{"ip":"189.72.46.37","observed":true,"total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"466 bytes sent","bytes_sent":466,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T22:24:42","last_seen":"2026-10-14T22:36:14","events_24h":0,"events_7d":2,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio Grande do Sul","city":"Porto Alegre","lat":-30.0273,"lon":-51.2353,"asn":8167,"org":"V tal"},"source_domain":"189-72-46-37.user3p.v-tal.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as8167","label":"Vtal 8167","category":"isp","url":"https://www.peeringdb.com/asn/8167"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-14","count":2}],"recent_events":[{"timestamp":"2026-10-14T22:36:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"<��E�sf;�@âRӎ�- {\u001a4\u0001�~Ѣ`մ�ir�'�w�k\u0012!���(\u0011H�c�CV x�ֆ\u000f\bH�E�t\u001b�+�&�����Z������<\n\bw�\u0019e�]���\u000f�ᾏt/�\u0005\u001e\u001b\u000e�1\u0011啭�\tQݻ��~!(���\u001a���$��\u000f8\u0014Y�,Rd\n�\u000b�7'\u0013�\u0018�5,N��lDN~��fGE<���\u0001�Ė��'�\u0000�\u000e[\u000f\u001d/�0�%9i+�t�g��ʋ~�geh��V�˸�l(\u001e���+����6��=\\^���G��\u0001j6�{nn�۷RK�F��ޓ50܌�����A\u000e��Բ�95\u0016g�B������o\bP@c�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"200dd40e-778b-41e0-a4a0-be30e49f9fd8","seq":1,"duration_ms":100,"bytes_in":284,"bytes_out":12,"enriched":{"digest":"87ce69621fb6f627","strings":["CV x","lDN~","fGE<","%9i+"]}},{"timestamp":"2026-10-14T22:24:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�^nI�BL�4|�'|\\�G+�z�u�>{���~�9xݐ:�d�\b�DVX��B\u0000^Z�-%��A�_'\u001c\u0004\u0005�\u0010�͙\u0017I2�\u000be(�rh\u0000���1䛔�l��1n��\u001a�#P���ˤ�F�L_.?r\u0012\u0003�L<��\u0006���>��Q��\u0004�p۞p�\u001eC\f(��bE��ϳq�G|�\u0010%�#\b�e�h�]*���yi~m�L_�\u000e\u0019�-�����","payload_hex":"da5e6e49a7424cb8347ccd277c5cc8472baf7aca75a23e7be4e2f47ee23978dd903ab264fc08d9445658a5df42005e5ae52d25f6f941e05f271c0405f010f57fcd99174932fc0b6528ff726800e4fb8331e49b94f96ce5a0316ea8cf1aa12350e7d6ebcba4cc46ee4c5f2e3f721203c44c3cb69206f29dec3e80ba51e8f804c070db9e70ff1e430c2890816245b0dbcfb37197477c9f1025f92308ab65a168895d2ac6fec079697e6db94c5ff30e19ad2d9096a5beb3","method":"","user_agent":"","ja3":"","session":"8adffb47-dfa4-476a-b686-77ace1b4e850","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":12,"enriched":{"digest":"21ee10bd59672618","strings":["L_.?r","yi~m"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T06:11:35.782675+00:00"}