{"ip":"187.19.159.116","total_events":944,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"944 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["944 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"154,952 bytes sent","bytes_sent":154952,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-25T17:19:10","last_seen":"2026-09-11T00:50:42","events_24h":67,"events_7d":217,"geo":{"country_code":"BR","country_name":"Brazil","region":"Alagoas","city":"Maceió","lat":-9.575,"lon":-35.6908,"asn":28126,"org":"BRISANET SERVICOS DE TELECOMUNICACOES S.A"},"source_domain":"187-19-159-116-temp-internal.static.brisanet.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28126","label":"Brisanet Servicos de Telecomunicacoes","category":"isp","url":"https://www.peeringdb.com/asn/28126"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":944}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-25","count":47},{"date":"2026-08-26","count":22},{"date":"2026-08-27","count":154},{"date":"2026-08-28","count":102},{"date":"2026-08-29","count":28},{"date":"2026-08-30","count":83},{"date":"2026-08-31","count":62},{"date":"2026-09-01","count":74},{"date":"2026-09-02","count":49},{"date":"2026-09-03","count":68},{"date":"2026-09-04","count":42},{"date":"2026-09-05","count":78},{"date":"2026-09-06","count":24},{"date":"2026-09-07","count":22},{"date":"2026-09-08","count":22},{"date":"2026-09-10","count":65},{"date":"2026-09-11","count":2}],"recent_events":[{"timestamp":"2026-09-11T00:50:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@(��ԸϢu��X�\u001d��@��s3�gg��B\tBv#\u001eb��e^���R�\f����\fc8i�4��5?Lo\\@\u0010$�\u00133>\n'�\u0014��Y�@\r��m�44�e�7�T�u��A��\u0015�!�\u001a�۠�\u0007���o\u000b�Rt��\nz��lU���m�\f$e\u001a��\u001an�$\u0019\u000b�2\u0004N�̆��3\u0007\u0013F","payload_hex":"4028e7aed4b8cfa275bfd1589c1de1b54095bb7333d16767d1d742094276231e62b7c6655e97e7d852850ca8a0b0970c633869ca34b7e6353f4c6f5c401024bf13333e0a27d014d1fa59f4400da6fd6dbc3434f865ad37de54d575d7c14185fb15e221f61adddba09d079587d56f0bbf5274ea9f0a7ab6d26c55f6a1f66def0c24651a8ba71a6e9624190bf932044eddcc868ef333071346","method":"","user_agent":"","ja3":"","session":"169e1cf7-ae5f-4281-b641-d273a2095d8f","seq":2,"duration_ms":264,"bytes_in":265,"bytes_out":28,"enriched":{"digest":"c3a91f1f398f5f7d","strings":["5?Lo\\@"]}},{"timestamp":"2026-09-11T00:50:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0010�;yڻ\b_n\u0002/\t�\u0012�qO���\u0004�\u001fe����8�\u0000����\u001b�N\u0017%g\u0014��o{R3�Lc�[?�*�\u0001!�8���/t�.