{"ip":"45.160.105.129","total_events":1583,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,583 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,583 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"325,616 bytes sent","bytes_sent":325616,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-16T00:17:03","last_seen":"2026-08-27T05:47:13","events_24h":0,"events_7d":1408,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.6293,"lon":-46.6351,"asn":268397,"org":"REINALDO DE JESUS"},"source_domain":"129.105.160.45.rlnettelecom.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as268397","label":"REINALDO DE JESUS","category":"isp","url":"https://www.peeringdb.com/asn/268397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1583}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":104},{"date":"2026-08-17","count":36},{"date":"2026-08-20","count":35},{"date":"2026-08-22","count":966},{"date":"2026-08-23","count":127},{"date":"2026-08-24","count":27},{"date":"2026-08-26","count":140},{"date":"2026-08-27","count":148}],"recent_events":[{"timestamp":"2026-08-27T05:47:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"a�\u001f:\t\u0012�frѳV�\u0002�\u0019!8�6�\u0011��\u0016$e�@2�\u0018��\u000f�������s�/��f���\"vp�\u001at#\u0012����=%��4��`�@͛xN�\u000b\u0017�\u0016�����\u000f\u0000K�\u0013>���Z|\u0013B��\u0006�\u0017k���fq9V��3�d��܋EK1;XO��{'�)5�\u001d�\f��\u00054\u0004Ȱ��\"��\u001b�ȷ����e��h���$}9Z�ݓ8\u000f���\fw\u001b#�Q���\u0013�\u0003","payload_hex":"61a11f3a0912dc6672d1b356e002d9192138bf36cf11fe95162465c540328318a0c40fbead91f0d6f2da73992fecd7668493f6227670b31a742312b088e1c43d25fbe734b68b60c940cd9b784e800b178516a39edae4aa0f004be9133e9393805a7c1342e1fd068c176b8f82e166713956f4ef33f164bbd8dc8b454b313b584ff0927b27bb2935e51df90cfcc5053404c8b082c222a3e91b88c8b7f3c7c5d665f1f968b499f9247d395a93dd937f380fb38e8d0c771b238851838dab139403","method":"","user_agent":"","ja3":"","session":"cc85dee5-a196-4682-b0db-f96a82f35683","seq":1,"duration_ms":100,"bytes_in":191,"bytes_out":14,"enriched":{"digest":"16bd7f772e550949","strings":["fq9V","EK1;XO","$}9Z"]}},{"timestamp":"2026-08-27T05:44:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-!*_z8)tJDlHi","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d212a5f7a3829744a446c4869","method":"","user_agent":"","ja3":"","session":"fca19fc5-8696-41eb-8081-1c7d061fa203","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b1dc38afa6e8adda","strings":["BitTorrent protocol","<-BW160N-!*_z8)tJDlHi"]}},{"timestamp":"2026-08-27T05:42:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"`�j���������/�4V����\u0003����\u0013��|�\u0007�%\u0014\u000eV3����Q5�����R�2�\u0010�'�\u0003�<�s�҅�B�s��tceS�&��+/Y\u0002��.\u0004�a&���Tݒ\u0004��i\u0003\u0005+\u0013!��vB����y.��d��$`��/�v�\u0011���\u001cUOم5e%?