{"ip":"179.160.253.93","total_events":65,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["65 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 13,568 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,568 bytes sent","bytes_sent":13568,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-26T03:29:37","last_seen":"2026-08-26T13:51:31","events_24h":0,"events_7d":65,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Itapecerica da Serra","lat":-23.7245,"lon":-46.8461,"asn":26599,"org":"TELEFONICA BRASIL S.A"},"source_domain":"179-160-253-93.user.vivozap.com.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":65}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-26","count":65}],"recent_events":[{"timestamp":"2026-08-26T13:51:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-FYYs5.uYl6se","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d46595973352e75596c367365","method":"","user_agent":"","ja3":"","session":"db1ffefb-f536-4e72-8cd9-811133015223","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f28bdcbacf07e02a","strings":["BitTorrent protocol","<-UW1605-FYYs5.uYl6se"]}},{"timestamp":"2026-08-26T13:42:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��2�1I�ȮlXh\u0005�@(���B;y\t/��\u0014~\u001a�%�\u001c�����Bී���6��\u0000g)&�\u0010��wnx�Y�\u000b3Wz\u0017x�6����j�\u0013��r\u000f|c�bC0]����\u0018�5[Y=O-��|ώ��@�\u0007\u001a���\u0006_ź�ޯd��\u0005��\u001c��\\p�zt��\bp\u0018?z\f\t��\u001f����\fAa\u0019w��1�\u001f?\u001d�\u0007���z�Ɉ\u001c�fn�:(\u001a�qr\u001a\u001ev�d�\u0016\u0014��4O�y�N�%�\u0000;\u0011\f�M=w,\u001fD`���i�H��\u0014\u001b\u0005�����\u0000K��\u0007�VxS�e.e1r\u001au���b���{��\u000e\u0000n\u001a�+^�H��\u0003A��/—P�3u��*z}��QD���WX$h\u0015AU_6����q8w����Sx������&\u0017��/�9����B�J�i\r\u001f�\u0019����p\b]��\u001a�v)��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e1b44fcb-9698-407a-a7d7-c7b6f03f95db","seq":1,"duration_ms":100,"bytes_in":354,"bytes_out":14,"enriched":{"digest":"462b867aad5e4117","strings":["bC0]","5[Y=O-","M=w,","e.e1r","WX$h","AU_6"]}},{"timestamp":"2026-08-26T13:33:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-XyH_n41TzhE6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5879485f6e3431547a684536","method":"","user_agent":"","ja3":"","session":"e35a97af-d4b2-45dc-bd9b-b732897c1dfc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"11bf645a43efd7dd","strings":["BitTorrent protocol","<-UW1605-XyH_n41TzhE6"]}},{"timestamp":"2026-08-26T13:23:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��ၟ�E���|r��|��`�\u001b�� �$�[h�3��$�C\u0000[\u0016\u0018P{�0G����\u0011���6�\u0000T�s�\n\u001a\"�6���٠�7\u0014�FyAe�;��\u0019\b�K'\u000e��jܭo\u000b�?\u001c\u0000�<WGqz�\u0002��Od>b\u001c*��a�����x}�B*� ><_�D��z�@�\u0012�����҈\u001d\t�`\u000et9ڳ��3�\u001f�Ggȏ������\u0016ۉ�S\u0018�Ub��jB�#�6A핧9\u0019�\"�.�Z ��H��\u0007�VȰ�\\7�_ie����k����b讦@�9Y�\u0005�X�2~e�|�w���p�,BD�*δ룎�����,�s����9\u0019�\u0004n(\b#oy���^\u0005\u0019��d�\u001c���\"�\u0014h��\u000f�b�|��5�+�˚�8M�9wH_\u001f�7ܧJE�������Cyʉ��@vJ�\u001fiǷ�盔\u001e������gD�l���\u0012�\u0001�=5�{�\u0019@@�\u0001y�����(:�(��Z��$O\u001d\u001e��\b��3���\u0006�|R=�5��Q݃+\u0010@\u000f���\u0015\u001bT�7\u001d��\u0001}�u���z�]�/;���Hg.