��8˃7ƥ��Pj\u0006�\n��6����>d\u0013���\u001b{��4�X�{9�/�C���","payload_hex":"10f33b79dabb085f6e022f09a712ac714ff19ffd04cf1f6599fea8fe38e000c9fdc7d31bf24e17256714ecc96f7b5233dd4c63ea5b3ff92ad50121ac38b298c62f74d02ee5ce38cb8337c6a58dbc506a06d60afeb336ebfac6f43e64139299c41b7b9de634a858fd7b39c02fef4398cfc0","method":"","user_agent":"","ja3":"","session":"169e1cf7-ae5f-4281-b641-d273a2095d8f","seq":1,"duration_ms":101,"bytes_in":113,"bytes_out":14,"enriched":{"digest":"b94f943b08bf64a4","strings":["o{R3"]}},{"timestamp":"2026-09-10T20:36:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@��}ͥl�a��)��ong�\u0015DĤ`�B\u001f0N�K%j�A�(T��j\u0006�A9�~�Y\u0017N�\u0013Iр\\��\u0011v\r��^1Z��0#��d\"\u000b\u0015�f)\u001b�ojӑ\u0005�1��ؠ��l���H��K�MKr\nWϹ@�\u0006�\u0013+��\u001d�J���Zj)0ԋK|\n���1�\u0018:�O)��x�u����%�\u001c��rĿ��l\"V=,5\r�8'�\u0005=","payload_hex":"4093f67dcda56c9961b1d429c1ec6f6e67ed1544c4a460fc421f304e8c4b256aff41dc2854c4c16a06a34139977ee559174e8f1349d1805c8cd211760d9f9d5e315aa6a73023b0c064220b15a566291bb96f6ad39105cf31efa2d8a0fcc66caf909448b1914bcc4d4b720a57cfb9409c0698132be2f41dc44ab5eec75a6a2930d48b4b7c0a939ab031d0183ae74f299cc5788275d1f1888025ed1c8bab72c4bf8dec6c22563d2c350df33827ee053d","method":"","user_agent":"","ja3":"","session":"bccc2b4a-07c7-4bce-8bf5-e4a5534ff09a","seq":2,"duration_ms":219,"bytes_in":271,"bytes_out":28,"enriched":{"digest":"7387c50f43a06f7e","strings":["Zj)0","l\"V=,5"]}},{"timestamp":"2026-09-10T20:36:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�fM~�@��H�\\b�6E\u000b�C�ݟ]����/.*\u001d�w�\u001c��\u001eG\t���/O^x���3���j��^�\u001fŸ�\u0015l�t�\u0003e^p5\u0004\u000f�0\u0014g���x�e��P��\u0001�yʹ>p","payload_hex":"fb664d7e8f40dafe48c65c62a036450b8d43c5dd9f5da0f6dff12f2e2a1dd377d21cc4d31e4709c7ecb42f4f5e78cbeda433f48a846af5c95e911fc5b886156c8874c003655e7035040fd7301467b8e19f78e665829350b0aa01bb79cdb43e70","method":"","user_agent":"","ja3":"","session":"bccc2b4a-07c7-4bce-8bf5-e4a5534ff09a","seq":1,"duration_ms":100,"bytes_in":96,"bytes_out":14,"enriched":{"digest":"32f27a657a73ad0e","strings":["/O^x","e^p5"]}},{"timestamp":"2026-09-10T20:35:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�_.��\u0016d\u001a�k�w\u0016E�q��\u0001%�\u0000v\u000e�\n�ڒ��e\u000eq�=\u0017��Xa�\u001c���{�1Ԧ �>Դ�8�\u001f�\u001e�5�ւc\u0001|\u000f+\\�u\u0003�\u001d\u0007�q5N:ӵl憎e���~\"*�ctΥʃ̦q��������Z��\u0006t��;\")�~g�/0X�\u001b�*3��A5\u0001�rφ7\u0013�b\u0019>���\u0010�\fR,'c?M\u0011�P�t=�U��[H","payload_hex":"b27f5f2e869d16641aa26bb07716459171a0ec0125c800760ef00ac4da92d7d7650e71c63d17aeaf5861ef1cf0bdfa7b8e31d4a620863ed4b4e638ec1fa11e8e35dcd68263017c0f2b5cdb7503f71d07de71354e3ad3b56cefa8bf65e09bad7e222af56374cea5ca83cca671eec6cbd7f38eafd45a89e70674acbd3b22298e7e678f2f3058cd1b852a33f8dc413501cc72cf863713a462193eb3e28710b70c522c27633f4d11cd50a4743dfa55a6d15b48","method":"","user_agent":"","ja3":"","session":"c3a739e2-6469-4900-93b7-a3207b9ceb32","seq":2,"duration_ms":219,"bytes_in":277,"bytes_out":28,"enriched":{"digest":"4d470cf9672aaef5","strings":["q5N:","R,'c?M"]}},{"timestamp":"2026-09-10T20:35:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��.