{"ip":"177.74.182.138","total_events":467,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["467 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 99,341 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"99,341 bytes sent","bytes_sent":99341,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T22:37:36","last_seen":"2026-08-16T03:43:05","events_24h":322,"events_7d":467,"geo":{"country_code":"BR","country_name":"Brazil","region":"Goiás","city":"São Luís de Montes Belos","lat":-16.4522,"lon":-50.3914,"asn":264027,"org":"MEGA NET TURBO"},"source_domain":"177-74-182-138.dynamic.meganetturbo.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264027","label":"Mega Net Turbo","category":"isp","url":"https://www.peeringdb.com/asn/264027"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":467}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":24},{"date":"2026-08-13","count":86},{"date":"2026-08-14","count":35},{"date":"2026-08-15","count":127},{"date":"2026-08-16","count":195}],"recent_events":[{"timestamp":"2026-08-16T03:43:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-xW7ABtExpDyw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d785737414274457870447977","method":"","user_agent":"","ja3":"","session":"efd09572-bc4b-4bd5-ad4f-4112045af157","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"66e04e13bfd48cad","strings":["BitTorrent protocol","<-qB5140-xW7ABtExpDyw"]}},{"timestamp":"2026-08-16T03:41:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"X�\u000b<��Z.�����\u0018\u000f\u0015/p*��mlJ\u000bo�|vI���\u0018(�_�\u001d�\u0005�6��\\+��k\"ws\u001f%FȘ\u0017�©�\u001de鳤\u0000\f\u0004M;��\b��\r�K[�w����h�X��l�\u000e��\u0002�FTo���Tk���](L��97�ԱXF�j%��\t��ڰ�W�\u001a: �����n��VL\u001a�կ=X��\u0007�R��\u0013Beh�}߁�'������8��\u0017ˎ�-\u0003\u0004�n|u��4�\u0006v�\u000e�\u0017��PHe/�v{�\u0005��耒S\u0000ث�5�ݑ�i\u001b\u0018\u000e\u0007N�f�\u000e\u0011*\u0017o�\u000ex7晶t\f\f�\u000b�F\u0005�R�@����e0�\u0006W�\u001e�\u0011��L3ARK�?&�\u0006\r�w��V%9\u0007�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e1290812-a46a-47d1-8155-05f4c74d8e68","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":14,"enriched":{"digest":"20b686349a7ce832","strings":["k\"ws","PHe/","L3ARK"]}},{"timestamp":"2026-08-16T03:40:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-x!NB)xUCR_NS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d78214e4229785543525f4e53","method":"","user_agent":"","ja3":"","session":"b0fd91ee-47e5-4b5e-9474-3f050f9797b0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"24ca20c40074416a","strings":["BitTorrent protocol","<-qB5140-x!NB)xUCR_NS"]}},{"timestamp":"2026-08-16T03:39:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ˁ���v}��U�q&���v��%κP�i飲N�Y �-%(P=��D�/I�4������_\u0005�Z\fHu=2!�Hi<,��E�?\u000f%K�\u0001v��𧮝�DP\u0016q�d\n4�u\u0007","payload_hex":"adcb81b4f484767df280558f712682b6da769afd7f25ceba50be69e9a3b24ed55920ac2d2528503df8e944b02f49cd3483f5f98c97ee5f05c05a0c48753d3221ed48693c2ca4db45e13f0f254baf0176ea85f0a7ae9dfc445016719f640a34a37507","method":"","user_agent":"","ja3":"","session":"57679c1f-8ad5-4bb2-be9a-42b9cb4a23e7","seq":1,"duration_ms":100,"bytes_in":98,"bytes_out":14,"enriched":{"digest":"48a68af348e542ce","strings":["-%(P=","Hu=2!","Hi<,"]}},{"timestamp":"2026-08-16T03:38:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-bi_lH7s)e~3v","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d62695f6c48377329657e3376","method":"","user_agent":"","ja3":"","session":"cc96ed1e-b441-43ce-9c0a-39dde63a7e39","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6bbd0ef9ed6fdc72","strings":["BitTorrent