{"ip":"177.2.68.212","total_events":281,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["281 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 57,395 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"57,395 bytes sent","bytes_sent":57395,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-25T13:26:31","last_seen":"2026-08-25T19:45:03","events_24h":0,"events_7d":281,"geo":{"country_code":"BR","country_name":"Brazil","region":"Federal District","city":"Brasília","lat":-15.7783,"lon":-47.9319,"asn":8167,"org":"V tal"},"source_domain":"177-2-68-212.user3p.v-tal.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as8167","label":"Vtal 8167","category":"isp","url":"https://www.peeringdb.com/asn/8167"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":281}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-25","count":281}],"recent_events":[{"timestamp":"2026-08-25T19:45:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"]��aPl\u0016N�I\bU�H6.�mI$t��\u0018Y!�~7���\u0010[������� B�%9:\u0015�p��F*�s�\u001aV��\u0013L\u0006�}�g��/S �;\u001c�B�+`��y\u0016!\u0000��M]��hq\"��sl��\u0007lV���U\u0019\u001an���y����.���&�+cO��2���\u0004\u0006��\u001e\u000b�u?(�.��(-o���ȑ��\u000bI�\u0000[�.\u0012\r�\u001f����w�*`���0x��V�\n�\u00049\u0018I\u0013\u000b��9�\u0015�<��'.>��~�`:\u0018vq�\u0005\\�ج\u001f�\"_\u0007\u0016�o?�S�ݿ�'�\u0016���C��,�$p\u0001�v�?.W��\u001a0��R�|k�j�\u0017�\u0019�\"��\u0002J��SԎ�=7���kXM�W��\u0000�9��\u0011o�!�\u0002��4��+L��(�\u0007�����\u0004S\u0019�\u0013y\u0003\u0004�y'�Z�l\u0000=�@���m@�<˩��\t꧟�L����\fǻ������'As8YQ\u0005��j��T@\u0016��2�\u001c\u001d�H\u0018h�А��4�V�\f�1P�ml�\u0004��d���H\u0015�ރ�\u0011\u0018���\u0001��+f%�\u0012}�.�k�ʢ��o��~c'\u0012Q","payload_hex":"5dbccc61506c164efc4908558148362eaf6d492474feee185921a67e378dc0d3105ba9a5dcf4d5e0d220428c25393a15d870f59a462a8a73d21a5698c0134c06aa7df26784d32f5320ec3b1cce42a32b609fe679162100c6c84d5df5c6687122fb87736ca9c5076c56ddf1cb55191a6e88ddda79a5e5f1852ee3e88f269a2b634fe69e32e3dfe20406a6ca1e0bf6753f28f42ec096282d6fccccd2c891bd930b49c0005b822e120ded1ffe9586e977a32a60be93ee3078b78856c80a8504391849130bbad7399c15ee3cbbf9272e3ea6df7efa603a187671da055c80d8ac1fd8225f0716cd6f3fe053fcddbffb27841685ff9243c0cc2cf7247001bf76953f2e57ac8e1a30abcc52b17c6b996ae31796198122e596024a8fb053d48ece3d379f9fec6b584d83579bb500d7398be7116fc8219a02bbef34f0832b4c8dab28bc07f89eb3b9cb045319f113790304e47927ce5acb6c003db94093c2c36d40bf3ccba9cfc309eaa79f814c9dc6e7a80cc7bbe9b5f5feb5a627417338595105f7ec6acac35440168a9932a71c1de3481868c8d090afe034a356ee0cef3150ed6d6cd804e88064c1eab94815f1de83e0111886e5c801ead92b6625be127deb2eca6bebcaa29ad16fb9bb7e63271251","method":"","user_agent":"","ja3":"","session":"c6dac47b-4890-4548-9e16-7ba18e8374d4","seq":1,"duration_ms":101,"bytes_in":460,"bytes_out":12,"enriched":{"digest":"112d44ce40b4bbfd","strings":["mI$t","'As8YQ"]}},{"timestamp":"2026-08-25T19:43:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-fev!I!SlELrT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d666576214921536c454c7254","method":"","user_agent":"","ja3":"","session":"ddc40b5d-b928-487e-8592-c97ca3a6a1b7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"94916edaad9fb06c","strings":["BitTorrent protocol","<-UW1609-fev!I!SlELrT"]}},{"timestamp":"2026-08-25T19:42:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"HW l�<V��v\u00184D�=�(����^�����\u001e��\u0000��^r����k%:ʉN񐉬���\u0000���\u000b7\u0005:��\u001d��6\u0004\u001es�8�_:���\u000e��=\u0001_��)+S�0�q��4��2<z#�����p7�ܯ�}<���6AR71V�=�q'd��\u001c\t��X\u0018=��0g��","payload_hex":"4857206caa3c568e8c76183444cd3dae28a7e5e4a25ef7b081a7d91ea1ff00bb9d5e72d1daf4846b253aca894ef19089acafdbec00dbc8ff0b37053a9d8e1ddff136041e73aa38d75f3ac1b4d60e81d73d015f95d7292b53d2309f7198dc34b488323c7a23adb2efcdf0703795dcaf8a7d3cee83f9364152373156f93de9712764adfb1c09e0b358183de6c93067fc98","method":"","user_agent":"","ja3":"","session":"101b949b-9671-459c-b38e-3f6d0de0147f","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":12,"enriched":{"digest":"bf2cde7453a797e4","strings":["HW l","2<z#","6AR71V"]}},{"timestamp":"2026-08-25T19:40:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-h3nEP8gKOlFA","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d68336e455038674b4f6c4641","method":"","user_agent":"","ja3":"","session":"a7df01c9-e7c6-4635-9328-ee819365bb7c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6028e38fd4036033","strings":["BitTorrent protocol","<-UW1609-h3nEP8gKOlFA"]}},{"timestamp":"2026-08-25T19:39:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"jߪ\u0018���<��}g!