{"ip":"177.47.40.78","total_events":1394,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,394 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,394 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"294,612 bytes sent","bytes_sent":294612,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T00:55:47","last_seen":"2026-09-24T10:57:46","events_24h":548,"events_7d":1394,"geo":{"country_code":"BR","country_name":"Brazil","region":"Maranhão","city":"São Luís","lat":-2.6495,"lon":-44.3044,"asn":28652,"org":"Telecomunicacoes Nordeste Ltda."},"source_domain":"177474078.tvninternet.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28652","label":"Telecomunicações Nordeste Ltda.","category":"isp","url":"https://www.peeringdb.com/asn/28652"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1394}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":204},{"date":"2026-09-22","count":164},{"date":"2026-09-23","count":555},{"date":"2026-09-24","count":471}],"recent_events":[{"timestamp":"2026-09-24T10:57:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1500-79)2awI!GE*Q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313530302d373929326177492147452a51","method":"","user_agent":"","ja3":"","session":"63cff717-5760-4e70-aa01-0b05441e675d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6dae5f2e7a65ea96","strings":["BitTorrent protocol","<-BW1500-79)2awI!GE*Q"]}},{"timestamp":"2026-09-24T10:56:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"k�4`���=Yp�҃\u000e\u0004` ��\u0002�F����JQtU\u001c���9\u0019�s�-��]X�`���\u0005����p\u0010�0K��g�a�v�[\u001b���\u001c�vY/Eѣ�U\u0012�܎������\u00013k\u000b�ﴚ\b���g�\b\u0014\u0014/�f�i�����F\u001apv��9�8����Y;sat�X=�����hF�\u00003��\b7� A$�zT\u0004�}\u0011�\u0019��3π�4�&W�=:�\u0014�����\u0002��������$\u0010<\f\u001d�ɍaS��\u001bק\u0019��o��۲�����aiIb#\b�h.�Rf\u0003�ݿ�;\u000bL^ '�����\u0001#�a��e�G\u0006�E\u0013G��Q���H�\u0010Đk����f\u0016\u0002\u0016�\u0001G;����\u000e�j\u0017�k��Nzn\"\u0013QJD�\u0011z��;�8\u0006\u0015\u0011~�A6�V�9�5�{W������h\u001aGo�\u001du�aĭ��f�!��bI���\u0007~\u001c�H�7��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b79199da-8c20-400c-bb3c-82409bf5450c","seq":1,"duration_ms":100,"bytes_in":372,"bytes_out":12,"enriched":{"digest":"2fff7b76b3cbcc37","strings":["JQtU","vY/E","Y;sat","aiIb#","L^ '","Nzn\""]}},{"timestamp":"2026-09-24T10:55:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1500-WG7XfdwVJ3eN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313530302d57473758666477564a33654e","method":"","user_agent":"","ja3":"","session":"e97052ee-0849-49bf-b969-4c69ff05cf74","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d678b269c9f41bb6","strings":["BitTorrent protocol","<-BW1500-WG7XfdwVJ3eN"]}},{"timestamp":"2026-09-24T10:53:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�݆��D=���r#J��'\b�-˂y��Y>O\"�t�\u0011\u001f�'��LC2�\\4�%)�Gn��\u0012xd��?��n0g��\"��'g��1��s\r�.�E���\u000b�!