{"ip":"200.219.59.38","total_events":21,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["21 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,704 bytes sent","bytes_sent":3704,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T17:14:48","last_seen":"2026-09-04T17:38:39","events_24h":21,"events_7d":21,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Praia Grande","lat":-24.0027,"lon":-46.4893,"asn":270817,"org":"Gigante Net Group Inf Ltda"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as270817","label":"Gigante Net Group Inf","category":"enterprise","url":"https://www.peeringdb.com/asn/270817"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":21}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":21}],"recent_events":[{"timestamp":"2026-09-04T17:38:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��5���*tk�M�j\u0000c˒o�\t**�S\u001dD3q/����K̃󋬟������2�j6����Y�q|#[�<zY�<\u001a�-���\u0001H��-'���<�ފ���BRW��w����q�n�\u0010 ���]Y)cw8�V�Z��3\t<","payload_hex":"9caa35a7a6942a746be64db56a0063cb926fa8092a2a95531d4433712fbefee0d84bcc83f38bac9ffcc1fd8897f032d36a36f49ea6f059d1717c235bf83c7a59e43c1adf2dc4e79f0148b0ef2d27909ecf3c91de8aff7fe19e425257cedc77fc8f9bad719a6ee51020f6a6da5d5929637738f9568d5ac0fd33093c","method":"","user_agent":"","ja3":"","session":"b4c5b0fa-0343-42f4-adae-ddb53601824f","seq":1,"duration_ms":100,"bytes_in":123,"bytes_out":13,"enriched":{"digest":"854dedbfed740e5c","strings":["D3q/","q|#[","]Y)cw8"]}},{"timestamp":"2026-09-04T17:37:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6bN.umW-uc1mh7Jso1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436624e2e756d572d7563316d68374a736f31","method":"","user_agent":"","ja3":"","session":"cf7c9e64-9320-449b-9668-bcdc3c203280","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ae171d1e32c7052c","strings":["BitTorrent protocol","<FD6bN.umW-uc1mh7Jso1"],"iocs":{"domains":["fd6bn.umw"]}}},{"timestamp":"2026-09-04T17:36:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�|8\u001d�v���x��\"d��P\u0003ʝz�O��b_/��h\f\"��nk��\u0016.\u0001�.CX\u0019Y�o��l9\u0004����>��ԙ�#\u001c��=�\u0002/��@�@\u001bN�-��?�\u0016���[o�\u001d��\u001d��C\u0005���e&\\��","payload_hex":"dc7c381de07695f09b78eacd2264f7b55003ca9d7ade4fb1a8625f2f8c80680c2297f56e6bacc4162e01f62e43581959a96ff7eb6c390488bee0bc3ef2b0d4999e231ceda93df8022fee8140c3401b4ec12db0e43fb816f1e3d15b6f921dc2cc1dbf8d4305e9e8f365265c83f3","method":"","user_agent":"","ja3":"","session":"02c916d5-d19e-4911-900a-d769154c538e","seq":1,"duration_ms":101,"bytes_in":109,"bytes_out":13},{"timestamp":"2026-09-04T17:35:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6k).~RMsam)gDl7DyL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366b292e7e524d73616d2967446c3744794c","method":"","user_agent":"","ja3":"","session":"83cd92ab-9978-4668-b9a4-6632dcea8888","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7556add8f6f91ee9","strings":["BitTorrent protocol","<FD6k).~RMsam)gDl7DyL"]}},{"timestamp":"2026-09-04T17:33:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"t,��a�y\u000f\txy�O9���M�����v��F���w� \u0013Ӱ2naZ�:Z��F3�p�Tc\u0007*��g��\u0001�!;�F���\u0017�k�u\u0012A�\u0016.Auy\u0011�i�\u0012a\u001c�_�q\u0007�\u0011\u0002�0\u0005*S�B~8Z�1��P�ڼp�@��;���W\u0004��\u0010��`\u0014��V\u001a.%�V��d�q\u0002q�q\u00171�G(��>̘��;�\u0010���S�V�\b�+F�m�������\u00076���먻�����Ĭ�\u0018#_b�k��_\u001e[�;��w�c��J\u000bÍ�#��������h\u0002�~�2���yVu喉\u0002>�۶�\u001f!��\u0013��_�ZF���0���Ɂ�M�.�����b��%N`��B+ƙ��\u0010�\"&?�Rё$�\u0019�\u0014�{�\u001c�\u0001�\u000f;_�]j��z��\n�\u00152����e��xrm�{���E���\f��7)�<�;<�P\u0014��M\u0000���)yr9�_�A���80z�g�f�\u0012\u001c.