{"ip":"191.59.25.150","total_events":293,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["293 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 61,709 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"61,709 bytes sent","bytes_sent":61709,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-28T01:44:28","last_seen":"2026-08-28T09:02:42","events_24h":0,"events_7d":293,"geo":{"country_code":"BR","country_name":"Brazil","region":"Federal District","city":"Brasília","lat":-15.7783,"lon":-47.9319,"asn":4230,"org":"CLARO S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4230","label":"Claro","category":"isp","url":"https://www.peeringdb.com/asn/4230"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":293}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-28","count":293}],"recent_events":[{"timestamp":"2026-08-28T09:02:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-xksNL!I~GA6!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d786b734e4c21497e47413621","method":"","user_agent":"","ja3":"","session":"fe8a501d-9462-4f89-abc8-0c9c967a8089","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5c8ef4d9cb5489c1","strings":["BitTorrent protocol","<-UT8360-xksNL!I~GA6!"]}},{"timestamp":"2026-08-28T09:01:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�3��t}��\b\u0007\u0012����\u0010Ĺ\"�f@�H�^Ƀ�P\u0000���\u0016_;�*,�Q��}�\fQ��\u0007��\u001c����\u0011\n>�\u0010�wkn���� ˶՚�nNmio���\f��~�E��wT��!�;�m\u000b����\u0018z?�\u0019��cM~-��R��Cg/\u001a��+�\u0007�A\u0014�w�NM�� �����JX��c�܄�a\bVS�\u0018\u000b\f%:�z_a�\u0017�;\rwjE����\u0013�\u0016M���l��O�\u0015>�&\u001dľ��[˴�(md���S�������#�\u0010.��\u0010՟2��m1�Mu�\u001dF����\u0015\u0016%:\u0012�E~g0ޱyK�\u0000�\u001e\"�\u0016@Îm���r,\u0010p�\u001b\u001c+2}�\u0015�j$�\u0001j\u0005C�l1\nF=�W��\u0002ò����<�v��A&<�\u0000�%����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ca3d1239-98ae-4557-8d99-170e6c205f3e","seq":1,"duration_ms":100,"bytes_in":330,"bytes_out":13,"enriched":{"digest":"c9a3eec50c6e3f29","strings":["nNmio","cM~-","E~g0"]}},{"timestamp":"2026-08-28T08:59:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-Stv*XRj0Moj_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d5374762a58526a304d6f6a5f","method":"","user_agent":"","ja3":"","session":"7bf8b57e-081d-4974-a9cd-35594f2fc9a5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"684f4bf3210a92a6","strings":["BitTorrent protocol","<-UT8360-Stv*XRj0Moj_"]}},{"timestamp":"2026-08-28T08:58:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"4I��~���,���h\nd��t��\t�H]���v}=s[��:|�\u0010,-�\ty\u0005��W,�DŽʛb\u001boj���݀�%���!�O�FE/�oA���e\u0013U\u0005pvP�#SX�W]zH�ݯ�f�9��g��\u0003\u0003\u0017��<�Y�\u0006��]��AD\\��v�Tm\u0005.D'\b\\����Qt����z�l�>;\\�\u0017�qpeN�\"\u00051#���\u0015Hg\u0002��(�V�-�u\u0011j\u0015\u0019��\u0007cP�%��e��G�i��梧��","payload_hex":"3449bdbf7e8891cf2c929abf680a647fe4d374ebfa09de485d8991a7767d3d735bf5e73a7cef102c2deb097905fdc8572caec784ca9b621b6f6a81c8e2dd80cd25bff285217f994f8f46452fa36f419eecde651355057076509e235358af575d7a48cbddafa866bd39cff1678db2030317f3c03ce9599806eccc5df1f041445cb1db76ee546d052e4427085cad82d2f85174fd8e8ebd7af36cac3e3b5c9e17a27170654e8122053123b39f9115486702b7e028e1568a2dd975116a1519c4f2076350b525b5cd65abe547f56986c1e