>.�\u001bû���1���[�\u0001��\u0016�_\u0005���Y�_\b��\u0015�\u0012��� �x��Ę\u001bo�\u001b�\u0007���}�?\u0011\u001fze�%��\u001b�)K�e�Ay���!�;x����o!}��7�/���\n\u0018��5@<f�<�Kp��j?�Q����F\u0001����\u0000O����]�\u0003h�\u0001v\u0013�dO���@�82�Z�@\u000f�\u0015X������#\b4@_�z��[�$_nD�r |\u000b\u000e�'V��C��d�6�Q�`�\u000e{�ɲn\b̰�S�\u001d#\u0003�Γ�3A\u000ft��(�f\\","payload_hex":"6adfaa1880d6e43c97b87d67213e2e841bc3bb899a9b318dbcab5b8f01b59a16e45f05eba9e659ee5f08d3fe15ba12c1ad8a20a2789f83c4981b6f8b1bf707efabcc7d943f111f7a65ae259c911bb4294b9b65e54179bfaba821ab3b78c1bba0d66f217d86d437bc2ffd83a90a18af8235403c669c3c9f4b7087a06a3f8b5198faacfb4601c09ee3c9004feff2bf8c5dc50368e30176138c644fe386ce40b13832cf5af0400fd71558fe81b2b0c181230834405f817a80c15bcb245f6e44f37f72207c0b0eb027569f9843b3de64aa36f851c160f60e7bcbc9b26e08ccb09d53e51d2303d4ce938633410f74d2d228ab665c","method":"","user_agent":"","ja3":"","session":"f206a77d-19fa-48d6-9cc1-8adb72f9ae7b","seq":1,"duration_ms":100,"bytes_in":242,"bytes_out":12,"enriched":{"digest":"1c1dc087185ff9ee","strings":["}g!>.","5@<f","$_nD"]}},{"timestamp":"2026-08-25T19:38:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-Ip8qzHBrBqPX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d497038717a48427242715058","method":"","user_agent":"","ja3":"","session":"0f736386-2d5a-4f45-ade1-3e1f483bf908","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"fc49b746e94c5ea5","strings":["BitTorrent protocol","<-UW1609-Ip8qzHBrBqPX"]}},{"timestamp":"2026-08-25T19:36:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��J�\u0003\u000b\u0019w��n�\u001d��ǽ[�L��f!'�\u0004�������tG�n�S�\u0016�\u0013��\u0010�4��v5�\u0006Ix��\u0012�OQ���\t�\u000e۲\fb\u0015ӧ�c٣\u0001$��\u0010�\u0004P$O\u001c�\u001d�X��\u0018���2^t\"��R\r�\u0019\u0011�\r\u0010�o�t誐�D�%4\u0000{-Z�5\u001e���d\u0019I_f��]\n~�d�&�\u000e�\f��E��C�J�6z��vr�n41N�6\u001f�ݒԐ����ٟW\u0003Ju���������\u0001\u001e����*\u001c�~t�\u0018M�\u0012���&!\u001f���J���BN�K�{#��\u0003}��T\u0013���a\u001e<R���H����ÄЗ|y&-\u0014�ȳ�}��@N","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"132cc573-e1e9-4bb8-ab38-5228440b9922","seq":1,"duration_ms":100,"bytes_in":281,"bytes_out":12,"enriched":{"digest":"00791e0191228ddd","strings":["2^t\"","n41N","|y&-","%4{-Z"]}},{"timestamp":"2026-08-25T19:35:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-0y(b.Oz99jB-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d307928622e4f7a39396a422d","method":"","user_agent":"","ja3":"","session":"b781b6ea-ebdf-4597-b63c-9842bf6b8c7b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"66a4d85890467ceb","strings":["BitTorrent protocol","<-UW1609-0y(b.Oz99jB-"]}},{"timestamp":"2026-08-25T19:34:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j�&���~\u001bc\u0019�X\u0000�e\u0003�E����\u0010toƎ8c����\u0001y�o����5\u0013�\u0011\u0015g#�>rb\u001bpt\u000f{o���e�`F\u0011�\u0017�?����~�޿ǔ�5l�ޛR�\b�\u0012��*���0`�\u0006���T_U]\tZ,2�O7J�'H�ɍ\u0000\\�K�s�.<\u0016\u0018~\\x�:��4�����#\u0015\u0000ny��d\u000eau\"|���\u000e�9\u0013�B�ۼ�g���5�~\u0014�Og��Y<��?-}����H�2��9K�X\u0011c����\nx\u0005&\u0004�\u001ab�H@\n���i�\u0015R��\u0002���'�T�ƣ�ʘ{ă\u001c�1��Ctk_��Q��J��=*����R���_�k\\2��P��'ke����\u0006tT�[\n'�}�I\u0013KN�\f��Ǹ�J�G�\\�n��^[4�����k���\u0005�\\�/��BžH�r�Y�V<�F�K����\u0018Ҋ#\u001a���zO��\"ۗ����}��*\"�H�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"40085cb9-0f3c-4c37-876c-5712102075bc","seq":1,"duration_ms":100,"bytes_in":389,"bytes_out":12,"enriched":{"digest":"fd012f6b2e363331","strings":["T_U]","au\"|","Ctk_"]}},{"timestamp":"2026-08-25T19:32:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ZKWC.0mHbGAb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5a4b57432e306d4862474162","method":"","user_agent":"","ja3":"","session":"330f4ae3-f684-48d3-a698-8bc054cfa928","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b29d237c297c008f","strings":["BitTorrent protocol","<-UW1609-ZKWC.0mHbGAb"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:29:19.562589+00:00"}