�\nPH}^�:֮��W}J�\u001f\u0012��\u0002��r�\u0003�����ȝ\u001e�]]_�!u|�G;����$S�Fo�;>��0\u0006A�5>F\rI\">���B���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"98e2ed19-111d-429a-af0f-65775ec6085b","seq":1,"duration_ms":100,"bytes_in":472,"bytes_out":13,"enriched":{"digest":"0edef37637aff300","strings":["2naZ",".Auy","B~8Z",")yr9","PH}^"]}},{"timestamp":"2026-09-04T17:32:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6!qm5IHCa5Y6Ct3Vsn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443621716d354948436135593643743356736e","method":"","user_agent":"","ja3":"","session":"4094bedd-f3dd-4ec7-bddd-8d50f8f5e568","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"53829685be0eaef1","strings":["BitTorrent protocol","<FD6!qm5IHCa5Y6Ct3Vsn"]}},{"timestamp":"2026-09-04T17:31:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":",�T\u0002zQ�U�\f�\u000b2��;\u0002�}?�:ղ�=m�\nY�\u0011��v��D)Ӭ�,pF}N�g���|u�������y��\u0013w�N/��mH�~���A>��\u0013xa\u0010�J�sl�JC�ͅ9H�\f���\u001f��\u0013xw\th�Z&$;�-V�.z��m��\u0007���FO�ZS�ʸvg\u0016˜7y��aّo\u0011\b�*bM\u001e","payload_hex":"2cb654027a51c6559c0c9c0b329aa13b02cc7d3fb83ad5b2f03d6d800a59bf11a3877689924429d3ac892c70467d4e9967b4b7f17c75ffa98b90a9c9e07989b3137f77b94e2fecb16d48e57ec8dadc413ee9cd137861109e4aad736cf04a43ebcd853948d00cbca9c21ff7e01378770968905a26243bbd2d569f2e7aa09c6d98e907bdf485464f855a53e4cab8766716cb9c3779b0aa61d9916f1108ba2a624d1e","method":"","user_agent":"","ja3":"","session":"9ab6b161-2e1f-42f9-9205-0b43fa5dad2f","seq":1,"duration_ms":100,"bytes_in":161,"bytes_out":13,"enriched":{"digest":"596bdaaaa2dff087","strings":[",pF}N","Z&$;"]}},{"timestamp":"2026-09-04T17:30:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6nrzMfgSBt-(8fer8s","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366e727a4d66675342742d28386665723873","method":"","user_agent":"","ja3":"","session":"46ebf510-72ab-442d-ab0b-7c79a59f0d14","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"00484ea0fc3a2c30","strings":["BitTorrent protocol","<FD6nrzMfgSBt-(8fer8s"]}},{"timestamp":"2026-09-04T17:29:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"8\u0011�\u0012�H�^�\u001a\u0019�ƭ-ۅA�/�N$A� \u001d���,\u0004cf_5}�uhKC~~O���z��$������Ɔ�i\f>Q\\|}�̢\u0012E��u,T|����(\u001b43�v�\"��n�2W�ҰZn1�S�0�d\u001bSWK�{��\u0001����ō�h�J�\u0003\u0005�\f\"�ӑR��oǫPVa��w���\u0017 �\u0010\u0003\u001d!Yl�\u0015O�\"�?ɰ�\u0015rZ'��?�\u001d\u0013�p�\u0000X!�KK&�\u0011�\u00140�r>\fX\u0014� \u0010 ���,�\u0003y�\u0011��Z��������a�K���;P�3K^\u001aRGs��\u0004\u001aGx6��l�DC\u001aS�_�7���ʵ;�\u0017�\rC�:kTX��rͮ��md��(T�Q?�V�p\u0010~!���(��P\u0003\\�|������\\�\u001b������u\u0016:VQ}�����\bgso�8=�~m�7�a�\u0003Ǔ�>�dY*�b(\n4.���g{�\r|j��qQ�\u001d~���H\u0012_��P��T�(��S��i\u0017sh6R��yX�W$h��gm\u001c�)�|5","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ab2b566b-8961-4ec6-a060-2bbff45dfd26","seq":1,"duration_ms":100,"bytes_in":429,"bytes_out":13,"enriched":{"digest":"26efeb93c815d7de","strings":["cf_5}","uhKC~~O",">Q\\|}","u,T|",":kTX",":VQ}","sh6R"]}},{"timestamp":"2026-09-04T17:28:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6*PfJf(apE8RzrnXZV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644362a50664a662861704538527a726e585a56","method":"","user_agent":"","ja3":"","session":"4fc1f374-fa1d-437c-a4b6-3c40077be39d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"595fb5e29d152a84","strings":["BitTorrent protocol","<FD6*PfJf(apE8RzrnXZV"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T20:59:16.157747+00:00"}