{"ip":"179.152.220.79","total_events":161,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["161 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 33,551 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"33,551 bytes sent","bytes_sent":33551,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T20:51:46","last_seen":"2026-10-03T00:17:31","events_24h":0,"events_7d":161,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Mogi das Cruzes","lat":-23.5246,"lon":-46.1835,"asn":28573,"org":"Claro NXT Telecomunicacoes Ltda"},"source_domain":"b398dc4f.virtua.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28573","label":"Claro S.A. (NET)","category":"isp","url":"https://www.peeringdb.com/asn/28573"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":161}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":82},{"date":"2026-10-02","count":72},{"date":"2026-10-03","count":7}],"recent_events":[{"timestamp":"2026-10-03T00:17:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�{FG�ʥ\f쬜�\f���\u0014~�l�\fٕT�ϤN\u0011���\"����q��\u0000lE\u00104��y/w�\"#�fDk���\u0005|�EC��\r�\tX\u001d\r���\u0015�\u0017Ayc\u00155���6�ƨ�*���n��g(����ύ��Y���ħ��G��͏�g�|\u001a_\u000eL�ΕJ�����-�7��\u0013�C��\u0004�\u001eca��<��\u001e�.��N$�\u001b�3��\b��\u0018�G?��Dd�8\u0012�wZ�\bK��1�azJ���{���{��U�8��F\u0000�Ѡ݅�\u001a\r�\u000e�z��hm�'%����\u000e}'2F���41e�dz�\u001f�\b#��y�U2����\u0004-����n��.�)d�?�*AR�H����iv]��-��a\f��!c2k^��`��C��\u0016/�\"�>�'�\u0005\u0019�2���fi�/\u00035b\u001d�xNJ�-��TC�*7�\u0003I�K��Hve\u0007mE^}C�\u0010�p�a{�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"828784b7-c7fc-49ce-95c4-94a9af2a8732","seq":1,"duration_ms":100,"bytes_in":384,"bytes_out":14,"enriched":{"digest":"7e9ac5349436c882","strings":["}'2F","!c2k^","mE^}C"]}},{"timestamp":"2026-10-03T00:14:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-iPt4FOskCkdn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d69507434464f736b436b646e","method":"","user_agent":"","ja3":"","session":"afd98005-6d10-4995-aefe-773346cdd016","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c44bdf7a655f9399","strings":["BitTorrent protocol","<-UW160N-iPt4FOskCkdn"]}},{"timestamp":"2026-10-03T00:12:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0019��R�+�iM�#/\u0010s�\u001eZz{��\u000f������\\6��c\u0014~޸\u0005���}�-\u0003\u0000)\u001d�u>�\u001f������k�\u001c�����Zӯ�� ���;t��x�����GJ7�ͮ��_�=Av׫�)Ew�^�Za��w�R�[�ʗ�A����o��\u0014{o����","payload_hex":"131988f952dd2b8e694dc4232f1073d81e5a7a7bf8ce0ff9b0f0fcaaca5c36baa263147edeb805edefbc7de02d0300291d90753e901ff8c9c5ead7cf6b821cbd8afafe8e5ad3afe2fe209b9afc3b74e6f478e8e8f195de474a378fcdaef5805fb83d4176d7abe4294577b35e895a6183a277d852c35b9aca97cb41b2bde3856ffdd8147b6fb3e8bae9","method":"","user_agent":"","ja3":"","session":"45de6296-4773-48ec-8c97-7684c940a6fd","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":14},{"timestamp":"2026-10-03T00:10:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-AfLxWmz!pjU6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d41664c78576d7a21706a5536","method":"","user_agent":"","ja3":"","session":"3f676170-57d6-4775-8b2f-8c0d845e31b4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"92b3e6abb7d7c1b8","strings":["BitTorrent protocol","<-UW160N-AfLxWmz!pjU6"]}},{"timestamp":"2026-10-03T00:08:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\\�L\u0017]��͚��\u001a��C�Y\u0015\u000f�\u0004�;��Bѩa2C�s\bʫ\bG:\ns?ui��]YF�w�0@Rq|�_�D\u0004N\u000b��\u001d�s����2\u0002iy��\f��ь���2E\u0018\u0013F��M�||ӑr��ح\"���Rꯈ�T��ʐ.��8�7G��$�\u0003�)���S����bB\b0�F�^�g\u001e6B�\u0018�\\.4�\u0012^��'\u0019���[W�\u001a��$J���s]\u0007���K�\n��E=�aT-h�\u0010\u0003j��KP�A�hѝP\u0015k��HDn_�\u0017��\b�s�iw�g���^�U��V��h�d��J��aߨ�%�\u001a`b1\u0016c\u001b0�Vr�\u0017Mek\u0018y\u0007���H��C沈�ό\u001cdz�&�@�x� ��s\u001f�R��{?a\u0004��LDI�te+X���)0#����\u0000\u001e{\u00117��&\u001cL+��\u00000��'��'�HD�Y:�����|C��U\u0016���ѥ�� G:�7_\u0001�.