{"ip":"200.219.59.27","total_events":634,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"634 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["634 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"133,614 bytes sent","bytes_sent":133614,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T16:37:54","last_seen":"2026-09-02T05:13:33","events_24h":0,"events_7d":634,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Praia Grande","lat":-24.0027,"lon":-46.4893,"asn":270817,"org":"Gigante Net Group Inf Ltda"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as270817","label":"Gigante Net Group Inf","category":"enterprise","url":"https://www.peeringdb.com/asn/270817"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":634}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":370},{"date":"2026-09-02","count":264}],"recent_events":[{"timestamp":"2026-09-02T05:13:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"]��*��1������{O~Z?�2�\tߺ�]y�s\t[�cB?1\u0003|�T��a\u0017�4C���૚�\u0016@t���T����w��W�c\r��Q)�/��m$�\t��Ԗf�;q�s2��t�[N\u000bY","payload_hex":"5de58b2a9bc131dbef8efae9bf7b4f7e5a3fc932ad09dfba9e5d79a573095bb563423f31037c81548cdb6117ad3443bcadb7e0ab9a8b164074c0c6c854b1f7baea77b4b25781630debaa5129ad2fb5a66d7f24f309b7a5d49666f63b71997332fbf574ef5b4e0b59","method":"","user_agent":"","ja3":"","session":"c74e47e9-25f5-40aa-b3f8-e171c771ec47","seq":1,"duration_ms":101,"bytes_in":104,"bytes_out":13,"enriched":{"digest":"588203a93d1a32ce","strings":["{O~Z?","cB?1"]}},{"timestamp":"2026-09-02T05:12:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6PukIIAb-6Y8n_wZNN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443650756b494941622d3659386e5f775a4e4e","method":"","user_agent":"","ja3":"","session":"42216a0d-17d2-41ae-814c-b1bdf362ac34","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"28eccee86cbaa2c0","strings":["BitTorrent protocol","<FD6PukIIAb-6Y8n_wZNN"]}},{"timestamp":"2026-09-02T05:11:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"!��f\u001b�/��o����Β�j����s�4`\u0005>G#��\u000el�\u001f�,fDv7\u0012�9'�,g\u001f��Ǧ:U�J\u001f�x�-}Th'�\b`�=�dj�����¼�y\f]\u000fؼ���t�P\u001ff��F�}\u0000V�\u0001�����uث&M���\u001c\u001f���o\u0000\u0010ӌ��\u0019\u0011ۦ�8$D8I��+0�ȯ^c�\u001e�.3�q}�33�\u0016�P؎n.ts\u0001��?IxN6G��ߢ�;��&�������\u00001�G\u0018���\u001b�Nj�+�h��g%��\u0018C\r��\u0000 ��A�m�9�\u0005��#\\Nc�gI��\n��d�\u001b���'��\u0019-֠f&\u0002X\u0015\r*��\u0004\t�L�g���^�+�~����l뼘z��E\f��C�\u000f@\u0014\u0003m��\"�\f�a�\u0000\u00114�j*G�cC�\u0006\u0015ܭ@�Iv\n�^�X��qڋ����v��U\f�\u001b�\u001e��L��j\u0015�\u0011��q}�\f턜e��AJ����\u001c뷍Y�u�\u0012������Z�\u0011%}�8���\u0019�P�\u0002�`��� ���\t�z\f3˗\bf��%���@-|jƒ�М�\bd��̙\u0006Ae%T\u001b��:�\r�c\fƯ\u0011��>b��M(e��\nS��*����I*\b�xH\u0017�+��\u000f�\u001e�s\u001f�ɔ'�\u0002�vt{i$Iz��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cffee9dd-987b-49dd-8d53-e549a908722d","seq":1,"duration_ms":100,"bytes_in":527,"bytes_out":13,"enriched":{"digest":"9bcef6d190769193","strings":[",fDv7","-}Th'","8$D8I","n.ts","?IxN6G","#\\Nc","@-|j","Ae%T","vt{i$Iz"],"iocs":{"domains":["n.ts"]}}},{"timestamp":"2026-09-02T05:09:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6k0VwcXK(~OB5lb7!r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366b30567763584b287e4f42356c62372172","method":"","user_agent":"","ja3":"","session":"878cdc03-3fbd-4951-856b-87f77e074ce0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9f647965bdb9df0c","strings":["BitTorrent protocol","<FD6k0VwcXK(~OB5lb7!r"]}},{"timestamp":"2026-09-02T05:08:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u001eгhE�\u0001\u000b;3\u0017\u0017p-Q�Z�V��c=����<����B��.��ɰh�eZ\u0005ޞ�7\u0019S'�K\u0000\u000e||\u0007b��O�%��S\u000e��Ż\u001f��)�\u0003�ᄹzFN�x/��rx�I��vm\u000f;�&���K�\u000f-\u0001k\u001e�灅z�\u0001\u0018������#Hm�G\u000f\u0019F�\u001aJ\b9��\u0001�'\u0002���%\u001a\u001f�8z\u000f��f�ͮy��%<Ρ���\u0002�02���/������`�y\u0004�&�#x���RG��D���>\u001e���a������F�RY̫��ѡ|D\u0007\u001dD@�� 5�p�\"�-��M\u0018�f\u0014��n�1\u001c�N\u0006S�+\u0010�ᬼT2�\u0017��&��z�('���,4��ê�\u0018�� �?