{"ip":"201.47.25.83","total_events":185,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["185 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 12,580 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,580 bytes sent","bytes_sent":12580,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-27T03:09:25","last_seen":"2026-08-31T05:20:18","events_24h":0,"events_7d":0,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.5475,"lon":-46.6361,"asn":18881,"org":"TELEFONICA BRASIL S.A"},"source_domain":"201.47.25.83.dynamic.adsl.gvt.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":185}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-27","count":4},{"date":"2026-08-28","count":50},{"date":"2026-08-29","count":62},{"date":"2026-08-30","count":44},{"date":"2026-08-31","count":25}],"recent_events":[{"timestamp":"2026-08-31T05:20:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����#l[�J;�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f8b8ea236c5bb74a3bfb","method":"","user_agent":"","ja3":"","session":"166fe13b-1c11-496d-bfd5-9b0eccbf1b38","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a5183845445374f4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:13:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��s�\b�>f���\b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b873ce08e33e6699a9bb08","method":"","user_agent":"","ja3":"","session":"9985be2e-8ec6-4c3d-a44b-42ea1252f978","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f750c2d7856860ec","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:08:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�������h��U�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e5c6dff7bd68d3e855bd","method":"","user_agent":"","ja3":"","session":"81433248-1a03-4197-b5e5-4269d652a122","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"40a2675ea2a3e951","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:06:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��0�]ȵn���\u0019","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b830d65dc8b56e8b87bb19","method":"","user_agent":"","ja3":"","session":"82ab9eef-d846-4380-990f-ac98801964c7","seq":1,"duration_ms":103,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"99c5ab0a49ac60a0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:03:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��y \u001d\\�\\����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b879201d5cd85cbfeadae4","method":"","user_agent":"","ja3":"","session":"8170602b-2fbf-4d13-8432-6839dc5ec5ad","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"9175c63552893a3e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:01:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����+\u001bЃn��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8beb0da2b1bd0836ebceb","method":"","user_agent":"","ja3":"","session":"c77fbabc-f059-4e9a-8340-fe3d043c3e65","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f12f064ccb9a193d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T05:00:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Y%��.\u000b�\u0011��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85925a9992e0bd61181e9","method":"","user_agent":"","ja3":"","session":"edc68829-108c-468b-a622-e50dafc062ae","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0aa527f95c89c163","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T04:58:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��U����˷e,�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b855afa8e58ecbb7652cfa","method":"","user_agent":"","ja3":"","session":"fbcfc4c4-d2e2-41ac-b28e-d31ed9c8cd96","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"58512f204a485bf3","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T02:49:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��3�4FV/K�2v","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b833b83446562f4bca3276","method":"","user_agent":"","ja3":"","session":"a4607d7b-65d2-466d-9972-667198a5af54","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"7afefecb44bf822b","strings":["BitTorrent protocol","<-UT360W-","4FV/K"]}},{"timestamp":"2026-08-31T02:42:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��L^�t\u0011kQ�\r\u001d","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84c5ede74116b51840d1d","method":"","user_agent":"","ja3":"","session":"1ce7d992-28cd-41b1-bb31-73797ad0ae5e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"83b86b349a90f913","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T09:47:53.962700+00:00"}