�$l�'IF�+1","payload_hex":"e5b0e1819ffc45b4e38c7c72f1e27ceac960af1ba18820f424fe5b68c833dddc24e943005b1618507bdf3047d3ea8cdf11e985fb36af0054e173b10a1a22943694cff5d9a0923714a446794165c93bb0eb1908d04b270eeb8e6adcad6f0bd83f1c00ef3c5747717a8702becd4f643e621c2ab59c61ebdffed4d2787dd2422abb203e3c5fe944b0b77ac2408e128084b0dad8d2881d098a600e7439dab3fdc633c81f874767c88f8a99cdfcf0f616db898b5318eb556284e66a42fa23e23641ed95a73919f422e92eac5a7f209c934883bc078a56c8b0f55c37e95f6965e5f3deed6bc4c0c9cb62e8aea640c63959cc05e058e5327e65bb7cd777d1d7e970f32c4244d02aceb4eba38e9ef1d9d2d32c8273dbef94fe3919aa046e2808236f79f7edd15e0519fefd64de1c8debdb22e51468efa90fc162b57cc3f2359c2b92cb9aea384d913977485f1fc237dca74a45bcfec0b4f4b5be4379ca89808740764aa61f69c7b7b0e79b941e94c3e6f2cad56744ea6ca1d7ea12ea01943d35837bd7194040ab0179d7d4e6a2e6283aa728b5875a918a244f1d1ee6fb08e1c933e7e1df06c77c523dbd35a98551dd832b10400fa19e83151b5490371dd0f8017df375808d967ac05da92f7f3bdef6e448672ea8246c93274946bc2b31","method":"","user_agent":"","ja3":"","session":"18fc7e21-75fe-4dda-a788-4780f3ece915","seq":1,"duration_ms":100,"bytes_in":473,"bytes_out":14,"enriched":{"digest":"104ee75829a92cf4","strings":["FyAe","<WGqz","Od>b","9wH_"]}},{"timestamp":"2026-08-26T13:14:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-9)EnIxKta~ZD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3929456e49784b74617e5a44","method":"","user_agent":"","ja3":"","session":"56add218-9484-4e3d-b3a4-9b807a3e25ac","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d6086af5442ffbd2","strings":["BitTorrent protocol","<-UW1605-9)EnIxKta~ZD"]}},{"timestamp":"2026-08-26T13:10:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"a\u0016�|��$W��ӵ-@�����c\u001ec�m^��.�\u0017E\u0014[�^�I�\u001b$��O� �bm���-�9;%k��o�u���heCl���3�FW��\u0000_\\RWD�\u0012\u0007N\u001c��K�\r��,N���_8{��g��m�\u0016�L�b\u001e��\r\u0018n[��\u0000�-�`\u0000��\u0015T]\u0016�n�?y\u0006 �Ԝ��LT��]8:Hv$˲�#�a�dJ`\u000f�","payload_hex":"6116f97cead224578ef2d3b52d40b49fe3d5fa631e63ea6d5eadea2edc1745145bb85eb149ed1b24c5f34fbe20cc626da9e6a22dab393b256b8df16fbf7582bccd6865436cd3e9cd33c646578dac005f5c525744a712074e1cc9c14ba60dc28dd0e12c4ee7a3d45f387bdcf567f9eb6d9a16bd4cc0621eb1af0d186e5be58200a92dbb6000eedd15545d16c96ea63f790620b2d49c91fa4c54c4d65d383a487624cbb2a223d761b2644a600f99","method":"","user_agent":"","ja3":"","session":"6d8a72ea-c175-4060-82ff-82b1d255040f","seq":1,"duration_ms":100,"bytes_in":173,"bytes_out":14,"enriched":{"digest":"c31f68969b3668f1","strings":["9;%k","heCl","_\\RWD","]8:Hv$"]}},{"timestamp":"2026-08-26T13:00:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605--7qMwiV_)QW!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2d37714d7769565f29515721","method":"","user_agent":"","ja3":"","session":"1359be05-6aa7-4161-aaa3-39642a3c561e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"eb27abbb2bf17ad3","strings":["BitTorrent protocol","<-UW1605--7qMwiV_)QW!"]}},{"timestamp":"2026-08-26T12:49:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"щM��o\u0019{�v��-ߖ6\t.\n���IЂ��gm�]V7G��BlNݓ\u0000��F���\u000f?�Ah�����jz'����a%��un�\u0016�7RF�[S���������N�d�\u0000�� �\u0013���]\u0001\u0011�Q���_\u000e:�H�¬��\f�\u0001��2{:�\b2��`:Z\b�wYOO�\u000b^�}}>�E\u001bެ*�� \u000f����Ŝ�‚Y�7?�q�0��\u0018\u001eu\u001cp�:jNm\u0003�Q�\u0003\\�\u0018�WvR��\u0003h2����|�*f�1\u0005�b��'\u001f\u00131�V!