{"ip":"216.234.211.44","total_events":105,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["105 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 22,156 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"22,156 bytes sent","bytes_sent":22156,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-19T19:45:20","last_seen":"2026-08-19T23:05:05","events_24h":28,"events_7d":105,"geo":{"country_code":"MZ","country_name":"Mozambique","region":"Cidade de Maputo","city":"Maputo","lat":-25.9655,"lon":32.5832,"asn":14593,"org":"Space Exploration Technologies Corporation"},"source_domain":"customer.jhngzaf1.isp.starlink.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14593","label":"SpaceX Starlink","category":"isp","url":"https://www.peeringdb.com/asn/14593"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":105}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-19","count":105}],"recent_events":[{"timestamp":"2026-08-19T23:05:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-bYKigG4aK4k5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d62594b69674734614b346b35","method":"","user_agent":"","ja3":"","session":"9c95a799-5710-4821-a3c5-838a9807f2cf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"febc9efdc41621e4","strings":["BitTorrent protocol","<-UW1605-bYKigG4aK4k5"]}},{"timestamp":"2026-08-19T22:57:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\"�\u0018����a�B\u0013�\u001c\"��\n.8��&\u0014\u001c\u0015\u0014f�7\u001a<�~{��e�v��\u0019cLۙ&:����up��B?w�\u001eƒ��q׳\r��}�C��#����tŋ�v�\u0005_����*�p\u001a\u0018l5�\u001a����*vl1\u000f(�l�\r��7������{�:i�k1G��G�u���LJ��l����}$\u0016g��q��� ���/]�[\u0006�y\u0015�6>u�8�E\u0017?G(�)�\u001dfb+p�\u0007i�O\u000f��Z\u000b!`����,�\t\u0013\u000fת؏�lZ�:���С\u0005��t�\u001e[��L��;r�\u0015","payload_hex":"228218b0fae48661ae4213e21c22e1a10a2e388bbf26141c151466dc371a3cd07e7b8e9f65a17686f019634cdb99263ac8e4e38375709cd6423f77971ec283a68f71d7b30dfb8f7df34396d12398f6c2d074c58bcf76c6055feeeac29d8be72ae1701a186c35d51a99b6a6972a766c310f28c56c870d88983793a88ed4d4eb7bdc3a69946b3147d4ea47ee75fec4ddc787b0926cfde1adc97d241667efa071b5fabe208ecee22f5dcf5b06eb7915aa363e759738bf45173f4728dd29ac1d66622b70f70769834f0fc0d15a0b2160e3ddf1db2c9c09130fd7aad88fdf6c5aa23aee9ce1d0a105a1bc74cd1e5b8ce04ce3df3b72be15","method":"","user_agent":"","ja3":"","session":"1ac6c426-d495-4350-b087-b0bd42a14f99","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":14,"enriched":{"digest":"80d3dbe3e3906efc","strings":["*vl1","fb+p"]}},{"timestamp":"2026-08-19T22:48:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-moH4SXQucPKT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6d6f48345358517563504b54","method":"","user_agent":"","ja3":"","session":"6d6716f7-bcaa-4470-99ae-abb8f9f1c424","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8676f7c67d6ea92f","strings":["BitTorrent protocol","<-UW1605-moH4SXQucPKT"]}},{"timestamp":"2026-08-19T22:45:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"v�<j\u0004\u0006.\nkܝ\u0005�K��\n��Y\u00058���\u0010��7n\u0012��\f��ǩ�\u0012�)k\u0012t���\r\tӵ�\u0011ޗO+\u0013��h<�ݳ���0$���d�8;\u001aW��t+7p�b�3�D���\u001a\u0005��spR.q\r���J<�r��������,�\u0005��u��p�'�C9�J\u0016jJ�Hb�\b�*���D\u0015a��h>��t�����M�ڢ\u000e��~\u0011&��?