���9N\u0004���\u0000e\u001a\u0019�3^!A�ة�\u001cl\u0006��w�\u0006\u0019\nꊳ\u0000D���\u001a&W��L�<�fzo\u000e�|��7�\u0010=�z��y�_Q�����-g�@v\tr\u0016Ԋ-\u0001��;��r\u000fS�H\u0015�c(�\u0011�2x\n<�(\u0010:�\u0011��\u0000�s�\\\r\u0001\u0006:s�.$�\u0002","payload_hex":"5c894c175d8c95cd9ac1f21afae043a159150ff104d63ba0da42d1a9613243937308caab08473a0a733f7569fffa5d5946d677db304052717ce35fc944044e0b96cb1d7fba73b3a1ec9832026979f4d20ce4acd18c80feb53245181346b7c14d8b7c7cd3917288dad8ad22caf5cf52eaaf889e54aa8aca902ec3cf38de37478cdb24b603f629829383539daf9ab662420830f046fe5ebe671e36428a18b15c2e34a9125edeeb2719958cd95b57bc1aea88244aa8829d735d07b4f8cd4bc30a89b4453d8a61542d689410036abdb64b50ca41dd68d19d50156bd0dc48446e5f9c17b3bf08a973ba6977e967ceddc35e8c55f5b7568af468d664afaf4a81f361dfa8ac25d41a60623116631b30d15672f4174d656b3c6ae98ca5da59f85e8ab53da37e5b5c58407f12c4c413c45e9c1bd3ddf894c13908f9ac3e187907e284ef48dce843e6b288accf8c1c647acd7f26c1409e788d208597731f93529ed57b3f610493fb4c4449a674652b58ad959c2930238a91d8fe001e7b113793c9261c4c2ba9ab0030aba327e59527f94844bf593af1e09fad877c43c9d6551694c5ecd1a5a59920473ab3375f01da2ead88ca394e04aad6cd00651a19ce335e2141d7d8a9f61c6c06b89c77e506190aea8ab30044f2cde61a265790f14c9c3cba667a6f0eec7cf1b537c1103dc27aa4a279b75f51cce4c6eaaa2d67bf4076097216d48a2d01aba33b9ca0720f53894815f66328be11ed32780a3cb328103aeb11c2f3008a73835c0d01063a73f82e24ec02","method":"","user_agent":"","ja3":"","session":"5eda5f03-927d-43a6-82bd-fe62835b4fab","seq":1,"duration_ms":100,"bytes_in":557,"bytes_out":14,"enriched":{"digest":"c049f2a3e779813b","strings":["s?ui","0@Rq|","aT-h","HDn_","Mek��\u0004GbW��7p\u0018���)�\u0004F��J�x{��\u0000=��uׂ&\r���bP\f�Q��G�\u0000�\u0006�����,�\u001a�E�a`D \u001e��Za�\f�3r\\\u0016��d��TW�\u001c>/���/0k\u001bB","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"01e89993-29b1-472d-9873-10f2e5a6c9cf","seq":1,"duration_ms":100,"bytes_in":418,"bytes_out":14,"enriched":{"digest":"0d71ebbd22ad5d43","strings":["@[TN","WrOQ\"","c,!#","2Irz","=&}R"]}},{"timestamp":"2026-10-02T23:58:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-loQU.NWYsPYn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6c6f51552e4e57597350596e","method":"","user_agent":"","ja3":"","session":"547dfd2a-6bf6-4acd-92b4-4359f18b8a16","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a5c0bf9966a8fb9e","strings":["BitTorrent protocol","<-UW160N-loQU.NWYsPYn"],"iocs":{"domains":["uw160n-loqu.nwyspyn"]}}},{"timestamp":"2026-10-02T23:56:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����8\u001ec�V��\u0018\u0004G\b��\u0010���\u0015n�\u0019E���� ��Q�TU�m�Z�!�����V�.�\u0019\u0013�;\u0003!�&'vs�'�Hv��g�UL\u0014�\n\u001b\u001e]�%�1\u0004�\u0015\u0010��B�R��\u0004�F��\f���q�\u000b","payload_hex":"85f9f9b4381e638856fdbb18044708ada110c1a7a9156ebe1945e7cbd5ed20869751f95455c76ddd5ab321e191f192fe56992e831913df3b03219026277673a127c84876aec667c7554c14a90a1b1e5d8f25873104d31510f6e542b152f88304bc46eaa90c98b7dd71ca0b","method":"","user_agent":"","ja3":"","session":"10b1760e-17ae-4d01-96c8-889f2b99d7ca","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":14,"enriched":{"digest":"cb0f8edf59710435","strings":["&'vs"]}},{"timestamp":"2026-10-02T23:52:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-kovjbAJ~Q*6G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6b6f766a62414a7e512a3647","method":"","user_agent":"","ja3":"","session":"c48d8509-b558-4e55-84e8-8ed5532f0741","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6152944bbd3fb1af","strings":["BitTorrent protocol","<-UW160N-kovjbAJ~Q*6G"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:56:06.157600+00:00"}