��W�s ��w�4NoӐ�!\n�e�c�d�N��\u0014˔E/2\n���\u0010\u000f��8M�z���t����_��|�wPCv���C\u001a\f>i�`J��\u001c�h�!\bC\u0016y J\u0016A;�k\u000f\u0006���A��Ne�&�\u000b�n\u0000��]�W,hB�f�\u001bO���o����\u0018��\u0010n3\fJA��3@\f@uG�8{;ʚ�\u0000.K���;�7��o\u001bJ��\u0006:�2���4�b��FVZ����\u0005��S�:ss","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"04b8f4bc-850a-4e4b-982c-ad30c2694c21","seq":1,"duration_ms":100,"bytes_in":499,"bytes_out":13,"enriched":{"digest":"cc039bc6e3ccc258","strings":["wPCv","W,hB"]}},{"timestamp":"2026-09-02T05:07:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6kBzO28kSBUX-D-C*R","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366b427a4f32386b534255582d442d432a52","method":"","user_agent":"","ja3":"","session":"4e170419-fb98-4572-8d1a-edd12b4bcc7b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"64c833e14e1d349d","strings":["BitTorrent protocol","<FD6kBzO28kSBUX-D-C*R"]}},{"timestamp":"2026-09-02T05:06:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r��^��]�\u001f�\u0017JUMB���޺$\u0002\u000fL�(ߟ���\u0018�/ �j�q����\u0001����\u001dS��\t؛�\u001f%������?����d���Y�֙�~>rނ�\u0006�@,ձ:\b���j\u001a\u0000���Y��hy�X\u000b\u0004\"���LqV\u0019��\b�&�X\u0012\u000f�\u0019r�ب���#?�ic��ƕ�p<�J��)�ͥ�H�\u001ao�ZM�\b,9���\u0006��\u001f�h�U��;\u0004{���\u0004��8��\u0000}\u0006z�>�S\\X׈��Ӹxd\u001a�D����筊�\"-�CtvK\u0014�GPۖ\u001d�_�U����oQ�R���*d�~`�*\u0011��\u0007��#��\u0019�q\u0001'\u001d�X�\u0004�RG��\u000e9����\u001f�%\u0012���k�V%\u0010\u000b�=apt|","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"caccfdd1-41bf-4b35-a6f9-83de3f8c5eeb","seq":1,"duration_ms":101,"bytes_in":308,"bytes_out":13,"enriched":{"digest":"a86fb0d36e950f34","strings":["JUMB","CtvK","=apt|"]}},{"timestamp":"2026-09-02T05:05:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6oQ6~IbB2~Dbhu8CTv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366f51367e496242327e4462687538435476","method":"","user_agent":"","ja3":"","session":"22b2d844-0057-4031-beda-2a1dd23caf7c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ab36c98a90ec6ac4","strings":["BitTorrent protocol","<FD6oQ6~IbB2~Dbhu8CTv"]}},{"timestamp":"2026-09-02T05:03:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ې�\u001cۻ\t����h/�SԪ�\u0013\u000e�H�YRr��%�[���(�XNHA�\u0011��H?\u0015V{�!\u001c�\u001f�C\"�y�W\\�\u001e�>��9DC�˜\t�\u0010^�'9�'r-\u001erD\u001d9��\u0004d����÷\u0017I�V��\u000f���4�\u000e�˺dٵ����5���5`�VL�\b����\u0000Mg>�gNy]�\u0001�\u0013��S\u000euI$�.���^�@p�\u0007\u000e\u0001\u001a\u0016�Z�\u001a�f?�\u0000\u0010,�53�\u0010-Sy������LV����\u001aCfw�t\r��q�[NQ�s�G\t`\b^y�HG\u000fKwE(�\u0000�%;�/ ��!�#�-���?Fl�ٶ\u0005S+���N���>K���6��\f�����\u000f����s\u0018\u0016ARw���C�4�&0�3�3�@Qw�s�Ȑ\u0002�.$��<�4\u000e�\t\u0001����$\u0005\bЬ���&�����6�����]�����\u0004���%�D\u0012B\u001b��\u001b\u00000B֠|?޴e��J:9�2����K-�Ht3�<l4�t��(L\u0005�\u0017׉4�t�����\u00119_2x\u0010��\u0013\u0003��-��{K\u0011�q�\u0003\u0012����-_)�3\u0018<\u0011�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"544acbc8-6d29-465a-9161-115a27859902","seq":1,"duration_ms":100,"bytes_in":460,"bytes_out":13,"enriched":{"digest":"888ae02358db9362","strings":["XNHA","gNy]","KwE(","9_2x"]}},{"timestamp":"2026-09-02T05:02:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6C27!z3uQfy4jjue)E","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436433237217a3375516679346a6a75652945","method":"","user_agent":"","ja3":"","session":"0a71dc21-eeb0-4b30-a741-cb935d5e7050","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"61081e376bc151d6","strings":["BitTorrent protocol","<FD6C27!z3uQfy4jjue)E"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T20:59:15.897378+00:00"}