{"ip":"200.163.217.224","total_events":32,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["32 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,024 bytes sent","bytes_sent":1024,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T16:35:22","last_seen":"2026-09-23T19:10:54","events_24h":0,"events_7d":16,"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Curitiba","lat":-25.4202,"lon":-49.2762,"asn":8167,"org":"V tal"},"source_domain":"200-163-217-224.user3p.v-tal.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as8167","label":"Vtal 8167","category":"isp","url":"https://www.peeringdb.com/asn/8167"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":32}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-23","count":32}],"recent_events":[{"timestamp":"2026-09-23T19:10:54","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0017�I�_-0\"=�֏;��o\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000179749fb5f2d30223d8ad68f3be4ec6f040200010000a1aa","method":"","user_agent":"","ja3":"","session":"22fee184-5a00-4917-91f0-9a608ff219fc","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"2b689ad579443baf","strings":["_-0\"="]}},{"timestamp":"2026-09-23T19:10:49","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0017�I�_-0\"{\"%z\u0019\u00143�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000179749fb5f2d30227b22257a191433e9040200010000a1aa","method":"","user_agent":"","ja3":"","session":"d089bded-7638-4e53-a8e2-11d9805b2e32","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"0fe752b9f0f29b43","strings":["_-0\"{\"%z"]}},{"timestamp":"2026-09-23T19:10:44","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0017�I�_-0\"�u�~�ڵF\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000179749fb5f2d3022c175d47eb9dab546040200010000a1aa","method":"","user_agent":"","ja3":"","session":"a0688111-3de6-4a02-b0a0-6d3370642881","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"9928e5e61079e034","strings":["_-0\""]}},{"timestamp":"2026-09-23T19:10:38","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0017�I�_-0\"ģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000179749fb5f2d3022c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"eb20aa55-47bb-4c07-9cb0-dd3fde943aec","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"1068e60b8ad4a044","strings":["_-0\""]}},{"timestamp":"2026-09-23T19:10:33","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�=�֏;��o\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e93d8ad68f3be4ec6f040200010000a1aa","method":"","user_agent":"","ja3":"","session":"513df585-5cfc-435d-ba61-b0a606e8af44","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"532e53056bf3ea78","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T19:10:28","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�{\"%z\u0019\u00143�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e97b22257a191433e9040200010000a1aa","method":"","user_agent":"","ja3":"","session":"9a00db8a-17af-47fe-9d46-6c90fa421476","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"e76437b811bf818b","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T19:10:23","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143��u�~�ڵF\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e9c175d47eb9dab546040200010000a1aa","method":"","user_agent":"","ja3":"","session":"a13da38d-4d00-4ea3-bdb1-655748ad3483","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"21758c6bb21e2fa0","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T19:10:17","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�ģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e9c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"ae551042-457c-4317-957d-ffd3c32f422f","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"3cf9ceac7b067ab3","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T19:10:12","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵF=�֏;��o\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab5463d8ad68f3be4ec6f040200010000a1aa","method":"","user_agent":"","ja3":"","session":"ceade019-950f-4a63-8f39-e48484cb1901","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15},{"timestamp":"2026-09-23T19:10:07","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵF{\"%z\u0019\u00143�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab5467b22257a191433e9040200010000a1aa","method":"","user_agent":"","ja3":"","session":"802a30ae-04e2-41ce-ad75-3ab9dc3834e0","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":15,"enriched":{"digest":"7120e01a8618a11b","strings":["F{\"%z"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T18:47:07.847612+00:00"}