protocol","<-qB5140-bi_lH7s)e~3v"]}},{"timestamp":"2026-08-16T03:37:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012ݏ��\\ �(�Ò]WLe=�o�]���ܜp�j��M���t4���|\u0006\f�i��1��ٛ�Ѩ��t\u001dP��@6m\u0014{\u0013.HI\u0004w�\u0018S\u0015\u001bV@\u000b*w�Kb�d\u0001<3��Z'�R�f��_�V$\rrY�#5�j;�%ʕb\u00149�z��n��|�aN�j���SB='7\u0005f�\u0012\u001d\u0016f\u0001;㞮���\u0010G�5f\n\n���ȤЭQ`3zR��\u0016;��+Y��S���1��T�}pY��\"'�����E�\u001c��ݽ���\n9@ؔp�\f�A� \u001b\u0017�T\u0005�\r��\u001b\u001a$����b\u000e!\u001bܭ�'\f�����\n�R0��΋��O�-��\bM�\u000f\u00077@�\"@J\f�d���\u000fqb�@�<���J\ba*���\u0007\u001c4�Y�j%�$������JK�%�\u0003��%�\u001cU��(�\u0003\u001f-\u0000��\b����l<��>Q�X�\u0014�+��ɚֵ�\t:�0���\u000b{����0v�!~��\u000bY��/�e]���됣���0����3-��̏���C�A1���;\n�������h�~�7��\u0018�������\u001a�*�7��\u001c\u000e9�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"44ca6e7f-6527-4e7e-8e34-c78b5256ecbd","seq":1,"duration_ms":100,"bytes_in":468,"bytes_out":14,"enriched":{"digest":"ab729499ee9480f4","strings":["]WLe=","SB='7","Q`3zR"]}},{"timestamp":"2026-08-16T03:36:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-FO2-KoO)Udzz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d464f322d4b6f4f2955647a7a","method":"","user_agent":"","ja3":"","session":"d2373873-3d13-4da5-8f16-8fdccdcf1c1e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bd099b8458d6f928","strings":["BitTorrent protocol","<-qB5140-FO2-KoO)Udzz"]}},{"timestamp":"2026-08-16T03:34:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ߡ��$\u001eɶҥ\u0010��x��c�J�� )�*��F�W\u0016���\u0003����O��9�\n�qxm�����W�&����׏���8Eg��qf6+c��׳_�7�nh�\t�]#�M6t�՝�\u0014�V4;��̎��jF\u0011\u0000\b\u0017��\u0004Y�����l�z�6������\u0004��6���6 \u0001�\u001d","payload_hex":"dfa1c5fe241ec9b6d2a510a29b7890cd63ae4ad1c020299b2ac18c46875716c0bd9d03e3d5e8ea4f888139e70a9771786df785dbc4d657f126f5f582acd78faefcbf3845678cdd7166362b63ac90d7b35fa937c46e68f709fc5d23974d3674fed59dbc14cd56343bf0dccc8e9edb6a461100081793ed0459edaeb4b5fc6cda7a8c3685a3a2afbcbd0483ff36a99496362001d21d","method":"","user_agent":"","ja3":"","session":"f229d0cc-2248-4cf1-8685-caf4ad08960d","seq":1,"duration_ms":100,"bytes_in":148,"bytes_out":14,"enriched":{"digest":"355d1d44bc2c88ec","strings":["qf6+c"]}},{"timestamp":"2026-08-16T03:33:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-0jjkD(4_4EpG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d306a6a6b4428345f34457047","method":"","user_agent":"","ja3":"","session":"204a0fc5-d5f1-4f99-8507-67c707396c68","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"10636616047b5cf8","strings":["BitTorrent protocol","<-qB5140-0jjkD(4_4EpG"]}},{"timestamp":"2026-08-16T03:32:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"xإ�8�\u0002\u0005���}Gk�\\�\u0013W�3=�k`\u0012U��\u0019\u001e`\f��6ޫ-\u0001�a�32\f\u000bns_^�\u001c֮^�H1��Q\r\u0012\u0003b��H\u00068��KM?\u001b)�P+���+���\n�u\u0006�0w�f`��\u0002`&ۧ�3B�ŷ\u0010Y�J4�����ߵ2��c_뚂�QW\u0018;2�\u0007cGZn\u0015-P�X��&.-��ͳ���\u0006\u0005��D���������C���\u0006S氏^\u0005�����2F���Zx�t\u0004����Um*\fq