{"ip":"186.213.80.186","total_events":287,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["287 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 59,212 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"59,212 bytes sent","bytes_sent":59212,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T16:50:27","last_seen":"2026-09-20T06:17:34","events_24h":0,"events_7d":287,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Rio de Janeiro","lat":-22.9072,"lon":-43.1883,"asn":18881,"org":"TELEFONICA BRASIL S.A"},"source_domain":"186.213.80.186.static.host.gvt.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":287}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-19","count":36},{"date":"2026-09-20","count":251}],"recent_events":[{"timestamp":"2026-09-20T06:17:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-sUfO7d)o-WLW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d7355664f3764296f2d574c57","method":"","user_agent":"","ja3":"","session":"b3fbfa21-ca5c-477e-833b-4db85ff01706","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5d47c44cf69b1e69","strings":["BitTorrent protocol","<-qB5200-sUfO7d)o-WLW"]}},{"timestamp":"2026-09-20T06:16:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u00185P\u0004�6A��jF!��\u0016zm��S�\u0013��y��dI��\u0004�f�G�p^�\u0013Gu\u0007���ۤ,�\u001ev�]�Vu\u0003\u0015݆2���\b*�7C��t�G�\u001e\u0013�����rǮ_�Q.b�S���\u0015\"�x\u000b�\u000bEM\u0001@�:����Rnppg�$��:6�=�A�|\u000ew���de��\f4\u0017\u0011\u0010!\u0010�p1\u0012P�L)Z\u0016�ΘZ\u001d�=��m�43��\u0006��e#%j�q�oKx+]��S'����OǕ/��'Ĝ8^����@�8�:8s����\u001a%o-��\"\bX�0���\u0003\u001b9\u0004��1\u0004\u000f�\u0002�\u0014�/\t�%!�����G�\u0005A�W�]tӂ��\u0006�","payload_hex":"183550049a3641a4a26a4621c0da167a6da78253e413ef8a79a3ad6449b2c304a166db47e4705ed8134775079299cbdba42c8f1e76885deb56750315dd8632859ac1082ad23743a1b274f6479f1e13bbd8c1829672c7ae5fc7512e62f253f9fe9b15229c780bea0b454d0140823a86adeabc526e7070678124e5b23a36c93de241d77c0e77f2c3ee6465b88d0c341711102110db70311250b24c295a16c3ce985a1de83defb96d883433f4a1068ff06523256ae671d86f4b782b5d9dad532794f8d1e54fc7952f808127c49c385ecccae8ba40d538da3a38738b8691e21a256f2df59e2208589a30ecf8b9031b3904909a31040ff1029014d82f09c5252195aa9dd6fd47e60541bb57ba5d74d382a68c06ae","method":"","user_agent":"","ja3":"","session":"63b823a9-d4c9-44de-9ff4-31ed37b2388c","seq":1,"duration_ms":100,"bytes_in":274,"bytes_out":14,"enriched":{"digest":"0dbbcd099e23d738","strings":["Rnppg","e#%j","oKx+]"]}},{"timestamp":"2026-09-20T06:15:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-0L2LoP)k_p5W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d304c324c6f50296b5f703557","method":"","user_agent":"","ja3":"","session":"5f651a6c-511a-40aa-8739-7d7014787e90","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b49e6ab28a13c90b","strings":["BitTorrent protocol","<-qB5200-0L2LoP)k_p5W"]}},{"timestamp":"2026-09-20T06:13:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000�\u001aN\u0015��n6�#�\\��O�0\u001b���yOUd��Qxڞ-�7=��\u0001AA\u0019���-�\u0011M�����;^l�v��Z\u0004N#\u0000��\u0013�\u0000M�\t\u001c���ɗ\t���� �Li\u0011H\u001c��J��o���+��m���\u001d\"�:�\u001cw����_9��\u0000a*\u0017��Uهqƚ��0\u0012��\u000b2�����MK�!\\�6��Y�%�\f�3_������ҏ\u001b��G\u001f>,6��\u0013�B�&(���&8�\u000e�\u0002$[.:��o8z��+����\t+����\u0011\\h:\u0014�\u0011Q�����* �7Yc�#g\u0016��HZ8\u0004��~uf��2��{\u001d���\u0006����Auv�A2\u0001%M'z\u0005�,\u001a\u001at���\u0002\u0010(\tf�*�e","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3c1484ed-2de1-479d-a14f-c8b1b548c289","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":14,"enriched":{"digest":"8560ad6b5275571c","strings":["yOUd","%M'z"]}},{"timestamp":"2026-09-20T06:12:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-NhZIYu1T(eky","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d4e685a495975315428656b79","method":"","user_agent":"","ja3":"","session":"982cef77-101f-4a58-8f2e-997f04e29e05","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5f92542706083250","strings":["BitTorrent protocol","<-qB5200-NhZIYu1T(eky"]}},{"timestamp":"2026-09-20T06:11:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0011�?