{"ip":"177.212.70.48","total_events":269,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["269 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 56,729 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"56,729 bytes sent","bytes_sent":56729,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-28T00:28:07","last_seen":"2026-08-31T03:03:04","events_24h":119,"events_7d":269,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Belo Horizonte","lat":-19.9029,"lon":-43.9572,"asn":26599,"org":"TELEFONICA BRASIL S.A"},"source_domain":"177-212-70-48.user.vivozap.com.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":269}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-28","count":142},{"date":"2026-08-29","count":8},{"date":"2026-08-31","count":119}],"recent_events":[{"timestamp":"2026-08-31T03:03:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"y\u001a��F���p��E�[s70�ְ��!�l��\u0010&��e�\u001b�ѧg\u0010�\u0018pp��і�jxU5PbiY��\u000bh6!�qIt��`\u0005\u0000���\u000b�\u0000졄\\��&yy\b\u0014�\rr�\u0016��`<��$���������)��~\u000e��\n\n\u0004�Y�T��7���z�\u0011\u001f�l�cğ$Lv�X���v�\r�\u001a\u0004��d�:4�8.���߳s�.��-\u0006p���J,c`k�n#\u0010-��\u001an���!���(\u001f\u0005ָ}#<�\u0005�\u001c��H=%Y\u001a\u0013��[YuC\u0017�\u001d\u0005�3�m��q&c;\\\u0000�-p\f,�0��\u0001����\\\u001b�M���{���\u001d�C�ݴ7�tJ�@pO��y�����\b��-�%c�h�l�\u0016����3vm��+V���ā\u0003\u0012�n\u0010��?@_��ʢ\u0014�W.�׻�6ݒ\u0017�f�\u001c�\u0012jM\r+D��Xռ�\"��K-�q��\u0016�PJ\u0011�L|\u0012;Yg�2","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"dc6d54c2-bd1c-4da7-8d25-e655d744c5d8","seq":1,"duration_ms":101,"bytes_in":386,"bytes_out":13,"enriched":{"digest":"2107cbe891af1c6a","strings":["[s70","jxU5PbiY","J,c`k","H=%Y","[YuC","q&c;\\"]}},{"timestamp":"2026-08-31T03:01:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-dC.Z8vEe5mUw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d64432e5a38764565356d5577","method":"","user_agent":"","ja3":"","session":"e58e6752-7f03-456b-8141-a48ded47c6d1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a7a3cb2fd61b9ede","strings":["BitTorrent protocol","<-UW1605-dC.Z8vEe5mUw"]}},{"timestamp":"2026-08-31T03:00:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"񈭆jH���b����w�'~[Vd��l���;� �\u0000�Oٵ��4B�Nof��M�8�����չy�\ba�T(\u0004��F0�` �vcX��a\u001a�e���K�vØ$s\u0010���T*�jT.zGu����{[\u0005\u0001\u0011\u0001ڴ=\u001d�*\rI��v���z&�\u0001�ٙ��\u0010�\u0001ڜ'�l1�S��-���z��\u0016a0� ǹ�C�}*�AQf��j\u00021I>I.���;��ճ(1\f�8)f����O\u001d�����e�^0�\r\u0019�Lid;u2㙺Q��H#\u0004 \u0005*'���̲S���\u0000��e\u00143S�4�LJ.��K�n�Y8OBM\u0017��`4�x��9�\u001c\u000b�(�\u0004�1Ӝ�^,�Vk�\b�>7��e�wxI+\u0001K\u0004�X��w侣�5�xa\u0000�ò��g��\u001b:���\n1'}�\"fL�\u0016","payload_hex":"f188ad866a48f283a262ad8c919f77d2277e5b5664f3ef6c9998ba3bd5209300df4fd9b5fda93442cd4e6f66fcd34d9c38def7a3ef9ed5b979d30861b55428049d994630946020fe76635883f1611af565aeffe74b8376c398247310f6ebfe542af16a542e7a4775e9dee9f27b5b05011101dab43d1daa2a0d49e28b76a880dc7a26a501a9d9998eb710c301da9c27af6c31ab5392fc2d80e0b17aa7a9166130cc20c7b99443e07d2ae941516695f76a0231493e492ecbddfa3bb0b9d5b328310cc3382966a38cb28c4f3c458bfe8766d1c0ea15ce2ce9a612055af0c026209c6d16179cbdb7f36f017f28eaf3dd280ac1db6cc49191e7e984a2919dc75215a660f8126483e7432b2e136c7d9d131b128ee49531980b7ac3a5946cb896ba8a36e9d9acfb4a38c70a7e4f4028e628079e163e1dafaeda7fe4c765c75e30bb0d19824c69643b7532e399ba5180c748230420052a27fe9485ccb253bcc3e300a7eb65143353e234f9c7872eeeca4ba46eef59384f424d17c7f060349778bf82398b1c0ba628eb04dc31d39cdd5e2ca6566be508903e37f4e965fe7778492b014b04c958ddc377e4bea3a235b1786100b7c3b2a69567ddcc1b3