{"ip":"186.207.253.169","total_events":122,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["122 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 24,343 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,343 bytes sent","bytes_sent":24343,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T15:12:37","last_seen":"2026-10-04T18:11:36","events_24h":0,"events_7d":122,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Bauru","lat":-22.2635,"lon":-49.1364,"asn":28573,"org":"Claro NXT Telecomunicacoes Ltda"},"source_domain":"bacffda9.virtua.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28573","label":"Claro S.A. (NET)","category":"isp","url":"https://www.peeringdb.com/asn/28573"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":122}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":122}],"recent_events":[{"timestamp":"2026-10-04T18:11:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�;*\\��\u0001��\u0017�\u001e�zA=�\u001c\u001a���S��!G\u0000�ie�^�Y�\u0012v�c����t\u0015��ѓ��e*�T�quY�\u000ej�\u001dv��-��3׎�C\u0000�\u0013��Ƕ\u0013��O8�\u0010\u0011x��_��e���c���Ϊ�t˞�ۆH�>\n����ģc���Yb�\u0015�����v�;�KaQi�[�����uxƕ2�0���۵E","payload_hex":"a53b2a5cded001d5f717f31ead7a413dc11c1af4a9dd53f5d52147008b6965fd5eb459a612768563c7c2f081741596b1d193b0d3652ab95496717559bc0e6abb1d76eaa52df4b133d78eb54300cf13b2e2c7b61398e84f38b2101178e4c45fe78165f29ece63a981b1ceaaa474cb9e89db8648f37f3e0aa0ada2d5c4a363c5f3a45962d615d0e6bddede76e83bfc4b6151699f5b98cce2b1c37578c69532c830b3d8cfdbb545","method":"","user_agent":"","ja3":"","session":"1ee2c603-9276-4682-ad46-d4cadcf214b6","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":15,"enriched":{"digest":"5e6042707e10638d","strings":["KaQi"]}},{"timestamp":"2026-10-04T18:10:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-fd!uFTlbzuq.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6664217546546c627a75712e","method":"","user_agent":"","ja3":"","session":"47403dad-3162-4c0a-86e8-9c25fa696e6c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9985b49835f7292d","strings":["BitTorrent protocol","<-UW160N-fd!uFTlbzuq."]}},{"timestamp":"2026-10-04T18:08:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��'���\u000f2�6��\u000f�\b���E=���K_����S$�3e���H\u0003rGn<��v�\n.�\"DbHSZ���k\u000b\u0010���\u0000\u001c�\\���\\.�J]\u0002\"�\u0018Ņ\u001a\u0005[�!�\u0004t���\f�c�m��\u001f�R��f^��\u0012","payload_hex":"a7e3278fb7c10f32c136b0db0fb808b39498453d8dac884b5f9aad85a6532481336590c7cc480372476e3cafdb769a0a2ed722446248535ab7e5e86b0b10fcbfb2001cbd5ca294a15c2ee14a5d02229018c5851a055bf421970474e1c3e40cce63f36d86db1f8e52aedf665e94bd12","method":"","user_agent":"","ja3":"","session":"a906e304-9345-4f0e-a924-3ed1c2d19cd1","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":15,"enriched":{"digest":"da4c42382fd8bd09","strings":["rGn<","\"DbHSZ"]}},{"timestamp":"2026-10-04T18:07:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-~-OBMNF)wun_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7e2d4f424d4e462977756e5f","method":"","user_agent":"","ja3":"","session":"534700c1-4d1a-477a-aff3-55f4a4d5e074","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e423b3f08aaa3efc","strings":["BitTorrent protocol","<-UW160N-~-OBMNF)wun_"]}},{"timestamp":"2026-10-04T18:06:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Q�%��~\u001f�MT��h�c��\u0016\u0015��5�\u00010v\u0005��>�� �\u001a�J��\u001c;�\u0006��\u000f8p��\u0010�'諮�k��\u000el7\b\u0019@������f&Oe- \f'�ޗ]��\f@\u0002׵>�?�\n��C?�\u0013k�ϔ\u0007������@p�}R�OFPٛ�j���\u001b6_�$SQ�ř�m2E����ǣ�BZ\u000bH;?�\u0006)�x(�X[b%hK���\u0006�_\u001a8j\u0006�_\u0001�|�ꖠlPF�e�[xN*�+\u001b�IR��y\u0014S��8Z���Bͳt�x\u0007� �G���\u0001�)̉|PcR�\u0014j̨�sDҧ\u0000L��RU���Z���[\u0003\nx��e�\u0015�\u0011���'��ܵA�!