{"ip":"179.109.154.67","total_events":380,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["380 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 80,398 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"80,398 bytes sent","bytes_sent":80398,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-14T17:39:45","last_seen":"2026-09-16T16:09:07","events_24h":58,"events_7d":380,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Natividade","lat":-21.0334,"lon":-41.9396,"asn":263585,"org":"DIGITAL NET RJ TELECOM EIRELI"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as263585","label":"DigitalNet","category":"isp","url":"https://www.peeringdb.com/asn/263585"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":380}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-14","count":106},{"date":"2026-09-15","count":216},{"date":"2026-09-16","count":58}],"recent_events":[{"timestamp":"2026-09-16T16:09:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�iك.��g���^k)ͽ\u000f�\u0001L`�,v�m_�U\u001d\u00161t�숅^��J�!�$0�}\u000b��>p��$\u0017�z�����Z{�M\u001co�@R=\n��\f\n����\u000fCB,����� ����\u0011��\u001b�܃_��y\u0014�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"032390fb-f897-432c-bf8d-bf89474f3506","seq":1,"duration_ms":100,"bytes_in":270,"bytes_out":14,"enriched":{"digest":"65baf9d893234bc5","strings":["FQM\\"]}},{"timestamp":"2026-09-16T15:45:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-g_.lPJeq_V6O","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d675f2e6c504a65715f56364f","method":"","user_agent":"","ja3":"","session":"39e14496-ed6d-4726-b0d8-4b03d071d5dd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f70397982f9632fe","strings":["BitTorrent protocol","<-UW160N-g_.lPJeq_V6O"]}},{"timestamp":"2026-09-16T15:35:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-RUBLBJTm.mwA","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5255424c424a546d2e6d7741","method":"","user_agent":"","ja3":"","session":"6c873096-1702-4066-a707-47450d71333c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"79b0b64df24c384f","strings":["BitTorrent protocol","<-UW160N-RUBLBJTm.mwA"],"iocs":{"domains":["uw160n-rublbjtm.mwa"]}}},{"timestamp":"2026-09-16T15:32:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"؏v��'\u001c3��\u0007���Yß\u0004K\u001b�9����\nMH\u0011�\u00070:�5��\u0014��}��~������#�ߖvK��nK�����nI�Y\u0003��.\u000b<߂@V���j���o�����>��=�&�82i�\u0016�U�nV�US�t�@.��}�A�/8c�����\u0011����3� \\�lӯ�\t\u001c5\u0015��\u00170�\u0017\u0010��i���:e�;j�����\u000bg�V�dv�5��k���$��ͼ��\u0019�q�dvq��������B�v�2�_�}\u0017�g����,�\f�0@Kn0#\u0018��^t3\\Sذt��h�5�E\u001a��<���u\u0018�O\u0011ꥐ�-?9�]���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b6b676f3-9919-4c86-8f69-77f3d8a741b8","seq":1,"duration_ms":100,"bytes_in":281,"bytes_out":14,"enriched":{"digest":"ada8148cbaadb02e","strings":["0@Kn0#","^t3\\S"]}},{"timestamp":"2026-09-16T15:30:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-tHbzSCm-NeH4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7448627a53436d2d4e654834","method":"","user_agent":"","ja3":"","session":"1c91df29-8c45-47d4-aa36-f9081d528acb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1308ab8425c08e7c","strings":["BitTorrent protocol","<-UW160N-tHbzSCm-NeH4"]}},{"timestamp":"2026-09-16T15:25:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�T����\u0010\u0019�{���#\u000e\u0001���\u0016��Μ���\u0015�\u000f������\u0010��I�w+�\f�\n����*��:\u0003/ڼ�\u0006��`5f�\u001a�F��\u000eϑ�\u000e�60�\u001b��hp��\u0016KT�\u0013�=7E������\u0007\r\u0011\u0015P\u0013S�^\u0017\u0012�1�>\u001d=��4$ޙ��چM\u000e͕m��\u001aE��d�i�\nh��*��a�P݂��\\z7m��v\u0006����Q�\u0005�1n\u001fR�K�eZ�\u0000\u000eZ2�sYyw","payload_hex":"ff54a3bff7f310199e7b84eea2230e0195b2c216f294ce9cfca0c215de0fbfdef493f0b410cbcc49c6772bf50cbf0ac6f1b9ee2af5e03a032fdabccc06b497603566f71a9f46f78e0ecf91ff0e9e36308a1bd2ed6870b69c164b54e913e33d3745adf58d96dddc070d1115501353bc5e1712c331803e1d3d84ea3424de99e09bda864d0ecd956db7951a45a48464c869960a688ca42ab694619150dd82c2fe5c7a376df5fd76068f9ff3e5519505d3316e1f52db4bf3655aad000e5a32a673597977","method":"","user_agent":"","ja3":"","session":"f7570f9b-2df6-431b-b135-5094f0d39403","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":14,"enriched":{"digest":"0bd45f0d4e5c565d","strings":["\\z7m","sYyw"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-17T11:29:47.271520+00:00"}