{"ip":"177.185.21.37","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"396 bytes sent","bytes_sent":396,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T16:55:05","last_seen":"2026-09-01T16:57:16","events_24h":0,"events_7d":2,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Lavras","lat":-21.267,"lon":-45.0436,"asn":28198,"org":"SEMPRE TELECOMUNICACOES LTDA"},"source_domain":"177-185-21-37.sempre.tec.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28198","label":"Brasil TecPar (Sempre)","category":"isp","url":"https://www.peeringdb.com/asn/28198"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":2}],"recent_events":[{"timestamp":"2026-09-01T16:57:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-OUPM*f*ec_4g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4f55504d2a662a65635f3467","method":"","user_agent":"","ja3":"","session":"eddabe14-f43c-4d8a-92d4-b75811262125","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"97cb2d31e1de945c","strings":["BitTorrent protocol","<-UW1609-OUPM*f*ec_4g"]}},{"timestamp":"2026-09-01T16:55:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"vO\u001e��_\u0012jB�)_\u001f���i\u0005\u0007�������0�_���\u0013W��ˢB�a\u0012W�z��5F��ܝ�\u0012�P2W�\n�Vy�b���u2f���+?�.\u000eUfM��O\u000e�4�L\u001a\u0015�܇?\u001e�2�p�\t�Ár!_�s8�kӼ��j�\u001da/�\u0012\u001bE\n�\t��\u00161���\u0015�����)�\u000e����,�\u001eE{\u0012bJ���\t��\u0007و��A���\u0000���N�z�e0&�aA�y���q�⏤�PG�<.�1�\u0012�\u001e!��\u0017\b�\u000e\u0017B��\u0002�f�\u0006>��~|�8;��`��~A^�)�,\\r̢żcb}ϯ�[\u0013(H�D��\b9e\u001a\f��G\b%6w\n�\u00039��#���D\u0006�g�3}xr+I�\u0005���\f��)�0qHm�b\u0016�\u0006\u0002lb��{z\u0004o","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"68a24368-c711-478c-802e-22ff47961df2","seq":1,"duration_ms":101,"bytes_in":328,"bytes_out":13,"enriched":{"digest":"6e83a276b93e356e","strings":["3}xr+I","0qHm"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T21:00:38.776384+00:00"}