�}wd��)�E���O���ٟ*\\q<\u001fͤ��udf\u001d�W#�\u0019L\u001b�\u0019k5�yd�$=�o\u001b|��%�~mw����j�\u001dA\u001aL\b�#�����\n�\u0017\u0003�ɜ\u000f\u0016]�^�I�Û\u001f���\u0004j��~���_E.�\u000bL�\fZ�v�坪�3:��J`����g���ps�I�\bDy\u0017�7��\"��\u000f�\u001d�?t>�޸v}E�(�\r���\u001fl��9›\\K�����v���r�9A��\u001f�픡s��1Fp����Oq����>\\���b��� /�\b�HN\f�]���S��H\u0012\u001am���M\u0002�\u0000��}\f��r\u0018/S\u001c�","payload_hex":"728b3ba8f3a532aac0da540e9d4ad3698455cebdf2e65b308b6b5b6286ced18d6a355535218df756d0964e1479c0df05d42bf707500088b8bae68296d06c9048be135f8890e81b0b07a2c37c5e904f113e7fb232e534930af48c8f09532340e7a76333b31d77d067a1d0b32040521c85c968093e1db5f1e6e6d25fa36857e368a88b28b633dc93eb8be3bd66b274a420d08a5f8f1c6597fc46fb5a6b9f1f279ca56f5a084a27f83610dca19c79175bb0fb4ada227712e6ba0805bb0ec9f4549419f05043593c46b7f5adf86ae55ec8207ed4f630376da00016c6cfe5d6531b39fe3a898a5700d332053919b0af8feb4998d857ef97ea976df142ed6fde084dec68fe2e22cfe2dcd20c9952503937a025daf78caec4fab41bbc7d7764f29429ea45aa82fa4fd3d8e1d99f2a5c713c1fcda4edd27564661d975723dd194c1bc6196b35877964d3243df06f1b7ca8ae25d57e6d77f5f2f3a96af81d411a4c08e223d9fbf5ea940a881703a2c99c0f165da45eea49a5c39b1fc0acb9046a9e817e94878a5f452eea0b4cb40c5a977680e59daab6333a8bbb4a60eff78a8f67fbd1e27073ff49e408447917e237d2fa228aff0f871dd23f743ed2deb8767d45c728d10dbf84e01f6ce88739c29b5c4b83a681a8a376eee6cd72da394190f11fa9ed94a173fcb9314670a9d4cae74f71ebf5b0e33e5ce7edcf62b4a3d7202fb50893484e0cb55d82dccc53d6ee48121a6db8daf04d02f7008df27d0ce7ad72182f531cc1","method":"","user_agent":"","ja3":"","session":"7b2f8997-c890-42ad-b47a-3a4281cef3e0","seq":1,"duration_ms":101,"bytes_in":545,"bytes_out":14,"enriched":{"digest":"c9e904ca981d99e5","strings":["j5U5!","PCY<F","RP97","*\\q<"]}},{"timestamp":"2026-10-23T01:11:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-g(5r0qQRB.Np","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6728357230715152422e4e70","method":"","user_agent":"","ja3":"","session":"a412dfbb-da68-44a9-95d2-fdcc4aaec7e3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c7a0c7702246422e","strings":["BitTorrent protocol","<-UW160N-g(5r0qQRB.Np"],"iocs":{"domains":["5r0qqrb.np"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}