\u001e\u0002;qU��h�yz�\ruk�ɥ�\rF=�t����(=�K�����z��z�\r��O�$-HY'Q�\u0012\u000e�7؋\u001d\u001b�T`\u0005��\t\u001a�G�ݪ>=\r\u000e�!\u0014F���\u001d�»\t�;EФ�Y�A(L�\u0005���&��Yʎκ{9I�[�G!�<�Y�Mbӳ�\"H0��\u001c����0�4�L�dl���;�T\u0016|Zk胸bM�����1Vߔ���r�cV\u0004��i{xg�3wI�R\u0018��\u0014fs݇�\u000f�\u0015U��Y�v\n","payload_hex":"f9dd86fd8f443d9dbea4723c6abf4e8926675452c94aef58bb8a7a1af0f1852bedbd365ed48c499907c7c9f716d61c8943af83f8fc107a7803a9321f3f593c08b11422ccd47806ffe6b3d099713f626fe018a7117d2f63f7451873550f1d094022cea4e84c679f288169cf9112d7e7402bf8c3b5e82510b5adf6bab357ebb0aded0bea91aa4f71a087ee146242294976a1e4f09dfb39ab1af5d810c22650f6b2ad62651343d6ed2f065d99a4bb3e234ad4fe2708a22dcb827999ce593e4f22e9748e111f7fbe27aef04c4332cf5c34ef2529f5476ef49812786492b13f90cc6e3067f7b322e5932767b9ab31f5ef730dd62e9045a7f9b90bd5211e023b717f55b89068e6797a9c0d756bbfc9a5f20d463d8f74ab8db597283d8b4ba88cf8dbe37a90fb7aa00de0ad4fb9242d48592751e5120ec337d88b1d1bdd546005aca9091a87478fddaa3e3d0d0eb8211446f19fe21dcdc2bb09dd3b45d0a49c59b541284c8b05b1d6f826a9b159ca8eceba7b3949985ba44721c73caf59ac4d62d3b3ae22483092b31ccccee2e930ea349b4cf6646cb1f8953b9354167c5a6be883b8624dfb978c8dd43156df94829bd1728c635604b4ae697b786796337749e05218e283146673dd878f0fce155588b959ec760a","method":"","user_agent":"","ja3":"","session":"8776136a-8a56-46c7-a51a-ab025999b96e","seq":1,"duration_ms":100,"bytes_in":465,"bytes_out":12,"enriched":{"digest":"6092589e316c845d","strings":["&gTR","q?bo","bB)Iv","Y>O\"","$-HY'Q","i{xg"]}},{"timestamp":"2026-09-24T10:52:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1500-~HM!sP8~2)x)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313530302d7e484d217350387e32297829","method":"","user_agent":"","ja3":"","session":"6292c0b2-3561-46cf-826e-f89a96d34e8f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"78037cced50b9548","strings":["BitTorrent protocol","<-BW1500-~HM!sP8~2)x)"]}},{"timestamp":"2026-09-24T10:51:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"_8���\u0018�Q���\u0005\u0007k��_p\u000b^�g��]���s �\u0016��\u0018�jZ���\u0013\u0003\u000e��<�uh1�\tق7�`,2ң���W�Y<�-e�Z�3M��;�J\\Gve�wl\b\u0017^\u0017�im�Ɔ2\u0018̲5Q�>^u���D�C�����I\n�%k���V^��8����\u001a�4��A٭�����F\\��!u\bp\u0005�t⹂���\u0003�����wG����2�)!v�J�J���j\u0013�R�����\u0007gn�\f_�\\�-�AK�^��Z�@�po�\u0014�Q�#;L�h����\n\u001e�dCI�����Y�ƿեE�Y\u001e\u00152�[R�<����NW)��m���)�����\u0018Q�\u001d\u000e�\u0012����C��V�ӆx\"�Sl��Qv\u001f�w�\u001d[\tG\rރ���Q U.\r�H�\u00106V�#�\u0001�\u0010�}�?\b{֔\"�^�t��|��u��Q0�j������z\u0007H7\u001f\u001e+\u0013rd�\u000f}U[=7Ģ�\u000f\u001e\u001b�I3\u000bE�1���kb��-Sm4 �u۱� rdL,�oްK���{ ��\u0019mr�\t��53/2�\u0014����y�D�V`p�#;��S5AR����-\u001e!