{"ip":"191.177.175.136","total_events":212,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["212 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 14,416 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"14,416 bytes sent","bytes_sent":14416,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-02T23:11:47","last_seen":"2026-10-05T01:01:40","events_24h":8,"events_7d":212,"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Curitiba","lat":-25.4202,"lon":-49.2762,"asn":28573,"org":"Claro NXT Telecomunicacoes Ltda"},"source_domain":"bfb1af88.virtua.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28573","label":"Claro S.A. (NET)","category":"isp","url":"https://www.peeringdb.com/asn/28573"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":212}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-02","count":18},{"date":"2026-10-03","count":118},{"date":"2026-10-04","count":68},{"date":"2026-10-05","count":8}],"recent_events":[{"timestamp":"2026-10-05T01:01:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�����%�����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb991a2e3b52582e49efae6","method":"","user_agent":"","ja3":"","session":"1dcfd64e-3d55-46df-864c-479abcaf76dd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"199a5c25ce265687","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:54:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\b5����P�w_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb908358cc1faaf50af775f","method":"","user_agent":"","ja3":"","session":"662420a8-7488-41d0-918f-e13136df98a9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ea534c9c22da12fd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:50:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�8}\u0011�m5�F�=","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9387d11c36d35c746973d","method":"","user_agent":"","ja3":"","session":"6cf59873-b8c8-4e99-906d-e36275e04e19","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1db55fd42f4de82d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:47:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�����d���\u000b�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9abe0e2f564dec5f80bc8","method":"","user_agent":"","ja3":"","session":"864f174c-8ed9-4372-89a7-19c871120e24","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"66df9ad49a47f2bf","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:44:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�0�~N��\u000fK�w","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb930b97e4eb18e0f4ba577","method":"","user_agent":"","ja3":"","session":"0df0bef7-de49-4ce2-bb14-feb907933d00","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"05e1d2df40e6a2ed","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:42:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�_x\u001dAi��-k\u0012","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb95f781d4169bbb72d6b12","method":"","user_agent":"","ja3":"","session":"7a985f04-7cfc-4198-a70d-6e4606bcb7af","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"74c2e9781fd4b11b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:40:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��k6��\u0005\u001d�\u000e�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9cd6b36dcc2051dc90eb3","method":"","user_agent":"","ja3":"","session":"1b080a18-b00d-420f-91c2-8421de0d878a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"673b2865b40fb2c9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T00:38:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�4��h��d���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb934cfd06885a764cdec9d","method":"","user_agent":"","ja3":"","session":"d6167010-f123-451c-b7f2-ff60b4348ad1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b4ddb68e050ae9b4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-04T18:14:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���:s��s���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9b2803a73bbdf7387dec2","method":"","user_agent":"","ja3":"","session":"c6564bc1-88fc-4081-997e-55e8b2209486","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"393199910727814f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-04T18:08:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\u001b��3\u0004��]>\u0011","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb91bf1d3330499935d3e11","method":"","user_agent":"","ja3":"","session":"cd25b514-214c-4a99-8603-104e58883220","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b00a6c9a020fa6d3","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T22:22:58.397083+00:00"}