a929a800a31277d8c22664c8916","method":"","user_agent":"","ja3":"","session":"6313ad42-aaee-4dc5-93ea-a2a917d6902d","seq":1,"duration_ms":100,"bytes_in":453,"bytes_out":13,"enriched":{"digest":"ffff34e9a073471e","strings":["'~[Vd","jT.zGu","1I>I.","~O@(","Lid;u2","Y8OBM","wxI+"],"iocs":{"domains":["jt.zgu"]}}},{"timestamp":"2026-08-31T02:58:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-)V8ml8NfJUKA","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2956386d6c384e664a554b41","method":"","user_agent":"","ja3":"","session":"75f22894-493e-4d8c-bb53-16d8d69064fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"17dc3868b2d8e022","strings":["BitTorrent protocol","<-UW1605-)V8ml8NfJUKA"]}},{"timestamp":"2026-08-31T02:57:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����a\u001c\\!�LV�@2:h��RA�ft���ȝUm\u000buaj\u001f��p��\u001d�\u0017j�U�����=eW�Ǝ�\u0018O!\u0010�\u0002\r8��-Q�F3Z�}\u0016&L='����+\u000f\u0017��k\u000f^ԁh�T\f��\u001d\u0017'�P_��^\b\f̃(n\u0019A��H7�������C\u0011�W�I�N��r5��b�2��i*R�=��VV&�my\u0016#$i_\u001e�(j�Uh���\u0016%\u0015\u000e/�'��\u001a�@b\rQfz��G�Ϲ�����H�.�\u0017m\u0010����C\u0003��5ӊ\u0015Ӥ�\u0000��(M5�n=�\u001dS5��Ĉs�\u000f�7����\u0002\\�P\u0012\u001db�Y{U�����\u0011q{�ߧ�?�o�\u0003�%���z\u0014\u0001I��z�\u0005{D|�s�\"iI#���\u0000�,�DzV�6�����1�e�\u001e��]\u0014\u001a��w���D��&\u0004�\u001e��\u0006Gg��Ґ{� �\tK\\�����\u001a.E�:\u0019{]�=ԗ4S\u000e� ����IS\u0018[c�M�Ep��z���\u0015C_\u001f6-\u0019�@\u0007j\u0000��Y�P\u0017�����,44&���U�\u001a����s�@L�\r\r�*\\�\u0004��'=�X��t�k�a�ߵ�\u0010��,�\\�\\;\u001d�\u0010��>h����\\�/P�����?�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"45854a19-31e4-4c64-adc2-b2d60e3cd41d","seq":1,"duration_ms":100,"bytes_in":501,"bytes_out":13,"enriched":{"digest":"937deb668e9b10ef","strings":["@2:h","&L='","#$i_","\"iI#",",44&"]}},{"timestamp":"2026-08-31T02:56:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-u4HsndML-(xd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d753448736e644d4c2d287864","method":"","user_agent":"","ja3":"","session":"048c2657-6123-4f07-9d5d-6e1f9f74cd81","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"62ce7ffdd1fe1d6c","strings":["BitTorrent protocol","<-UW1605-u4HsndML-(xd"]}},{"timestamp":"2026-08-31T02:54:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�z�\u0000*\r=C�$L�p�����fF~��Ŏ�\b{eh��@�._��8������=����3���a��>���\bfӚЪ�ژ��\u0006�iy\u0017�tf�\u0002�o#��9P؏���\u0010\tF���`dP\u001b�쾿��k�=:L��W����D4���7��&��in�l�ͭ�6�����[+\u001f�ڗ=��u§��fo\"e�Bo]��c�\u0000�8Q�\n�B��R��d\u001c_\u0010���<���P�t?��.\fx�P��\bWH3-�L��2�\u0011�g���9\u001eqA\u001aw\u0000̰�\t��3L\"a��_�Ꞙ��R��F�jZ�(�4����ߐ�����m\u001e��I�kJ�R���ůAML�D�B\u001c8�\u000f]+t�3\u0005cS`@�^\u0005��#�>\u001d.�\u001dQ��y��L\u0002\u0017Ȧ��\u0003+x8yӺ�)Bm����\u0018�B�\f`�\u001e��C��l��? �8\u00056�\u0003&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b02540bf-0fd1-4523-abda-685cf44fd03c","seq":1,"duration_ms":100,"bytes_in":377,"bytes_out":13,"enriched":{"digest":"3e110b4112a680c0","strings":["fo\"e","WH3-","3L\"a","cS`@","+x8y"]}},{"timestamp":"2026-08-31T02:53:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-uV*F!AozzNkT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d75562a4621416f7a7a4e6b54","method":"","user_agent":"","ja3":"","session":"a84e4d53-56c2-4090-b664-7ebcf8c426ab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"270fbd44a0fd08cb","strings":["BitTorrent protocol","<-UW1605-uV*F!AozzNkT"]}},{"timestamp":"2026-08-31T02:52:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"|�j\"����e��k���ظ�j\u001c��\u001d�Xf\u0012V*�c4“��6VN\nA���;