`���\u000e\u0004z","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1dffe5e0-b54c-4027-ab25-139d1dfadc61","seq":1,"duration_ms":100,"bytes_in":501,"bytes_out":12,"enriched":{"digest":"b63644ccf9582fe8","strings":["J\\Gve","Q U.","}U[=7","fhO00","-Sm4","rdL,","53/2","S5AR"]}},{"timestamp":"2026-09-24T10:49:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1500-K!BTm6lc79P3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313530302d4b2142546d366c6337395033","method":"","user_agent":"","ja3":"","session":"a510e451-6650-4805-9546-78b8e3bac69b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6e8188c1a169cac3","strings":["BitTorrent protocol","<-BW1500-K!BTm6lc79P3"]}},{"timestamp":"2026-09-24T10:48:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��[/�N2Fk^B6\t+�� \u001b��*���O�.69�G�*!�Id��\b�3�\n��#\u001aZ�\u0012\u0002��4kS�T�u\u001a�7���G�I\u0005[˒�\n4ؕ��4��\u0010�f\u0010��1��݂\u001c�.�iQ\u0002*G\b9\"}\u0013��ķ�`���P\u0016�\u001d}\u0005|c����W�J\u0011�#���\u0011\u001b��%�Y\u0011����Βj3�\"��i\u001c����-\u0019RB��4��Ԡ���sng�h�]�=j\u001e2A+tz��b�m�\u0002jS�Nō�׆�/F�����gO�i\r\u0006��\u0001���(D���\u0005\u0002^'c\u0014�%\bG�\u000fb#�\"���1{\\�%E�0\u0007Ct^\u0007J>�z��24�\u0004���<�\u0005.4.�\u0019?�\u0018\u0004�d2�&�ے�w���'�g��\u000f�����z�X�\b 0���;Z(�`�`��g�*$��K�5�\f�\u000e�?\u0011\u0003�S��1-�K�y����W�\nR�2��/A�Ŏ\u0005gx�Z\th�^4\u0007�<&��0�\u0017\u000b�ϻV�J��\u00163J=�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f47217a3-4c2e-4e16-9e0d-2a02316ded42","seq":1,"duration_ms":100,"bytes_in":415,"bytes_out":12,"enriched":{"digest":"b1653fcfbdc50265","strings":["N2Fk^B6","2A+tz"]}},{"timestamp":"2026-09-24T10:46:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1500-x*awH82jXTme","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313530302d782a61774838326a58546d65","method":"","user_agent":"","ja3":"","session":"216416c1-82ed-41d5-a116-db3e822ca766","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"81ebc9b85c5f7b7f","strings":["BitTorrent protocol","<-BW1500-x*awH82jXTme"]}},{"timestamp":"2026-09-24T10:45:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"BT���|�u\n�-�ӣ�j�_<�!��,j��K�\u0016w�]��f�\"��j\u0016�\u001ffB�L\u0017+����V\u0012�q���\u001cA�Og�U���\u0014����\t��x�\u000e�\u0005����(���\u001d���\u0012��\u001a\\�U�\u0002+\r�v�>\b0J5^��\"��\u0005lnEKN��q��iM\u0002W�'p�$���\u0019�\u0015����e\b�V�\u0012\u0010��%H=$��Μw����o��N�`���ǒ\r8��\t\u000fĨ�Y&��W\u000e%\n^\u0007�n}�\u0012�+(��D��7\u0011o}�\u0006\\���y�m�5#","payload_hex":"42548bbdfe7c99750ad42d95d3a3dc6afd5f3c8921ee90977f81882c6abddb4bf01677b65de2f866dd2295c56a16e41f6642c74c172bb2e7c7f15612cd7198c7f31c41bb4f67e4558782eb14ada09bec0995b478a50e8205b87f84f7ce28f9bbd51df4b5ba12d8e91a5ced55fc022b0d9476923e08304a355ef2af22e6ab056c6e454b4eecfd719dda694d0257f12770a124d4f8a719d215ddeaa4d06508dd56981210aee225483d24a4ddce9c77b99fd8cc6f99bf4efd608ea2d9c7920d38aeaf090f7fc4a8b05926f1ea570e250a5e07cf6e7da012c32b28b1a044d1c437116f7db4065c87a3ee79f36d9a3523","method":"","user_agent":"","ja3":"","session":"6d60c326-af55-4e4c-9bdc-6bef3bddd45c","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":12,"enriched":{"digest":"4d0107e79b0b95bc","strings":["0J5^","lnEKN","%H=$"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T10:58:52.930025+00:00"}