\u0002\u0017�\u0015/14�\u001e{�^���BM��אa�t��87뺅�}�yt�H\u0017'�U&�p�3K\u0016��MWa��N\u001f�t9��볼!F�N�a���Ӑ��`�-��2�֎�\u0004��,�\u0004�u@4x\u0005\u001b%b�g�*�\f�}�h�g��n�>=���\u001dFֹ�-�6G�;T�\u0002�\r��ej����^pb�c\u0016a��\u001b�2�\u0015&�Ac+mwdi�\u0010�%��\b��\u001a��~\u0001�\u000e�\u001b�R9��\u000e\r�rݱn�J����7�\u001c8��","payload_hex":"cd11ce3f0217f8152f3134df1e7b825e82a8a6424da4c7d79061cb7495dd3837ebba85bb7de07974a0481727f955269170f2334b16a6d74d5761f1da4e1fd57439d5e8ebb3bc2146f14e8861c2e1cbd390b0c260912d9cb932d2d68ef104e9d82ccc048c75403478051b2562e567ba2ac70c8d7ded68b267a3b46ece3e3daca27fa71d46d6b9f72dba3647ab3b54cd029c0dbbf3656acde59ac65e7062a0631661acdc1be532de15268241632b6d776469b810eb25a1830890f71abc8c7e01aa0eae1bfa5239fd980e0de472ddb16ea74adfd1fac037991c38a0de","method":"","user_agent":"","ja3":"","session":"d5b9444d-7bf3-4d45-ab76-279c3b292d56","seq":1,"duration_ms":100,"bytes_in":219,"bytes_out":14,"enriched":{"digest":"a579071384880b5c","strings":["u@4x","Ac+mwdi"]}},{"timestamp":"2026-09-20T06:10:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-.axO(dP!5ScY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d2e61784f2864502135536359","method":"","user_agent":"","ja3":"","session":"cb076041-ce09-430a-a6ad-c35f56559ff4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f93a094fa0bf3795","strings":["BitTorrent protocol","<-qB5200-.axO(dP!5ScY"]}},{"timestamp":"2026-09-20T06:09:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��9��22ay�`�\u0004n\bЯw=G���������\u001c\nH*�A\rE9'��r���8v��\u0001k�Yo\u0007�c-�8�T\u0002�A�\u0002˛q\u0016'X��_�T�/�2Ъď\u001f�$�_G��q��Y��P\f�+v\\�Z\u0005��Y���10�yp���\u000e\u0014g��bf��V��J\u0000\u0000�\u001aQ\u001ct\u001a�od���(�}�xX1�^x\b�ࢷ8j�M(_u�\f��}�","payload_hex":"e79e39e8e032326179b960a8046e08d0af773d4786ebd6fda0f7eaedf61c0a482af1410d453927cde272ebc3ef938397387688b9016bae596f0788632dce38ad5402cc418702cb9b71162758a5885f9454972fbc32d0aac48f1f9924815f4782c47195ae59a998500cef2b765cfc5a05f5c059b8f8993130a97970eaabc60e146785aa6266a48e56cde24a0000b11a511c741ab76f6483c5ea287fdd7de3785831865e7808a2e0a2b7386acc4d285f75f30ce6c27dbd","method":"","user_agent":"","ja3":"","session":"9ddbecac-512a-4aa1-ba15-824ded7e5581","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":14,"enriched":{"digest":"c69d1f7479116b89","strings":["22ay","M(_u"]}},{"timestamp":"2026-09-20T06:07:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-obR~Mf!m4nhW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d6f62527e4d66216d346e6857","method":"","user_agent":"","ja3":"","session":"8d00d316-4eb8-4d60-925a-754fe57d5e62","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"194e34e7e4ec6d59","strings":["BitTorrent protocol","<-qB5200-obR~Mf!m4nhW"]}},{"timestamp":"2026-09-20T06:06:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"!�A�\u0011Ԉ}��u�i�����~/Rg�Iq\u0014�Ќ\u0019������'�w���>�<|��s�\u0019\u0011�\u00178�pU�s\u0016��\u0016J\u001b�ږ\u00030,l\u00145��Kd@�\f�\r\\�V�_�\"�[]\u0017���,�m\".y��3�R�E/|��\u0006\u0019�_-s\u000e\u0002��5ܖ��Z�����\u0000��mBF��\u000e��*|ٯ��4���C�Xb/�����\u0015�d�\u001d'�����\u0014x'�*�_��\u0003�\u000b\u0003\u0003&��U\u000e�{�6,��di�\u0016�?\u0006;s\u001c��\"{��?�8��|=��o��U���؃�\u001e\u0000:�ØэRQ�(���d\u0014P(F������\r6O�\u0010ǏRY���\n�\u0003E��H�q��gAo��ܾ��nn/�ޫ��J�\"�û��@^�*�C��\u0001r�&�g&�x�\u0007W\u0003Vܟ����oW�±�JT�\u0016@\u0011���1,f�ഛ���h\u001fTNA��\u0010����jp��K!�z=q�����?��ŷ�W�o�\u001c��&��aE����$E <V���?��o*c��V\u0014��\u001fC��\t���T\u001bg\u0012\u0000r����n���N�h�-\u0013�I�\fh��� ��F��d5\u001dJ\u00021Ɯ\u001a�EmtHpN\u0018H�\f�I�ʂ;�W3g�?o~ڱeM����3�\u0000\u001e�V\u00034\u0001R^IY��|4���\u0002�g�Q7�31�*^e�\u0014v\\s�saĶ��\t�1G�1\n%�E�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e57c515b-bd26-4abb-8910-83294282c98e","seq":1,"duration_ms":100,"bytes_in":579,"bytes_out":14,"enriched":{"digest":"f7f81bdab6e3153f","strings":["~/Rg","m\".y","$E <V","EmtHpN","R^IY"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:35.924127+00:00"}