{"ip":"187.115.252.226","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,535 bytes sent","bytes_sent":2535,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T02:43:09","last_seen":"2026-08-29T03:17:14","events_24h":0,"events_7d":0,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Santo André","lat":-23.673,"lon":-46.5302,"asn":18881,"org":"TELEFONICA BRASIL S.A"},"source_domain":"187.115.252.226.dynamic.adsl.gvt.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-29","count":12}],"recent_events":[{"timestamp":"2026-08-29T03:17:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003rî7ޮ\bA\u001c��\u0011\u0010pU׺��JpV��(��ۦ�#\f1��Hۤ��]\b�Ľӳ\f�\u0010���\u0002)i\u0015@`����C�������_.YX\u0005��\u0012I\u0010�N��w��\u001c\u000f\t���3'I�\u0010\u0005�\u0005fCF�Z�G\u000b5&���j��\f��\u000bp�\f�t&n�qf��� \u0006�=�`\u0018\u001cc���\u000e\u001c\u0014\u00061\u0003f�]J\u0018�C����8�j�F��@yO\u0007gG����-wH����t^2��w\f����\b$�3\u0002^�\u000f��\u0002\u001bB=�<\u001dI��*�#�M�P�������A���l��ч�qn�%���z\u0019T��W5����Y\u001a߇\u0019���Ql�[pr&�\u001a�\u0012\u00180E�0\t&0\u0010��C�0Q��B\u0000��}\u000f\u001f�cA�'X����\u0010�y\"����O�","payload_hex":"0372c3ae37deae08411cc3f411107055d7baf5b44a7056e8e928f5d6dba697230c318afa48dba4b4f75d08dbc4bdd3b30c861087f2b7022969154060f9828ad943b38780c5d4e1925f2e595805d5ef124910a94e949e77b08a1c0f09a5f8b5332749cb1005ba05664346d75aa7470b3526edc6c26ab0fd0c96980b70e30cc574266eca7166d8d1d92006b13dc960181c63b9cccc0e1c14063103669e5d4a188e438de3a7f738ae6ab846bcb740794f076747afaac37f902d7748b78eee80745e3298d2770ce58bf6cc0824d333025eeb0fb885021b423df23c1d49fae62aea23d54df950b2bdae83bbdfe6418ebfa06c7ff9c8d187e6716eac25f5a4987a1954fff35735e1cbd1c8591adf8719e8b9eb7f516cbc5b7072269e1a8e12183045fc3009263010f7d843b93051ab9e4200b1877d0f1ff96341df2758afe19bdf10a87922af88e8a74f88","method":"","user_agent":"","ja3":"","session":"9c79fdc4-f88d-4c0a-b09c-840bb12812f6","seq":1,"duration_ms":101,"bytes_in":328,"bytes_out":15,"enriched":{"digest":"b749e44feda446e6","strings":["_.YX","[pr&"]}},{"timestamp":"2026-08-29T03:13:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-fyVT5d1vmLbq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d66795654356431766d4c6271","method":"","user_agent":"","ja3":"","session":"7bf51eea-4280-4af2-aece-90e12370facc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"34dc77f96d855b6b","strings":["BitTorrent protocol","<-UW1609-fyVT5d1vmLbq"]}},{"timestamp":"2026-08-29T03:10:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ǎ��(�3����/K*,��騬��_?hd���+<����}\u0003�-#ر$��\u000e�\u0003��E->����2��#z\u0000�\u0001\n�1��.�$�v�I\r���`�N�m1R�R�J���e*%�F����%[|��0���_��5� s}\"+��J�\u000b\u0004�h�6d ��\u0005�\f�\u0006��#Q\r��K���l���ivN�&*i��\"���y�U�߅\u0012���R�e���.m��D����\r���x�j�\b\u001aݼ�-����\u001fi�\u001c���$�\u0013w\\\r<\u001a��/�W!'\",�ʙ|\u0019�h�eg\u0017+�M���3�j�k�}Ј\u0016Q�=\b+��u>\u0003l\"�P!