{"ip":"200.96.52.179","total_events":703,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"703 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["703 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"47,804 bytes sent","bytes_sent":47804,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T00:17:08","last_seen":"2026-08-27T02:16:06","events_24h":0,"events_7d":93,"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Curitiba","lat":-25.4202,"lon":-49.2762,"asn":8167,"org":"V tal"},"source_domain":"200-96-52-179.user3p.v-tal.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as8167","label":"Vtal 8167","category":"isp","url":"https://www.peeringdb.com/asn/8167"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":703}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":18},{"date":"2026-08-13","count":24},{"date":"2026-08-14","count":20},{"date":"2026-08-17","count":177},{"date":"2026-08-18","count":278},{"date":"2026-08-19","count":32},{"date":"2026-08-20","count":47},{"date":"2026-08-21","count":14},{"date":"2026-08-25","count":38},{"date":"2026-08-26","count":8},{"date":"2026-08-27","count":47}],"recent_events":[{"timestamp":"2026-08-27T02:16:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Y��p\n3�\u0002%�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b859e08b700a33b5022588","method":"","user_agent":"","ja3":"","session":"a072dbeb-1827-46cf-a1be-0471e210b0c9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8b347f44eb218897","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:09:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���~���\u000e��p�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e37eece8d00ef8dd70d1","method":"","user_agent":"","ja3":"","session":"96ede19f-ea82-4115-bcd1-8a8def55abac","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"81b7bc41fca08b08","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:04:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��k�\t�\u001d|\r�\u001d�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b86bf709a41d7c0de41d8b","method":"","user_agent":"","ja3":"","session":"f27e0aa2-2bd0-43e5-944a-350a8d8c056d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f1b8dc790653ce9b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:01:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u000e6���`)#\r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8900e36909d806029230d","method":"","user_agent":"","ja3":"","session":"86bd968e-b1ab-492a-a228-5232697b5541","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1d570fa175f97d73","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T01:59:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��y�T\u001dsx\u0003p9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87984541d73787f037039","method":"","user_agent":"","ja3":"","session":"968158f7-fd42-4d8b-9438-a8ffef8ef8fc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5fc048c98e53b0b6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T01:57:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001c\bM\u0001\u0001�M�5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b31c084d0101a34d9235","method":"","user_agent":"","ja3":"","session":"eefb2482-22f5-4ad0-9b77-e183e5b81e6d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a44f7bcd19b6f90d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T01:55:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��.,v^�eJآF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82e2c765ec4654ad8a246","method":"","user_agent":"","ja3":"","session":"d611d5d0-8c9c-41b2-aa85-e161b4c44cd9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"55dce3a2a19fd55c","strings":["BitTorrent protocol","<-UT360W-",".,v^"]}},{"timestamp":"2026-08-27T01:54:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��/,�#\u0015�҄�C","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82f2cda2315f9d2848c43","method":"","user_agent":"","ja3":"","session":"20f42e9a-d264-4a8e-930e-da8c9d89561e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"21d446fa3d9f8020","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T01:53:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��;�\u0001���ӄx�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83bab01f496e8d38478e9","method":"","user_agent":"","ja3":"","session":"fdd517b7-291d-43e4-a38d-847861fb8fff","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1c3b66d6b5e723c5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T01:50:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��w\u0010f\u0014-���\r�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8771066142da3b0fe0db3","method":"","user_agent":"","ja3":"","session":"128a768d-411d-4a71-b6b1-35eb0571a248","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1cb47247da53a57f","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:22.274001+00:00"}