{"ip":"200.219.59.33","total_events":63,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["63 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 12,607 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,607 bytes sent","bytes_sent":12607,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T23:33:15","last_seen":"2026-09-01T03:49:17","events_24h":0,"events_7d":63,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Praia Grande","lat":-24.0027,"lon":-46.4893,"asn":270817,"org":"Gigante Net Group Inf Ltda"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as270817","label":"Gigante Net Group Inf","category":"enterprise","url":"https://www.peeringdb.com/asn/270817"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":63}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":12},{"date":"2026-09-01","count":51}],"recent_events":[{"timestamp":"2026-09-01T03:49:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�pF���Ȃƒ����\u001a�t鷨\\ҥb��\u0004=�kO�T�׮\\���.�\u001bK��˭ϐaԩL�\u0014��\\�\fv���R��(\r\u001f��~���P��.���F1<��uMV�m����^�0r\u0001\u000e !��l�~o#�,�\u0004��\u000f\f�\u001d�2ܶ�\"�.G\u000e�K�\u001c�k�����\u0019� Z��p�M;p��4�f�\u0013��_����8|V\u001f\ts��L�a���������36�A�h\r\u0012\u001e��wz>�\u001d���\u0005�+>�XW\u0019���ۥhuJ�{��,�=yf:�\u0004��k�!�5�O0Z��(��UP��m��e�\\%�`3�/����@�^�B~}\u0000�C՝\n\u0019�QXֈ�ϝ�Y��`:�\\Ƒ�\u0003<֢�\u0018B�?���Z\bҽ�g\u0005\u0003$\u0004��\u0007�-^�a�ń9�^�\u0005\u0006R�\u0018\f�5<�5�\u0018�\u00125��u�ɠ�I\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"00d9330d-adbb-4b38-b889-c3020645de86","seq":1,"duration_ms":100,"bytes_in":368,"bytes_out":13,"enriched":{"digest":"30f82d8b2fb39820","strings":["=yf:"]}},{"timestamp":"2026-09-01T03:43:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�$\u001dkg��b\\�A1s�\u0018^��r�\f\u0005k8�ɼ�\u001ci�^��\u0015FuF���\u0012�^}(6r\u001b�E��(�M\u0018����Y��K�0\f\u0001\\]/v\u0007�;ޞ����N\u001d1rbGT�!X����τ\u0018\u0002�3\u001f�S�2r9'��W�\u001e\u0014��{KPY���)Z\u0013\u001a9�\u000b܎�����D���\u0001��\b�V\u00166�X�!^dz`\"O�\u001d\b3�Ó\u0012H�u4��Uۇ\\C\u000fH�\u001f\u0007\u0019\u0012�\u00032IdSs\u0011\r�x8���W\u0019�C�U�|�[���M/PP�&�8�����\u001f^�Z�W�����C�l�\u0003�i@�R\u0011\u001d*���D�^���,S��\f�\u0017<<��yK#�\u000b�\u0002��!�֞#��}��ҍ`���ã","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"04880f4c-5591-4734-bada-1df4a874e535","seq":1,"duration_ms":101,"bytes_in":380,"bytes_out":13,"enriched":{"digest":"f4c746f262799a06","strings":["^}(6r","\\]/v","1rbGT","2r9'","{KPY","!^dz`\"O","2IdSs","M/PP"]}},{"timestamp":"2026-09-01T03:34:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O������\u000eU.�N\u001a<���Ԋwe0c�O+�w�@�\u0002�S�%�}iQ�y娭B�2�q��'�b����x*}�޺E�M̻x��Ӹ���q�ϚL��\u001d���IF1�j��O�3��\u0016�x���t�x�7��w��~��\u0016�����Tom�b�6j}�qKܷ�\u000b�yt�f⊅��~��\u001e�Z���Ҭ<\u0011!�r�WI�~��\n���\u001d\u0017��fI����>\u001c��.(�\b�).�N��r�\u000b�a�b�r�s�V�ɋ�W���0�i\u0013�j�#y\u0019���#\u001d��=�Q��ղ�O���\u001cz\u0017�ж�T�9��C�p�����\ta7\u0004\b�`7��*j�v�s�4�K�=\u0018m�\b�b_ �>�-��\u000f��Hf�~�3��>?bb�*��V!ȼ���Ca���f\"\u000bb4�\u0011Lݠ\nUB�~v˦\u001cZE�����5�dA\u0014$�����X�c\u0000X��c�\b�=��0=ہ/\u001a)�W�)]\u0000�v\n��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b59d28ac-4f46-4613-b4bf-be4904b8f62f","seq":1,"duration_ms":100,"bytes_in":479,"bytes_out":13,"enriched":{"digest":"f5c748af0f8db3a3","strings":["we0c",">?bb"]}},{"timestamp":"2026-09-01T03:28:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