{"ip":"179.125.130.244","total_events":25,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["25 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 4,799 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"4,799 bytes sent","bytes_sent":4799,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T02:04:37","last_seen":"2026-08-15T02:36:12","events_24h":0,"events_7d":25,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Sumaré","lat":-22.8356,"lon":-47.2547,"asn":28649,"org":"Desktop Sigmanet Comunicacao Multimidia SA"},"source_domain":"179-125-130-244.dynamic.desktop.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28649","label":"Desktop Sigmanet Comunicação Multimídia Ltda","category":"isp","url":"https://www.peeringdb.com/asn/28649"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":25}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":25}],"recent_events":[{"timestamp":"2026-08-15T02:36:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-fs(5DPwq5LTG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6673283544507771354c5447","method":"","user_agent":"","ja3":"","session":"b7ada7e0-e369-459c-a6ec-c9910e77e4ab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"edea161df9e84a63","strings":["BitTorrent protocol","<-UW1605-fs(5DPwq5LTG"]}},{"timestamp":"2026-08-15T02:35:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�19f(<}�\u00066\u000e#φ���\u0007Ł1\u0018\u0018�EO�wD�#[��ȸ@`\\���1\u0006\u0001��&\u0017L�9���)��6��)���]��\u0005�J\u001a�jZނ<��΃�@Ȳ��n\u0014��wO\r7wé�A>BY�,��\u0003\bӳyB�Vs���\u0007�T\u001a9�t2\u0016c�G@�b��\u001ab�����v�1�7��O�\t-\u0017\u0000HG���\u000e�,�8\\[��Zs�\u001f*��#���U��\u0018�E�{�ȕ@:Z���+�oz>�xg�b�\\�b��5m���Q�Ju��\u001dRKa��chl�\n$Ni9������\f� қR�G�֓�V\u001f����edz��Ɍ��F<6\u0007\u001f�~�������������\u0015�J_���=�\r�&@>�N\u0018;\u0013RLλH\u0000��oW��̔�\u0013�%pa\u0004^�\u0014O��LJ","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6173d3d5-f087-414b-9101-c19c736ee142","seq":1,"duration_ms":100,"bytes_in":344,"bytes_out":15,"enriched":{"digest":"3e1599184819eb09","strings":["19f(<}","A>BY","$Ni9"]}},{"timestamp":"2026-08-15T02:33:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-39uGAFYF87N8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d333975474146594638374e38","method":"","user_agent":"","ja3":"","session":"25e3a50c-90d3-4727-bb7a-343420c2435c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d92b2c893018aa0e","strings":["BitTorrent protocol","<-UW1605-39uGAFYF87N8"]}},{"timestamp":"2026-08-15T02:32:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"s\u0011G���Ik��ۮ��ŪH�\r�c��Q�����[��\fí��4�����\u0011��[fWp�a���\u0010[˕S��A�!\u0012�o��\tm\u0010ܥ0�����Z�y\u001b\u001fP\u00007�ܕ�.�\u0005Ӵuy��\u001c�7�kؔwU0\"W��yL��W(��\u001e\u0005\u0012�i\u0010\u001a��ۏ��y>\u0001<�Hö�'�t\u0005����\u001d6�Zqh\u0011�\u0011�\u0004����_S�?Q\u0012\u0011]Z�\nj�aB�n��������>�\f�䑉K0�\u00021��_�B���4�d*��3]%�6�N��_-/e��}@\u0000����*���Y�","payload_hex":"1542c78822324a50ca08141f27f1f0fba80936880f9a9d2b88b52f27e52b077fa98bcc3bb78243715cdb7914c0f2318c8bbafed0011b2ffe187d13e44f35a822dcb1f965cac7aa86fa0f1db4fdaca99f1247193a36c6c043bb078d41bb972834b3a174177e9ca75f5acf0ded3acea87e3a6b6a3b8f180ee996db678b3c01a2c4c738ef1efa5d02f2c5fd3e0cf3e491894b30dd023199de5fd342c6e0ad34c0642a9f89335d25af36914eba825f2d2f65f2e67d400099d4fdb32ae9a2dc59df","method":"","user_agent":"","ja3":"","session":"fa8bf318-162f-4b3b-aefc-7f5ba46ccead","seq":1,"duration_ms":100,"bytes_in":191,"bytes_out":15,"enriched":{"digest":"68fb9db7189232ad","strings":["\"2JP","~:kj;","_-/e"]}},{"timestamp":"2026-08-15T02:25:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-jfTYLxW3DE~E","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a6654594c78573344457e45","method":"","user_agent":"","ja3":"","session":"2ca1483d-0503-4474-a9c0-2ae88335f478","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"914d4cf9fa28cd28","strings":["BitTorrent protocol","<-UW1605-jfTYLxW3DE~E"]}},{"timestamp":"2026-08-15T02:24:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"^�����pcx\u0019�}�\u001bCL�����k�)��\u000f݃��4h[�Y[[�*\u0017�T�p\u000b��6h�\u0003�\u000f�u.3�W3�T���\u0001˜���\u000f�\u000f\u001b�Q\u001c��\r\u000e�\u0015$\u001d\u0003R��q2?\u001f�+�fW]�~�b�ng���\u0012&�`�b����H�0h��\u001a6��,2Q�12�p\rQ\u001dc�u\t�\u0013��̍�J�V���p��Hm�\u0010\\��=��)���\t��eN\u000b\u0007��@�\u001d��a�m�\u0002��ZP#��/C\u001b5�\u001b�R���SQ�`|\u0018>\t\u0004�\\s�8\u00163�\r�E������'\u0004�~9����\u0007���@XI ���_��˲�<�5��MB�\u000fRpW���|�\u0014�շ\u0019�����\u000b�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"99d6d576-08d4-4bb0-9aca-636216545f75","seq":1,"duration_ms":100,"bytes_in":295,"bytes_out":15}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:33:09.870664+00:00"}