�\u000f����cy�\u0010�<�g�6�\u001a�&\u0017]�\b8�\u001b\u0017VY�x�yv�p�_�\u0011\u0017zZmx$����{\tX�cY&��x����=\u0014�L(B�\u0019GGێr�Y������h�\t+�ĕ�8�;���\u0018)����y�\u001e��\u00034�Dt/\u0016F\u001a�jI+\u0019\u001a�������C�@щ�<:4l�ST�\u0015^��T��U��$H����\u0004F����z\u001e\u000fy�ꒊ���$Pg\u0002w破\u0007\rxʆ�Ka�\u001c\u001e�\r1h�ǧ����D���r\u00110�m���$:�\n�氰\u000b���6��\bS�nl�{�%�Y�\\��^2��=\u0003g���2�e.V�l_p��y\u001848j�U��A;a��*��$#z�\u0015 H�F�","payload_hex":"76a33c6a04062e0a6bdc9d05c34b898e0aadae5905389b81bf1097e6376e12c0af0caaaac7a98012a9296b1274c5e4b40d09d3b5a111de974f2b13b5b6683cbdddb3e3f3ee3024b1fa8664c7383b1a57cafb742b37709162a733c444b2deff1a05bda27370522e710d9bc6f14a3ce072fe98c1aef9feb3c12cb805e9aa75c9c0709b27d94339c74a166a4a864862b0089c2aa292a8441561acc2683e82ea749db7e884c04dd3daa20eb8d47e1126c4ef3f8e0f84e9dccf6379ba10f13ce267af36e81a9726175db70838981b175659cb78a57976e370a45ff911177a5a6d7824b28eb5937b0958ea635926f3c1788cd8eed63d14914c2842c0194747db8e72ad5992c8d8f7b19d68b5092bb5c495aa38a23ba6c7f71829add1fb8079cf1e9fee0334ca44742f16461ad86a492b191afe9fb3c5e6d6eb43e440d1899d3c3a346c965354a1155eb4c854cac85594fb24488cc4d2d60446b19cb8b27a1e0f7980ea928aa9e0fb2450670277e7a0b4070d78ca86eb4b61ad1c1eea0d3168f1c7a7aaf1a6e9448aa49c721130a06daed2df243afd0a9ce6b0b00b868bdb36e0c70853f66e6ced7b8c25dd59815cf6805e3288993d036796b99c32a5652e56a46c5f70bfb3791834387f6aee55e7fb413b61ced52ad1fe24237afe152048b7469b","method":"","user_agent":"","ja3":"","session":"24cf0380-055c-46d7-b5cb-9ec073688ae3","seq":1,"duration_ms":100,"bytes_in":478,"bytes_out":14,"enriched":{"digest":"6db27092def9de67","strings":["t+7p","spR.q","zZmx$","<:4l"]}},{"timestamp":"2026-08-19T22:41:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-hz6bW1je0Nku","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d687a366257316a65304e6b75","method":"","user_agent":"","ja3":"","session":"9a242e56-1b19-4afb-94d7-60bcb341954f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"690fb063bec95463","strings":["BitTorrent protocol","<-UW1605-hz6bW1je0Nku"]}},{"timestamp":"2026-08-19T22:37:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�He/�`\u001d��낕�\n���m}���?�ef-�\fg:���a�70P�F!�\u0001G+d3�M�Dۂ��\"�\u000b ���\u0016R\b(�i�e�\"AX��QM�ꦼ�Y\u0015\u000f���ٓ�9�\u0002);뵭*#��t�\u0013ҏKY-'(��5����\u001e\u0014u&�SZ\u0013\u0004\u0016�4e̠�\u0007\u0007�t�^'�.\f��.��F�s�;\u0018H'}x�11�U�\u0003�-�]���~C�N\u001c�\u0014å��6�<j���&����yk\u0001\t\b�\u0014��lňy�ϊ�W:\u001aס�GT�6�&\u0013y�d8\u0017\u0005�v[�E�\u0011R��)\u0019uz��+�����p\u0019Kg�!H�����G\u0016{�m���\u00001/�QYQ��\u0010���\\>\u000e����j�\u0017\u0005I6.f��]4ڿ�Ըu���WE�Fw��rHށ�Ӥ\u0018�J`� �+\u0014�T�~y��������g��\u001bU\u0016�\u0007\u000b��\u0017|�yG�ye!)w�@W��qZC�\u0018��\u0011�Z;Ҟd���_\u0004�Z� �5��z=�iGM\u0018-�\u0006y���\u001c��\b�ʔ�ǠMz}����H�.%�L�","payload_hex":"9048652f8d601db49feb8295800a81aaec6d7d96aca23fb165662da20c673a88d4e961de3730509746218601472b6433df4dcb44db82b18622ea0b2084b5e716520828e769dc65e122415891e1514d8eeaa6bcc359150f8a8f9dd993ba39c902293bebb5ad2a23bc97749a13d28f4b592d7f272895d03598e9ede61e147526d1535a130416833465cca0af0707fb74d95e27fa2e0cd9d22ec19746b573ba3b1848277d78d63131ed559d038c2dc75d97b1867e43e04e1cf414c3a59ede36cb3c6afbb4ce26f7c1dde4796b010908e614f8cd6cc58879aacf8aca7f573a1ad7a1a74754e736fd261379ba64381705c8765bf04594115280872919757a8ad62b9a9d83bd8c70194b67b72148b5b583cee847167bf56df3919300312fa3515951e08e10b98bf35c3e0e85c4ddf86a8e170549362e668bf45d34dabf86d4b875f09e925745d84677ecbe7248de819fd3a418cf4a60e420af2b14d954c27e79b9a284a28690fd8f6786f61b5516b2070b8f