{"ip":"179.109.154.80","total_events":323,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["323 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 69,345 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"69,345 bytes sent","bytes_sent":69345,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-10T16:18:22","last_seen":"2026-09-11T14:33:02","events_24h":0,"events_7d":323,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Natividade","lat":-21.0334,"lon":-41.9396,"asn":263585,"org":"DIGITAL NET RJ TELECOM EIRELI"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as263585","label":"DigitalNet","category":"isp","url":"https://www.peeringdb.com/asn/263585"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":323}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":59},{"date":"2026-09-11","count":264}],"recent_events":[{"timestamp":"2026-09-11T14:33:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-qfcNc_27y*uR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7166634e635f3237792a7552","method":"","user_agent":"","ja3":"","session":"d33e11b3-818e-43b8-a095-6d0f4eef4be9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"09ab5bd9ab00e187","strings":["BitTorrent protocol","<-UW160N-qfcNc_27y*uR"]}},{"timestamp":"2026-09-11T14:30:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"٥\u000f�~*6F�W��\u0004�G[4P�����z�hVQ+�\r1���Ɏ\u0006mb����^ۍ|C�l�U_“/���]��Ҁ2\\�b$�\u0012~u�^�o���(11�\u0017��\u0007BR�PЕ\u000bT��e���\\��G��b\u0007��%t�����J&�)���\u0006H?�ao'�\u0013��W��\u0017 ���s�\b=�\fb�X!_\\\u0004��@u��^I��j\u0000�2��2�}�\u000b��Pfœ�0�W5�K�\u001c���9:3պ=U��U�G����W�\u000bg�����\u0015�\u0010��>�Kѷ�I�\u001c^C\u0005yE��a�x�\u0016�\u000ep�I\u0019\u0000�%'����\u0019�\u0001�µ[�&4��C,�����fN�Ÿ\u001e\b87Rl���@��\b��'T~=��6���V��/�t�a���B�H����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"de7801fd-4ae1-4548-b727-b0e1fd18701e","seq":1,"duration_ms":101,"bytes_in":334,"bytes_out":14,"enriched":{"digest":"b1f8fa148f3d7a16","strings":["~*6F","G[4P","hVQ+","X!_\\","87Rl","'T~="]}},{"timestamp":"2026-09-11T14:25:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-ru68_I7HSm5e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d727536385f493748536d3565","method":"","user_agent":"","ja3":"","session":"37d889e2-1d7c-4644-9c5a-88e4b898916c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7bdf290edddad637","strings":["BitTorrent protocol","<-UW160N-ru68_I7HSm5e"]}},{"timestamp":"2026-09-11T14:20:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"a�U��\"}�~aB\u0015hm\u001cba76\u0017z���MA,q��Y8���\u0013�eמI,r�\u0004��\u000b$�qw�+�6d,��\u0011�WI�'p\u0016VEt��Od��w�����>pBwNH\f\u001edG5\u0001�\u0007?2����&s&!Ͷ�\u0016�����>^,����;\u00140VfĖ�\u0019�_��Qg�\u000esc8�@-\u0007��'I�\u0006�\u0017���\u0005\f\u001e\u0016i�\n�\u0002Hػ\u0011�\u0016[}�\u001fD(�&��a\u0018�zRB���W\u001f����~\u001d\t�mcU�,�����Ŗ�d�\u0007�[,��\u001a�\nɴ\u000b8�X�%\u001d9�\u0015U\u0004���","payload_hex":"61ec55b3bd227de67e614215686d1c62613736177ab8ff934d417f2c71afb95938bbffc313a065d79e492c72fa0485ba0b24ea7177ac2bca36642cceee11d15749e4277016564574bda34f64d1f67797daf4edd43e7042774e480c1e64473501a3073f32e2a7d5c526732621cdb68516f99cb08de03e5e2c98e0a8c33b14305666c496e619e55fbc935167ee0e736338ca402d07f9ee27499b06be17bd80d0050c1e1669a50af30248d8bb1181165b7da31f4428f526fbf86118c97a5242fd99be571f9df2a89d7e1d09a16d6355a82cad83b5ee80c596ab64d707ef5b2ce3a71a9e0ac9b40b38d258e8251d39bb155504c08888","method":"","user_agent":"","ja3":"","session":"0dc7cf69-5ff3-4875-bb6d-4cd11991dd40","seq":1,"duration_ms":101,"bytes_in":244,"bytes_out":14,"enriched":{"digest":"c06512c9100b5719","strings":["ba76",">pBwNH","&s&!"]