6a2a7e9fc","method":"","user_agent":"","ja3":"","session":"72d5db40-2cec-413b-999c-2b15bfb46f55","seq":1,"duration_ms":100,"bytes_in":211,"bytes_out":13,"enriched":{"digest":"c3915c99eb7ccbc5","strings":["v}=s[","W]zH","qpeN"]}},{"timestamp":"2026-08-28T08:57:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-h-r1UqR-vIlt","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d682d72315571522d76496c74","method":"","user_agent":"","ja3":"","session":"85c6007b-9ff3-481f-8e6e-376110cfe9d7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b7b2346f28b7accd","strings":["BitTorrent protocol","<-UT8360-h-r1UqR-vIlt"]}},{"timestamp":"2026-08-28T08:55:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"[\u000b\u0014]�Tb��܋��U���(�\u0002�u(��S��D�=���pp� ]��N��\u0016S�H�e$�ú�*�q_��K\u001f\t���lڵ��\u0015��\u001e�^/&!\u0014!�٦'(�A��\u0017l\u001ck.Z\u0013\f�HY��qF/p!\u001a��\n\f�y\u0014b\u000fHl�>��#>�%�j?AVjR�\u001c�=N[�Um9�T��V�\n\u001a�\u00178�c����\\��}\n\u0010]\u001f��#�F�\u001a��,","payload_hex":"5b0b145da6546281b6dc8bfb9f55fcb3c1287f8502c77528d5f953b28d44f53dd6eed47070d9205db7b04e96d416539f48eb65249ac3baa32af8715f90d47f4b1f09f7ecaf6cdab58f9715fbd21eea5e2f26211421e7d9a627288941e1e4176c1c6b2e5a130c8b4859ffd371462f70211ab4910a0ce97914620f486cde3ea2b6233e82259b6a3f7f41566a7f52a21c993d4e5ba1556d39ba54e48b569c0a1af81738d86386b1ad945ccdd77d0a105d1fbab423de46c91aa6dd2c","method":"","user_agent":"","ja3":"","session":"4b9aa3be-c52e-4d5c-8e2c-3d3db6ae0cf9","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":13,"enriched":{"digest":"5a7b5c8d183a0371","strings":["qF/p!"]}},{"timestamp":"2026-08-28T08:54:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-Q1_vbKsY7UfM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d51315f76624b73593755664d","method":"","user_agent":"","ja3":"","session":"0175b4d9-4200-4d04-a33e-9f7457868a4f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b8c2911c3f693d2e","strings":["BitTorrent protocol","<-UT8360-Q1_vbKsY7UfM"]}},{"timestamp":"2026-08-28T08:53:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�s�[ND�\u00166�\u0006�#R��㼷\u0007���y\u0003\u0004f�a��yߎ瓗�9e�.�\u001d-�ĠkCNk�g�\u0016���\u0005���R+gD ��f�\u0018|","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a55eac3b-93e4-498d-9fc1-838b099f5635","seq":1,"duration_ms":100,"bytes_in":566,"bytes_out":13,"enriched":{"digest":"7a09e95fb780b97d","strings":[".\t�[��X\u0015?����\u001f+�E\u000b�|iW\u001ci�w�'�\u0016�P�\b+�]�\u0006JKy��\r�%Lj�[''��ʅ9�\u0001�o���t����;��3X$F�`���8چ.�1%E�����>4�kwC�HZ\fW�\u000bf�q.����~�?/�s�M��舎9��mH\u0019,\u0015�Y\u001e�\u0012��\u001e�/�\f�I������I�T\u0015\u001cdk5�t �7�f���N`B�\r�y��\u0013����1�5��M�*\tKH�\\�(\u0002&i�~�\r��C�-'��uE<����\u0013�ۍ�\u001ctD�\ra�m�\r�k-�1��-^�j�\u0002.�T\u000e��A2�ޅ|{�3�]��.���\u0000�lr��\r����\u001fN�o��\u0012��\u001f\u001b��\b\u0014������a��}\u001e��^I�\n���{����\u001f\u000bv7\u0013-�g��sp����\u001f\u0002���e�&������\u000e��\u0011�vy8IJ>d�!#rFzm\u0002��33","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0db8a1ae-a679-4b06-9221-27e5b62cadcf","seq":1,"duration_ms":100,"bytes_in":398,"bytes_out":13,"enriched":{"digest":"d67582b7c361a4fb","strings":["3X$F","vy8IJ>d","!#rFzm"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:29:55.542009+00:00"}