\u000e>\u0010m\u0001�o�)�\u00107��{v�6��I\u0002�\u0004�P�����\u0001��5�\u001bQ�>�-X�G\"�7�1��څ9D,d�4���{�\u0012k&�����|\r������x{��_�%��\u0016����f�u���ࢍ�P�\u0004\u0015\u0013>�����6D<���z\"�\u0002\u000b�ISwj\u0014��g\u000f�U����rW\u0010�$_���?:��:�g֢\u0004u�cL�5�J���f��h�\u0014�09rX��\u0001Q���\"�O�L+�/�q��\u0015@�㽧��e8�;��\u001a�G\u001c����խT�\f�Tj�\u000f*�����u0��yi�\u001cu�f�\bt��\u0003K�$�S��J��t��\u0012N��GP3Bɝs󙡪vSؙm\\��m\u001awe*>\u001dǹ�Gm7S�^.�\u0000?s\fj","payload_hex":"d1894dedbc6f197b8f76f5842ddf9636092e0a95e6ea49d08284de676d845d5637479399426c4edd930099bd46e6e2b20f3ffe41688eb5a09cef6a7a2789a4bdce61258be0756ed016ec375246ad5b53bea48b86c1bfb5dfda4ede64c000abe420e813bce69b5d0111f351f4e0e05f0e3ae548dcc2acfdbd0cc50192f8327b3a820832f1f1603a5a08f677594f4fca0b5e997d7d3ee0451bdeac2ab58c200ffff2dac2c59cb9c28259c7373fbe71f430ad95181e751c70d53a6a4e6d03e251e3035cb118db577652a4bc0368328da3b3ab7cb62a66a73105ec62c4e9271f13319856210e3e106d01a76fc629cb1037f3fa7b76a836efb249029804e950e9ff9693e901b7e235c41b51e33e862d58a947229437c831a6e6da8539442c64eb348cbbf17bb3126b26b19e83f7a17c0df1b4f997d1c5787befe05f9525e08e16caeffad9668175a6a9fee0a28df6509d0415133e84c7eb86c836443c9f8ccd7a2297020bdc4953776a149b90670fcf55f5f8e3c7725710e1245f91eeab3f3a929a3a9467d6a2047591634cd635984ad1f0bf66a7b568cb14e530397258cec40151e0e1dd22dc4fab4c2ba52f817185d11540ffe3bda7f4f36538c53bfab91ae7471c99e4ffe6d5ad54c40c96546a830f2af2d3c6e8c27530f0f07969d91c75c866a008749883034bc2248153fcd34ae2f97491d7124efcc647503342c99d73f399a1aa7653d8996d5c8ab96d1a77652a3e1dc7b9dc476d3753ad5e2e9d003f730c6a","method":"","user_agent":"","ja3":"","session":"eecf8420-b36f-46ad-9477-a48c4c793d6c","seq":1,"duration_ms":100,"bytes_in":544,"bytes_out":14,"enriched":{"digest":"78ca06badbfffb25","strings":["]V7G","wYOO",":jNm","9D,d","ISwj","09rX","GP3B","we*>","Gm7S"]}},{"timestamp":"2026-08-26T12:37:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-!3kpGrvxyAIL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d21336b70477276787941494c","method":"","user_agent":"","ja3":"","session":"6cae2849-c969-4ff4-a967-c49c34bef11b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1b1f76a01852e73e","strings":["BitTorrent protocol","<-UW1605-!3kpGrvxyAIL"]}},{"timestamp":"2026-08-26T12:24:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���'����b-����EO�2\f�r����2���P��\"��}�ļ#\u0012�A�f�'ǸX��mR�\nC�����\u0007\u0016آ���d�[\u001aΓM�#�bJy��\u0010T\\x=CQ�\u0007$���Ni���`q�up���J\u0011�R�\u0013N\u0002�5��\u0017�>HN�\u0000\u0013w\u0002�s\u0019\u0017T9ɬ~�W}!=�\n��Y��\u0012^H`@}�\u0010X�#\u000b��e-P�_O�\u0011����\u0017���2\u001f��\u0013��\u000f�H��܏^�]\u000f\u0018�bž�S�Jnv; GCS�yc�V�*\u0000\u0004[�l\u0019&\u000f!�?/�O�V\u000f\u001e�'��UϺP�ѭ���\u0014\u0011�+�B�E��b\u0014������Y�Y�Hz]����6$Ԝ��X|�\"���\b��-M���(q%Z\u0016YD*O\u001fH\u0019[\u000e;W)\"1Gi2NbO���X<��h�u��\f\u0000p-V�jxkH\u001e[��,\n�\u001b�\u001dM���\r�gm\b5�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f26f6590-8b33-4e18-8e36-77f2a73f367c","seq":1,"duration_ms":100,"bytes_in":379,"bytes_out":14,"enriched":{"digest":"bbd791a4edbcd7d0","strings":["T\\x=CQ","W}!=","^H`@}","Jnv; GCS","(q%Z","YD*O",";W)\"1Gi2NbO","jxkH"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:21:14.848787+00:00"}