{"ip":"191.5.32.34","total_events":32,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["32 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 7,205 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,205 bytes sent","bytes_sent":7205,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T01:28:37","last_seen":"2026-09-04T02:08:31","events_24h":32,"events_7d":32,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Brumadinho","lat":-20.1414,"lon":-44.199,"asn":28198,"org":"SEMPRE TELECOMUNICACOES LTDA"},"source_domain":"191-5-32-34.sempre.tec.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28198","label":"Brasil TecPar (Sempre)","category":"isp","url":"https://www.peeringdb.com/asn/28198"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":32}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":32}],"recent_events":[{"timestamp":"2026-09-04T02:08:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��pJ��˫�Z;@��\r�ᶊ�E���}\u001c\u0013�G\u0004���\u001e��j����j\u001e���]9u��nE����`���\u001d:��\u0017,x��nc$~2��R~�B!��0�v 0�~g\u0010���\tզ9\t�����pG[�ݾaa�S��C\\����<\u001c�&��xD#;Z\u001d��Zr\u0019�\u0001y(��\u0006���_��W��m�5���M�X����9<:\u0015��\u0017�9XL\u0003ٽ�������\u001d�s\u0002cA$\u000f{��*i�C�\bkN��\u0006���fa�ˑ�\u0001�ً{F���\u0007 ���\u0003\u0016ٵ⠅�;A","payload_hex":"b2a2704aa6e6cbab865a3b40a2970d81e1b68ab84584948d7d1c13d24704f8a1821e3c466660a96ca868e66366f83eaeea6ab296e5bf6a1e8a97fb5d397591de6e45f891adbc60bd96d21d3a83dd172c78a9ba6e63247e32ffe0527eff4221b0a9309d762030d67e6710a4c4c809d5a63909ab87b6fbe070475b7fe3ddbe61619553e698435c94e8f6a03c1c8826d5f57844233b5a1daffa5a7219dc0179288bc106cedfc65f94e857f48a6db335abe2f94dc258aba88df0393c3a15a3a8178639584c03d9bd83e8b4cde3f3a21dde73026341240f7bccf22a69f843a7086b4eafcd06ea9ee16661a1cb91c601acd98b7b46bcbca20720f7fcdf0316d9b5e2a085d23b41","method":"","user_agent":"","ja3":"","session":"f6851ab3-7af3-48a7-af0c-a4cbf542e2a3","seq":1,"duration_ms":100,"bytes_in":260,"bytes_out":11,"enriched":{"digest":"f83e9f40e25db1cf","strings":["�A}֢�C�]\u0007��S�.��H\u0017Iь~ˮy��\u0006I\u0018���M���\u0002��xɓ���\u0007Ӳ��P�:M\u001b�Lǚ�\u0010��������E�0��;tw�{�f�\u001f�\u0004�6\u0000�\u0006ڍ�\u000f�'n���\u001b�n��WL��T���z�\u0007O�Hm\u001d�m+��Ig�J`睘8C��c��_��kNאz�\bG�m\u0011�0��\u0000.�\u001bU.,\u000b�/�\u001cU��Ey�j=ڤ�fP w��nW��G7\t�0�\b��!\u00014<\u000e\u000b����x�\u0014���:ј\u000b\u001d'�>D�9�+#\fь�9KV�C��%���\u0010}\bA�\u001aeu�1/\u0015y\u0012�\u000fm�O�4�9\u0015�JE�\u0001Tr�w7�*(\u000fΜ^\u0012@w�q4iK\f�0;��\u001f��2<��E�\u0017\b�q���\u0000���\b\u0014�,4\u000f�� ����۫P#��[��\u001c��0U\u0015�L�\u0016&T��\t�r`��: �h�\u0019�|�J�7m=7��#:��r�|n(\u0018~\u0014F��8�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e30ef276-3c3b-4ef3-828b-8f3eff70bf72","seq":1,"duration_ms":100,"bytes_in":580,"bytes_out":11,"enriched":{"digest":"e96960b0ea98de29","strings":["A\"$h}K","oS{~","3'Nt","QQh>tw","fP w","q4iK","7m=7"]}},{"timestamp":"2026-09-04T02:01:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-T5lfNUdJ3E0.