{"ip":"191.177.175.96","total_events":140,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["140 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,520 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,520 bytes sent","bytes_sent":9520,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T19:12:27","last_seen":"2026-09-29T01:45:37","events_24h":0,"events_7d":44,"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Curitiba","lat":-25.4202,"lon":-49.2762,"asn":28573,"org":"Claro NXT Telecomunicacoes Ltda"},"source_domain":"bfb1af60.virtua.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28573","label":"Claro S.A. (NET)","category":"isp","url":"https://www.peeringdb.com/asn/28573"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":140}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":104},{"date":"2026-09-29","count":36}],"recent_events":[{"timestamp":"2026-09-29T01:45:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�6&P��)��\u0000�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9362650f8c42986e800a8","method":"","user_agent":"","ja3":"","session":"f2285ffd-6941-47c9-9b08-1308c0cc46c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c3f5a7957b0e02b6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:38:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���\u0012\u0013j]܉�p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9a29212136a5ddc898770","method":"","user_agent":"","ja3":"","session":"f0a7ae63-b76f-4117-8b2d-9f9939bcead6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f3359fc336151df2","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:34:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���(\u0013�\u0007��\u000bq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9c5da2813c407b8940b71","method":"","user_agent":"","ja3":"","session":"62e7c93f-8ec9-4926-9a4a-31d7dbf671a8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"16ed23b5c07da48b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:31:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���4�!�xe\u0007�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9879634a32186786507a1","method":"","user_agent":"","ja3":"","session":"afb2adf9-4685-4c44-9723-8b3f154f47db","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"15f5d1cd1f6001ba","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:28:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�H_�#�h0i;�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9485fe3238d6830693bf2","method":"","user_agent":"","ja3":"","session":"278a904b-23a7-4d69-9b6c-41c123e97dd7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"967fddaa424e1634","strings":["BitTorrent protocol","<-UT360W-","h0i;"]}},{"timestamp":"2026-09-29T01:26:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��'���i�m��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e22799b3c569a56db8c8","method":"","user_agent":"","ja3":"","session":"2a06f691-4ec2-4638-b152-c58f52d9e43a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"225439995f41956a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:25:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\u0006�D��T���s","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb906db448dab54a1a7cb73","method":"","user_agent":"","ja3":"","session":"e02f149f-df62-4ade-b361-6a59ae3b8485","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"26d7cae3b44a1a68","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:22:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�;Ԇ���/��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9cdbed48689f5f32fbaea","method":"","user_agent":"","ja3":"","session":"3f5ec740-5c35-4474-84fc-653c8c72e94d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1de14ec9835e07d6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:18:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�̊B��\u000b5���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9cc8a4290b10b35f1b38a","method":"","user_agent":"","ja3":"","session":"900b8d4e-6381-428e-8a17-2500584716e7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f4324e3fc68bdcb8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T01:15:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��Ym�\u0016\u0001\u0005E��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e9596dc916010545b5b8","method":"","user_agent":"","ja3":"","session":"4ff66b1b-2618-4079-97a6-e5af59fb58ec","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"52b707f332bb802d","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:10:47.651586+00:00"}