\u0016\n�����J�3\u0004�W����\u0014)���ߴ�\u000b��2}Aʀ���\u0005��V���U\b�24�+�>�ii\bW;\u0014�_�s���,\u0018�������V7zM}�%@�\u001aD�>\n%��\u001c���E��,z\rN�=�D��W�����\u001e�z��Z�\u001c��E��LZۙes\u0014��w�2\fn���v��{�^\u000b1��8��p:��HQŻ�\u001f\u0006��%���\u0013Z��3����=\u001d{7A�����y�z��n/\u001d0������\\�n\u0012\u0000\t���[r^�w�D�0\u001e\u001f�r���Ѩ\u0003Z޾2�\u0001;�\u0000CK��+���LT�\\��<ʺ\u001c�|Z","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ed732fc4-66d9-4949-8a54-c58683e41627","seq":1,"duration_ms":101,"bytes_in":547,"bytes_out":15,"enriched":{"digest":"60b33051f066d612","strings":["/K*,","_?hd","s}\"+","W!'\",","V7zM}"]}},{"timestamp":"2026-08-29T03:07:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-)zA45z0P)nxH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d297a4134357a3050296e7848","method":"","user_agent":"","ja3":"","session":"cfcd10ae-b7a7-4272-98a5-7a23710c69f5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e999558397befacb","strings":["BitTorrent protocol","<-UW1609-)zA45z0P)nxH"]}},{"timestamp":"2026-08-29T03:03:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\\�\u0012!Ŋ�\u0016X���F5�8��Y�\u00114<���xt8\\���'�T��.�$����Ѷ�Pm�\"x;R�)ר��q\u0002Z�a*r;��t]��>�o�d*�o��'����\r\u0007�w���\u0016�����\u0000�\u00029M��Ln��Y���Bގ^��o3�\u000e\b>�����m\u000b_fpc�\u001f;6���\tx�����j�5�\u001fi�\u0011�J�\\\u0005��5�c��`k�A�w�3���V(\u0010�j&�","payload_hex":"5cb71221c58a82165891eab54635d238f8fa59bf11343cffa0b47874385cc1eaaf27de54e6ba2eec24a3b08baed1b681506d9822783b528129d7a8b88971025ac1612a723b82ce745da6f03ead6f80642ac46fe48127bda8a8e20d079f7795a6ad1689a0f8b08e008502394da7964c6e94b859c1b9c642de8e5ef8c16f33920e083e90f3aaf5e66d0b5f667063861f3b3684eda60978b69d96c0f26ab035e61f69a011c54a8e5c05f9c735b163e29f606bdf41f7779f33a8ac97562810e56a26bb","method":"","user_agent":"","ja3":"","session":"481c9e90-62c3-49d2-959d-cad065711bec","seq":1,"duration_ms":101,"bytes_in":193,"bytes_out":15,"enriched":{"digest":"d1614afbfb2ddf80","strings":["xt8\\","\"x;R","a*r;","_fpc"]}},{"timestamp":"2026-08-29T03:00:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-DTPJl0IyA5x!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4454504a6c30497941357821","method":"","user_agent":"","ja3":"","session":"89dcc012-ab05-4548-bc67-25c28e643386","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b119cbbf9369cba0","strings":["BitTorrent protocol","<-UW1609-DTPJl0IyA5x!"]}},{"timestamp":"2026-08-29T02:57:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�&���.\u0003�Q��U,\u0011��R�����������]� Ɩ#Y��1�@�If\u001fX�J�#�e���\u000bo��\u001f�\u001f�������\u0000U�%�j!,c�\u0017�8\u0001K�.`Z� ���\u0017~�i�\u0014����g��1�xxZ9����D�\u0011����z��U�O���k����\u0002��E\u00122B��PcK���χO�g�����^\u000b\u000b�R��\u000f��m����\"M=�\u0004ӕ\u0010X�w��T$<�.