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d54356c664e55644a3345302e","method":"","user_agent":"","ja3":"","session":"eb5a1df2-c756-411a-91fc-729f9cee1510","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"d0702f0189d8f4a9","strings":["BitTorrent protocol","<-UT8360-T5lfNUdJ3E0."]}},{"timestamp":"2026-09-04T02:00:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�x\u00012�O�/U^�C�v��?$��\\&��\u0011�\u0011/�0�\nO�l���>��\"�3n\u000f'��\u0006(�g)m\u001c���\u0013D�\u001d\u0016��rx\u0015KLW�%���/6�Cb�&$|����\u0005A�?�E��}D·����- +I[\n'��Ax\r�^Ŗ�\b�6^X�\u001b�p�T*����A\"��\u000e\u0015�MI�E�g����}�8A�\u001c\u0011���X�s�2��2��Sh��?58&\u001d\u001e\\-\u000b\u0012'�}:o�4���mF�\"\u000b�\u001d��/jI!�o�j��C�uD��\u0019��.�\t�|E�!n��\u0005�H��Pw��qFQ�?=ѭ�\u0019n��0\u0003#-u\u0001a��d#","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"25ae08e3-0e00-4cbf-9c59-047d606ef644","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":11,"enriched":{"digest":"2188320dfcc962f3","strings":["- +I[","?58&","/jI!"]}},{"timestamp":"2026-09-04T01:58:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-!j9zsZfyABSr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d216a397a735a667941425372","method":"","user_agent":"","ja3":"","session":"efac22d7-0a5a-4f4c-abb2-0425d2b323a1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"8e6969b005a4edd6","strings":["BitTorrent protocol","<-UT8360-!j9zsZfyABSr"]}},{"timestamp":"2026-09-04T01:57:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0018�\u001e3W�A+�%�b�n�O�\u001f�m����O5XVɾ����Y�c�NO\f߳�\u0004�z\u0007J�U�2N���O�\r��%��t���\\�xY��tZ (3�6�I�谪3`YOR\b�\n��)l~[[��[���\u0015��\u0004�,�y33[\u0018w,�12\u0018��c\u0013�K���\"�����K�\u0013.\u001d\u0005ۛ�����R��\fv�W\u0011%\u001b�f>�Bh\u0013�3���dڱ�\\\u001b\u0006��A0\b\u0016Z�#��?LH;Q��>\n�\u001b\b�~���bd}Q��Rc�=Y�\u000bǖV��J����\u0018�_��cWv�o?\u001a��$ި\"�\u001e�F��� >Q�t{���]�\u001a�k��\u0018�aA(�LYD������l�4����\u0010�Kl�d�\u0015�V{Ä\"ܗ3��K11#�;\u0002\bN�ƴ�\u0010��\u000es��!}�D�\u001eB\u001at\u001d�\b.h�*\u0006Y\u0007�4�$�k�\u0000�آ\u0004��{\b\u000e{�'@a�l\u0000��R���?i\b̌�wkbȅۙ�n�~g\u0016������H\t�1V\u0003j��$脅�x��C��+���Ïw�]�O�e\u001a����:�ۿ���\u00040?�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d74cfb43-cbaa-47db-85f3-28044eb59bd4","seq":1,"duration_ms":100,"bytes_in":468,"bytes_out":11,"enriched":{"digest":"c6b0b0ac7ad6a576","strings":["O5XV","tZ (3","3`YOR",")l~[[","y33[","?LH;Q","bd}Q","K11#"]}},{"timestamp":"2026-09-04T01:56:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-Qsll~kPrvur-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d51736c6c7e6b50727675722d","method":"","user_agent":"","ja3":"","session":"49ce4912-2944-4e67-852e-eefe8302a751","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"30acc332e029cf5a","strings":["BitTorrent protocol","<-UT8360-Qsll~kPrvur-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T20:59:06.412075+00:00"}