}},{"timestamp":"2026-09-11T14:17:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-hg(.3bg~tbds","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6867282e3362677e74626473","method":"","user_agent":"","ja3":"","session":"4261c1bf-723d-4d1c-8246-64fd14173a44","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a754e403e975a405","strings":["BitTorrent protocol","<-UW160N-hg(.3bg~tbds"]}},{"timestamp":"2026-09-11T14:14:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�@�?���Gs�A��Цu\u000b٥�ۻ\"\u001e.t9S\u0007\u0007�n�\u001cv\u0011.\u000b��B^F�\u0006V��\u001f\u0010�\u0010��\u001e%���\u0017\u0002�\u000b\u0014�\u0000Y��?���'v��#S2��n\u0017h_,�zd,��)��c�\u001a�0q\u0002�.�8)%�\u0000��=\\� I�\u0019�H\t�*�c���*=0MK�\u0014�=޼\u001d��\u001c�Iܡh��^|;���]\u0019}�\u000fi�=��l\u0011�3����\u000e�S�\u0002�?'Y����Q�/�A0kы\u000ft&�\u001e�р#��Ff^,�L\u0010��花ß\f\u0000o�\u0016ǝe҃�ƣ���nF�|'y�^�Yڢ��%\u0010og\u001f�`\u0010aY哧��K�����Qd{�J�M�\u0018\u0002G�-\u000e�\u001bp�F�t�\u000e�s��4]{*M\u0002Ä]\u0013r�֚ߐ\u0018�\u0018\t��gsun���8t�H${��߮�r�\\'\u0010ч|��]����Ҵ�;?\u0017 In�8�d\u0011��\u001eR���Q���&��ϥ,\u0003N`���yӼ�A��\u0016\u0015'��Ĥ�Ͻ���gr\u0003\bR6�Mt\u000fO\u0004,\u0013����?���\u0013$��K��c��I�&�����U\u0001����94@��D53� ͥ'#��R�i31�Ϗ.@\u0010���\u0012\u0006�\u0005\u0017�1)��=Z^Rq&�Gs�r�\u001c@�\f-��ћ�ru2\u0013�}���d�\u0014�����:�Es��{��y\u000e����\u001a���\u0002\u0016��vo���dz�#���O�>>�W���\u0000EX\u000bI\u0017������!����;����\u0004�Ը�f07^]��[�kQz2�M��.����ض 3b�\u0010��&���u����\u001bzD��G��0��~��#l�\u0007]3\u0007���Y\u0002v�g�؝\f�\u0006\u000e�\u001f�i�/\u001c�,ƅ�͡^f�\b������gT��:vj��\u0001I","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"864f2be1-8c03-4749-9723-67f447dd1495","seq":1,"duration_ms":101,"bytes_in":400,"bytes_out":14,"enriched":{"digest":"cb70121a6449b5f6","strings":["a\",iR","SVe)","s$9Xq","f%w75","#;_d","=Z^Rq&","f07^]","kQz2"]}},{"timestamp":"2026-09-11T14:03:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-2Y_a82Z3B3)o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d32595f6138325a334233296f","method":"","user_agent":"","ja3":"","session":"f096daf6-d1be-4566-9b09-112d543d902a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1c9ba6e7ee0fda1a","strings":["BitTorrent protocol","<-UW160N-2Y_a82Z3B3)o"]}},{"timestamp":"2026-09-11T14:00:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0015�c�\u0013\"��'� �Z����\r\u0003�p˩e�‘�3\u001c|���m�EzF\u0015\u0019���ܷP���\u001de]Q+7�&\u001dÊ.�P�(\u0005��7��89E\r�%X�jz�[���R�R��&�YT�N����Mx�ん�Rϼ���4w6�[\u0012��^z���\u0014Q��s\u0001\n�1�7ğ��\u001f44gТ�ˌP\u0016�\u001e�\u0016\u0006��\u000e�~i�K�I\fa\u001b4\u000e-F\u0013gq:","payload_hex":"fa01159863c31322afc527a820de5ab59388dc0d03e970cba965c7c291d8331c7cfbbec56daf457a461519a69e85dcb750ff83c41d655d512b3799261dc38a2ecc50802805949537e9e03839450de1257f58ef6a7aa15bb4cbf552ca52bc9e26c45954ae4eb2b782b64d789ee38293e952cfbcefc0e9347736f05b12d5ef5e7ab1ba84145191ce73010aab31ce37c49fa58d1f343467d0a2f6cb8c5016e81eb41606c1fd0e817e69ab4bab490c611b340e2d461367713a","method":"","user_agent":"","ja3":"","session":"b9631b06-3376-4d1f-ae64-819e3d89cd70","seq":1,"duration_ms":100,"bytes_in":183,"bytes_out":14,"enriched":{"digest":"6eae863ec5e91e45","strings":["e]Q+7"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-17T11:29:46.837994+00:00"}