{"ip":"177.212.76.177","total_events":609,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"609 events across 1 port(s)","confidence":"medium","network_type":null,"why":["609 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"123,869 bytes sent","bytes_sent":123869,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-22T00:24:01","last_seen":"2026-08-27T00:29:14","events_24h":0,"events_7d":30,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Belo Horizonte","lat":-19.9029,"lon":-43.9572,"asn":26599,"org":"TELEFONICA BRASIL S.A"},"source_domain":"177-212-76-177.user.vivozap.com.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":609}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-22","count":367},{"date":"2026-08-23","count":212},{"date":"2026-08-24","count":2},{"date":"2026-08-26","count":24},{"date":"2026-08-27","count":4}],"recent_events":[{"timestamp":"2026-08-27T00:29:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3ZAnzc9N5Qlq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d335a416e7a63394e35516c71","method":"","user_agent":"","ja3":"","session":"11c6778c-f02a-424a-a388-ed29ff8f511c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b1bde47aa6f53cef","strings":["BitTorrent protocol","<-UW1605-3ZAnzc9N5Qlq"]}},{"timestamp":"2026-08-27T00:27:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-X(hUl4vJTPra","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d582868556c34764a54507261","method":"","user_agent":"","ja3":"","session":"3b676320-8cf2-4d0e-8f29-3d64588e538d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"210b009c71caaee7","strings":["BitTorrent protocol","<-UW1605-X(hUl4vJTPra"]}},{"timestamp":"2026-08-27T00:27:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"T\u0001�ù��tQ�Sh\f��A��\nn_zV\u0010}w�u�6�lTF`\r2�l�����\u0000�lO)f�pEd2Ⱄ\u0016N\u0013}�\u0011j�R_,���:��ފ\rw�J|��K��ƅ��\"q�\\�Ϳu���\u001d\u0017~�'(�\u0016k�\fܩ\u0015bw��V��\u0016q��\\���P�\u001aȲ0q>","payload_hex":"5401fec3b9a0ba7451a453680c909141dafe0a6e5f7a56107d779775bf369d6c5446600d329a6cf0f5c0fa9f00a26c4f2966c870456432e2b094164e137db0116ab9525f2cd3e3b53aea90de8a0d77b44a7ceea34b99a0c685b6cb2271f75cd2cdbf75acc8d01d177ed027288a166bbb0cdca9156277e68856d3ce16719dc05c86949650ae1ac8b230713e","method":"","user_agent":"","ja3":"","session":"e47fb993-cb12-42e7-a348-6584b49f82a6","seq":1,"duration_ms":100,"bytes_in":139,"bytes_out":14,"enriched":{"digest":"0242e25f9c816cd5","strings":["n_zV","lTF`","lO)f","pEd2"]}},{"timestamp":"2026-08-27T00:25:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-~!)VyllXDYoM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7e212956796c6c5844596f4d","method":"","user_agent":"","ja3":"","session":"97bf5cd2-5bcd-4daf-ace0-17835cc67cec","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"61c2a03134e1a25c","strings":["BitTorrent protocol","<-UW1605-~!)VyllXDYoM"]}},{"timestamp":"2026-08-26T02:01:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"p&i~}�p�E�j��P�e$�\u000e\u0012\u0012�\u0010ѷ\\i�x�e_�_&ն/}�r\u001a\u000b\u0017�%�\t��T���\u0011�A�m��}H�W���Ӳp\u001fʹ��:J\u0018����;�NZ\u0011\n�\n34�u�:A`�9� \u0016����","payload_hex":"7026697e7deb70c8458a6ac8fe50ec6524ed0e12129b10d1b75c69c27898655ff95f26d5b62f7da2721a0b17f725d6098bec54a6c0c4118d41f46decf77d48a057969fbed3b2701fcab9f7c33a4a18bbf8d0fa3bfc4e5a110a940a3334c275e23a4160da39c52016fab3a6ab","method":"","user_agent":"","ja3":"","session":"71601b6a-6286-4561-97dd-86ae65ec49eb","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":14,"enriched":{"digest":"e0be1bd0c4ad9f37","strings":["p&i~}"]}},{"timestamp":"2026-08-26T01:59:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-bx~loU!_nss9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d62787e6c6f55215f6e737339","method":"","user_agent":"","ja3":"","session":"3600fc51-e2a9-466b-b199-f489d4d081e2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5cb7feb3f80de978","strings":["BitTorrent protocol","<-UW1605-bx~loU!_nss9"]}},{"timestamp":"2026-08-26T01:58:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u00054b\\V�o�!�IRʌR�\u0001[G\\\u001f�.O�I��������\n�`PLA��<�88\u0002\"��L��˓��x�J��{Vr�oB~�\u0019��M��4v\u001d����#T�x���\u0016 �\u0017X\u001f�����=^��`vH���b��!\u0000\nP��\n�\u0018\u0000e@�\bD?B4\u0013��K\u001f�E%�/�&\u0019\u001a\t／\u0014���G�N�‚�Ip�Ma]","payload_hex":"8e0534625c56f26fc721a64952ca8c5286015b475c1fc12e4fce4987f083b9868bf7c60ae060504c41f8ce3cff3838022291c84ce5fbcb93c6f178a94aee8f7b5672cf6f427edc1999944d83d634761d8f8aff922354fe78b8defe1620ac17581fbcb8afb3e73d5e82b7607648f8f4e5629dc921000a50f1be0ac1180065408108443f423413fbe34b1f924525b42fea26191a09efbc8f14bfd3f247874ebdc282f64970e74d615d","method":"","user_agent":"","ja3":"","session":"e04ac5ae-8c32-4154-b961-d960d22ec457","seq":1,"duration_ms":100,"bytes_in":168,"bytes_out":14,"enriched":{"digest":"62a1a80dd112dc4f","strings":["4b\\V","`PLA","D?B4"]}},{"timestamp":"2026-08-26T01:57:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Ulo1VD7wZtUM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d556c6f31564437775a74554d","method":"","user_agent":"","ja3":"","session":"8a2e0345-1da7-4c96-b271-030afecada0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"fb5fba6cb1faf1a8","strings":["BitTorrent protocol","<-UW1605-Ulo1VD7wZtUM"]}},{"timestamp":"2026-08-26T01:55:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"́\u0005cEI��^�]Ʈ��m\u001e�fcU��kt⩉\u000e��������S�\u0007��K����r���z�s����Lo�W��f���Е\u000f\u000f���\u0018�ܩ.#�99��H�\u0013���@��R�K��\u0013q�s\u001enF\u00111�_+���\u0012���3뵬�E�","payload_hex":"cd8105634549a2e95ec05dc6aed4c96d1e80666355e3826b74e2a9890ed8e7c09ca186fad053d307defe4bbff29b8672ccf2867af5738b86f0874c6f9357c5da66b4c1b9d0950f0f85a5951881dca92e23a13939a5b148a913f0aacb40faac52964bc3c41371ab731e6e461131fc5f2b9c93f1128abbfd33ebb5accb45cd","method":"","user_agent":"","ja3":"","session":"a4fb699e-cf7e-4f01-96e2-ea9830c94e49","seq":1,"duration_ms":100,"bytes_in":126,"bytes_out":14},{"timestamp":"2026-08-26T01:54:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-7pU(ZDtJ9kPv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d377055285a44744a396b5076","method":"","user_agent":"","ja3":"","session":"60b4d86a-6eb5-46ac-8bac-9e5a4577d657","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"268847375a4b6287","strings":["BitTorrent protocol","<-UW1605-7pU(ZDtJ9kPv"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:47.153075+00:00"}