81177c817947ec7965212977f540579dfb715a43d418a29511ea5a3bd29e649187995f04925ab9209a35e7fd7a3dfb69474d182dfd067995feae1cb6df0880ca94a3c7a04d7a7db6b5e4fd48f12e25a34ca4","method":"","user_agent":"","ja3":"","session":"c9fdac69-fe78-4463-8cd5-48238d7ef4b4","seq":1,"duration_ms":100,"bytes_in":449,"bytes_out":14,"enriched":{"digest":"6490c401bdb7617a","strings":["G+d3","H'}x","I6.f","ye!)w"]}},{"timestamp":"2026-08-19T22:26:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-z!FfV__8BqGq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7a214666565f5f3842714771","method":"","user_agent":"","ja3":"","session":"64cb2748-136b-43d4-a135-160e5eeacf17","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"29e71471e1d9d531","strings":["BitTorrent protocol","<-UW1605-z!FfV__8BqGq"]}},{"timestamp":"2026-08-19T22:17:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�<_ ��_r!SSo*�=\u001e+�`Ѳ�\u000b��\u001f�_�a�h\u0015�\u0014z~;��\u001c���\ts�aR�$ř�K������>q�щ58+�ϩn��Pn�,��V�L�S�1�ҍ\u001bs��Ќ^\u0018��w��|m��\b�чy���)(\u0013w�K�_��O��EX7\r!c��Z.3�qV��\u000f�\u0018w�+й�r��\u001f'��9\u0013G�6\u0006JJٶ�������dq�١�a�\u0004�h/u�@�|���K�\u001aR7��C \bu/۷�\u0007\\�}����Ca���M�+��\u001b�\u0017u9���\u001b�[��@\u0018Z�� \n��h�����!��\u000f���f���\u001d�U�/���N�#�y+g*��c&�4�8pN]-4�\u0012\u001d��t%��I��;�c�qm�Q\u001b�\u0002�D�\u0005-�1���³ɨ���\u0003χt��\u001d]K2\u001b� ]\u0014}�kM����uڣ��\u001f���@\b\f%L�Q�\b�X^�\f�+�\u001b�.Ri_yI��w�gI�\"gh\u0019\u0006�a�c���$?���š�s:aѮ\u0010�m��~��n�q�,���\u0013�I���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fad8f923-0026-47ff-bce9-b4339438e9f5","seq":1,"duration_ms":100,"bytes_in":452,"bytes_out":14,"enriched":{"digest":"86a135e134bdaeb3","strings":["_r!SSo*","y+g*","8pN]-4",".Ri_yI"]}},{"timestamp":"2026-08-19T22:09:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-HgLt6d0~qvF_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d48674c743664307e7176465f","method":"","user_agent":"","ja3":"","session":"cc42469f-3123-4ef2-b290-2009397af222","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"45d1121d1d8a7ac0","strings":["BitTorrent protocol","<-UW1605-HgLt6d0~qvF_"]}},{"timestamp":"2026-08-19T22:03:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��F\u001b\u0015H����v@!�r���c��X$\u0005x�)�\t\u0016�����v\u0012\u001d�$\u001c.�\u0017���^��\u0017�*���\u0016��u\u001c�V�L~�!�j���/�c�r\u001f⼨\u000bZ%�\u0011S�����oYtP��l\u0007K�gU��\u001b4B����OX�U\u001e(�M\u000f\u00179��\u0001\u0016�6�\r<�\u0003��LS�S�-?�:w\u0004\u0016 �\u0014��4���;�\u0002\u0013)T�g&�[Բ����^��]�ye%����Ϙ\u001a\r�w��k5��s����Yǽ���\u0001o�1\u00054D��t_�ㄲ�Y@M\u0013�ѻ<������R���","payload_hex":"83a5461b1548eddbcfd2764021d3729989be63f1b758240578d229dd0916aec5fdb4d376121de6241c2eb817f58ef15ee19f17aa2aa3a49c16f1f3751cc156874c7e9921c76affb3ae2f936399721fe2bca80b5a25f5115387bad5f8926f59745086da6c074b8a6755d9ef1b3442f1c0bac54f5888551e289f4d0f1739abe70116a3369b0d3cc6039aaf4c53da53b52d3ff33a77041620f51485c134f0a3f43ba902132954c36726ee5bd4b2eee39fe15e81fc5d80796525d5c3c0f4cf981a0de97798806b35ba8173e6f3f98059c7bdace4fb016fc631053444aff9745fd4e384b2b359404d13d2d1bb3cbeebfd85f2815289e1fa","method":"","user_agent":"","ja3":"","session":"499a383e-1ddd-4dc0-8999-76977ba0194e","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":14,"enriched":{"digest":"b67de98b2d61f652","strings":["oYtP"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:22:36.653220+00:00"}