���(�F����\u0010��P*\u0017���s����%B�|/\r�\u0015��Z�\u0001Bc�\u001e�\u000f/���G\u001c\b]\"+~9��\u001d1�\u0000�=eh+Ѡ�R\u0018,9E\u0018�\u0003�t2���P�t[�R���E�n�Z\n\u0001�Z�]�����c\"�%Y\u0019\u0006-#3\u0018\u0018��\tOB��4�\u001f�]5cMj��})�l��ps��\"\u0013�d��\u001eQ\\X\u0000\u0002\u0011��0H�1�e��zN�G`v�u","payload_hex":"8a26f6c4d62e03a95184fd552c11bc8052a3e1abedf5fcd5ddecd1fb5dec20c69623598dbf31b9409649661f58ee4ad123e165cfe4f20b6f898c1f861fa2f0e78dc8c0d600558625806a212c63db17cc38014b8c2e605af120fa8883177e9569bc14f79dc6ec67868731d178785a39ffbfaad144e411f7e1e5ac7a9ae455e54faaa3b46bc1fbc6ca02b2b74512324295d050634b8febc3cf874ff867908fbaa99e5e0b0be0528ddd0f94c66ddcc7c2f3224d3dd404d3951058937798a454243cbe2ef6aec028a946f9f4efb410f998502a17f68be9739c9aaedf2542957c2f0ddf158cb15af3014263941ebb0f2fa2d8d1471c085d222b7e39f68e1d31d500c03d65682bd1a0d952182c394518f503ad74329994ea50bb745bea52cee2d645876efe5a0a01ef5abb5dec97fac1c06322f5255919062d237f331818dbfb094f42f5dd34a91fb75d35634d6afbc47d29a26ce0d27073b9ce2213df6487b01e515c58000211e08230489b31b66594d67a4eda476076c575","method":"","user_agent":"","ja3":"","session":"4a370641-6a77-4a63-b112-df7b154dfa53","seq":1,"duration_ms":100,"bytes_in":374,"bytes_out":15,"enriched":{"digest":"44a794d628c10920","strings":["j!,c","xxZ9","]\"+~9","=eh+","]5cMj"]}},{"timestamp":"2026-08-29T02:53:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-WI(Sm8aQ9QwK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d574928536d3861513951774b","method":"","user_agent":"","ja3":"","session":"48ed1b1c-03c6-4cde-a973-b9d014741760","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3ba3511ba0244204","strings":["BitTorrent protocol","<-UW1609-WI(Sm8aQ9QwK"]}},{"timestamp":"2026-08-29T02:50:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"~�/��q-\u0010U�\u001d�̐M�E�u�>�ÃF\u001a��i�\u0014NC��S����n8�;���0�*���Y�;��D\u0019�s��a%�I�3Ը�A��b)���n\u001d���\u0006AE<$@�\u0005e�=rm�O��\u0018�\\C��yH�7���nx�\u0016,My\u0013\u001a�\u0010Ӯ���\u0002M(�~��:h|�������v����ܘh\u0003���\u001c�S�\u001e�\u000f���|�\u0003!X[^ˋ\u0007�6%ud9���\f߅;0�[�\fiC.���S��}��䌣O�����/�cZpEͤ�\u0002G\u001eu��%��͇2@�\u0018\u0004�A�wYG��]s��[F�)�M�s���\u0010\u0012\u001b�\u001c�����s�7\u001d\u0003���K���N+}X2��L���\u0017)��\u00064J#���}��~[œ�ξ��B��9��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"27b59234-7417-4aee-a1c0-a832eee90e3c","seq":1,"duration_ms":101,"bytes_in":331,"bytes_out":15,"enriched":{"digest":"8cdc57a6e407af9f","strings":["AE<$@","!X[^","6%ud9","cZpE","N+}X2"]}},{"timestamp":"2026-08-29T02:46:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-SM.A_bb5~XGj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d534d2e415f6262357e58476a","method":"","user_agent":"","ja3":"","session":"cc91a3d4-fd29-43f2-a464-4cefd766b6a7","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"706f18a4a4b93436","strings":["BitTorrent protocol","<-UW1609-SM.A_bb5~XGj"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T09:48:23.302201+00:00"}