��;�H�W�\n�s?���9��tP#���\u0003$ί7�����|�-��g_�H�\u0017��H�$��t�I�\u0019\b\n����@\u001f\u0018�D0up⃬������j=͜\bm��2�͊\u0018����\b8k�\u0013\\�J��,m�#\u000b�<\u0007�\u0012m-�\u0013P\u0014��o��Q.�R\bn���խ�{��\fd���\u0015�U$;E�\u001dl�����_Œ:��\u0005�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5d73a4d6-05e8-4889-95e5-49a203bea1bc","seq":1,"duration_ms":100,"bytes_in":458,"bytes_out":15,"enriched":{"digest":"35c3c0685fc53c93","strings":["f&Oe-","X[b%hK","[xN*","|PcR","D0up","U$;E"]}},{"timestamp":"2026-10-04T18:04:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-DHmva28BkSs)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d44486d76613238426b537329","method":"","user_agent":"","ja3":"","session":"a341dd97-07b0-4b78-8c33-934acd9365f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"fd663980e112bae5","strings":["BitTorrent protocol","<-UW160N-DHmva28BkSs)"]}},{"timestamp":"2026-10-04T18:03:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\b\u0014���9݇����&���1!�u\u001a{�\t,u�\u0019�\u0014�\u0002��`��\u0006�\r�D��_C\u0016�$�z�V}+���x\u0014f�o\u0013Rd�HV��\u00001\u001b�6����\u0005xqgg��^��\u0014�^i���&�R���\u000e�\u0011��%�\u0002XG�y���+OD(�s��v������66�\f�3{x�\n=\ri��B��\u000f�3볷2a\u0017N�x3�^��wq\u0006�\u0017\u0003{��H��>��H6/C֐����3�g�\u001b�]\u0007L!�+-��X�\u0002�k�y��k[SB\u001a�\u001cJ���\u0018�d��\u001b��'h���\u000f98t3�\r\u001f�+��\u0005P���U':O��̥0�K���p\u001deE�}I��o��\u0018���giN��xiv�\u0017������(؋���Rq������\u0000��)��C7\u0014��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b32e340e-00d2-4ecb-a489-33f1e2ee6c10","seq":1,"duration_ms":100,"bytes_in":330,"bytes_out":15,"enriched":{"digest":"33f97a27d28456d5","strings":["xqgg","+OD(","H6/C","k[SB","98t3","U':O"]}},{"timestamp":"2026-10-04T18:01:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-_xumP-s.stx~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5f78756d502d732e7374787e","method":"","user_agent":"","ja3":"","session":"8229e719-5b3d-4074-a34f-03c18722bb40","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c9914ef7ec1159c7","strings":["BitTorrent protocol","<-UW160N-_xumP-s.stx~"],"iocs":{"domains":["s.stx"]}}},{"timestamp":"2026-10-04T18:00:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"aDw2��x��M\n�mq���=\t�\u001c������dI�\u001c\u0004�����/\n��ͽ,��\u0003���u\u001fZm%�SlD\u0007�\u001b�7�Z=��m�tba�c�R)u�y�\"��\u001b��ˏ�ѕY�w>��\u0014IP\r���T{\ng\b�:��K3\\1��6\u001dUD�\\��\u001a\u00101\u001c�Ϧ+�q�帕�\b�+�2!�}�-W�\u001dv�n;�R{�\u0007\u0003��Q�\u0017�%\u0003\u001f)#b|��\u0005����Op��Eqqn�\"�\u001d�B��\u001c\rM{�C2k\u0006�+�\u0019u(;^e`\u000e`�s\u0005\u001dx\t\u000e��ap�I���/�\u0007��\u0004rU�^{���Lir-�N�!=>s6)���C�=�,ldt��f\u0011�\u001cCN�\f��l\u0014�Z'�+\u000bT�\u0013�(�� �a�\u0011�\fXCpH��`8SQ ���i���AH\rkQ�\u0001����-̳,M�iF��.�\u0011��\f��z.��<�P](}U�΋\\�jK\u001e,��/M\u001a}���ণ�X�Q<2?*����a5$\r�\u001e��nz\u0006�{\f+sشm�f�Ħ��Ь��\u000f\".�-�\r$�����g�{\t��@J�u�9�\\[�s�c}�\u00051V�JG�u���\"DF\u0006��e>����˴�+\n�3�8\u0019�\u0004E\"���A�6\\\u0012�Z{�6��s(�ռ�о����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"94e084e9-4254-457c-ac00-ce892b8a8779","seq":1,"duration_ms":100,"bytes_in":535,"bytes_out":15,"enriched":{"digest":"507d1b459a348a1c","strings":["aDw2","K3\\1",")#b|","Eqqn","u(;^e`","Lir-","!=>s6)",",ldt","XCpH","`8SQ"]}},{"timestamp":"2026-10-04T17:59:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-uKq~(UP-JiyJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d754b717e2855502d4a69794a","method":"","user_agent":"","ja3":"","session":"535dec15-7598-49cd-86cf-11e3cac5d179","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"67fd33aaffdbf2c0","strings":["BitTorrent protocol","<-UW160N-uKq~(UP-JiyJ"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:10:53.777017+00:00"}