\r���K�_����Ź�䬲\u0006�\u0012�y���_����L��yI�\u0003�\u001a�9�~�\r\u0015M�3�����F�\u001a|�>�%\f�W�\nV�~�a��V�\u000fX��f�'�e\u00134�\u001e\u0010�\n�\u0018�`\u001f","payload_hex":"86832e0d878ab94bad5fcde6d3d9c5b9e1e4acb2069712847997a9d05fa6b6beae4c8c977949ea039b1a8239e97ef90d154dbc3386a5beb08f46db1a7cc13ec7250cb7578f0a56e47efc61bad556970f58b2d966912792651334bc1e10e20abd18d7601f","method":"","user_agent":"","ja3":"","session":"c3a739e2-6469-4900-93b7-a3207b9ceb32","seq":1,"duration_ms":100,"bytes_in":100,"bytes_out":14},{"timestamp":"2026-09-10T20:34:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"I?���Ic�Ά�C�F6�t��\u0006\u0013|��\u0000L","payload_hex":"493fadd3c47f4963b8ce86c643af4636977485c406137cf5f4004c","method":"","user_agent":"","ja3":"","session":"942846ae-f482-4fe5-9b31-8d4d90ac9515","seq":2,"duration_ms":221,"bytes_in":112,"bytes_out":28},{"timestamp":"2026-09-10T20:34:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"}R�!,��f\u001dy%���J3B��K��\u0000�\u001dT\u0018t��\u0002\u001f�S}eP6\u0007�\u0002h:�}Q�]�P\b\u0013��l1\u001e�����ȟ0�\nO��Z\u001b��!��%ev�D\u0003�","payload_hex":"7d52f0212c89b8661d79258adcee4a3342b6d64bcdc600e61d541874ffc4021f8e537d65503607ab02683af67d51985df1500813fed06c311ed9f0d0d5ccc89f7f309d0a4ff0d05a1bf6ec218d9a256576f44403d0","method":"","user_agent":"","ja3":"","session":"942846ae-f482-4fe5-9b31-8d4d90ac9515","seq":1,"duration_ms":101,"bytes_in":85,"bytes_out":14,"enriched":{"digest":"4173ad3c9e033051","strings":["S}eP6"]}},{"timestamp":"2026-09-10T20:32:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���]�6.�\u00029��C7\u0000e\\��\u000f>�\r��Ή���ƟW��","payload_hex":"c9e3ff5dd1362ea90239dad1433700655cb1c20f3eae0da7a4ce89aae2e1c69f5781d27f","method":"","user_agent":"","ja3":"","session":"1fcb0983-afa0-4cff-9c5c-16b5a2cfae1d","seq":2,"duration_ms":219,"bytes_in":130,"bytes_out":28,"enriched":{"digest":"7b8f31bae1a85741","strings":["C7e\\"]}},{"timestamp":"2026-09-10T20:32:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"}B��L�p�\u0016\u0005��L�R����-\u001c\u001fݑ��� \r\u0011\u001d/���\u001d����z!\u0000Z~�\f�gp;1\u0012����Mo��I�<Y�k����\u0014Ȅ�EU��P\u001d)��\u0000,�Bm�QX\u0015\u0002","payload_hex":"7d4298d24cb570c31605cff84c8652a4f38a832d1c1fdd91a6e3b3200d111d2fe68df61d8fbcbad07a21005a7ec30c9567703b311298ba9e824d6fe9f949df3c59ea6bb0eaf29d14c884934555d1de501d298cb1002cfe426d9d51581502","method":"","user_agent":"","ja3":"","session":"1fcb0983-afa0-4cff-9c5c-16b5a2cfae1d","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":14,"enriched":{"digest":"bb6e96689a539acc","strings":["gp;1","z!Z~"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:42.420461+00:00"}