ɖmԛ\u0012�O�;�e��7���q|\rO�V�ѫ�ͅa�\b�Eӿ�K*b�\u0018�Gt&k��\u000f9e��|\u0002�O���a�\u001a\n�p�3|�ȸ��e��","payload_hex":"60956aac88bef8b5bce1d9cf2fb2345690f68be903d6fdedd313a9a07ce507e125140e563382c9d6f951359cd4f1928352ab329710eb27e803c43cf673a2d285c542b4738be6747f636553e026c6fb2b2f59028ebb2e04b86126e0a8cb54dd9204ff946903052b1321f9f77642838b94c1792eb18e6488d42460e5b62faf76f0119ddac21c554fd9853565253fc9966dd49b12884ff13bb465abf237b5e1ea717c0d4fd15695d1abcacd8561e4089545d3bfc44b2a629b18bb4774266bbcaa0f396599907c02b24fc5ead461f31a0af270bd337c95c8b8f2ae65b28d","method":"","user_agent":"","ja3":"","session":"9070ff9e-7745-47f5-b445-ff2a88702886","seq":1,"duration_ms":100,"bytes_in":220,"bytes_out":14,"enriched":{"digest":"2e7d9052c70f60ed","strings":["5e%?","Gt&k"]}},{"timestamp":"2026-08-27T05:40:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-E0yC*wMtNvKx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d453079432a774d744e764b78","method":"","user_agent":"","ja3":"","session":"35ce7425-8438-4992-867a-6c7c1f95f3c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"93f1b0ee49cc3dea","strings":["BitTorrent protocol","<-BW160N-E0yC*wMtNvKx"]}},{"timestamp":"2026-08-27T05:37:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"N\f��ۖ��Bkd��v�\u001cSA\u0013�O�S\u0000=��r\u0005\u0015\u0011��p>��\u0006�\f)�U\u001c����f\u001f�I�\u0004��ˁ��\\�f��6���\u0012 M��\\?���\\��I����+L\f-���Tb�sX�x�P�����4�2���[A�\u0016����[4\r��q\u0004�\f��\u0006\u0013�4\u0010�Ce�S����V|��a�\u0005?$g�����pm�TM��F\u0005����6��\u0011�$l}̅����Zi`�>��\t����Y�\n�\f�\u0005P�\u0012ϸ\u001f��\u0002�u���>}�\u0001�w@��\u0017�u��u�-���\r*P\u0005~�֡gۯ�t�T\u0006�\u0018�\u0013��֬�����{=�`�\u0012\t�\u0007�c\u0002*e�V+4�ܕ����L�i�]:Б��gV\u000e�m{�\u0017�\b�(\u0011[�s��w���\u0004_GZԠ�N�צV��:�i\u000f�\u0004X�]�\u001aچ\u001c\u0014n�E�Ԗ�\u0003{��\u0006\u0006U\"��^�;��T�^�\u0012po�\u001c�\b5@��\u001a@�k�˾1}v8S�4�H�$\u000f1L��`\n{21Q�2\u0000��]A\u000b\u0018��,:�ֶ���=�A��\u0003n\u0011�u","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b45a550f-3745-40c1-8a6b-e3672ef1965e","seq":1,"duration_ms":100,"bytes_in":456,"bytes_out":14,"enriched":{"digest":"90b1b42a2a60cbf1","strings":["1}v8S","{21Q"]}},{"timestamp":"2026-08-27T05:35:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-R~mZzXAQSfaE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d527e6d5a7a58415153666145","method":"","user_agent":"","ja3":"","session":"8a73d7d2-7be8-4af6-95b7-dfc1e4ce96eb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"300e7dce1e9b810d","strings":["BitTorrent protocol","<-BW160N-R~mZzXAQSfaE"]}},{"timestamp":"2026-08-27T05:33:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001c��Ϙ�\u0007�[����5�-\u0000��8\u0006M\nm\u000e�&��-�\u001a�s\u0011��I+Z����.���\u0016#_��a\u001fnr��r�֢\u0000x܈��<%\u000f��#\u0003�F�\u0015\rtd$5�\u0012ʖ�Y��o�C��f:j\u001d\u0007�a�o�H\u0018\ft����.�Ծ�)(�$ݵ��${<","payload_hex":"1ca289cf98ba07895bb7cac4cf35b82d008aa438064d0a6d0ef9269dd52dd81a917311accc492b5ab0fb88922e98e68116235fd5d7611f6e72acd972bed6a20078dc88a9b23c250fddd92303ef46cb150d74642435ca12ca96f35994916fd343c4e8663a6a1d07e261d06f8048180c74e4d6f59d2ee6d4beaa2928ff24ddb583de247b3c","method":"","user_agent":"","ja3":"","session":"8d37a776-8f36-42b5-82ee-96b9917502bd","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":14,"enriched":{"digest":"c3a2dafbcf1364ef","strings":["td$5"]}},{"timestamp":"2026-08-27T05:30:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-52BIZ!nN!ST0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d353242495a216e4e21535430","method":"","user_agent":"","ja3":"","session":"242a636d-87a2-4b0a-a551-b8ca2ce6adb4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1d1a1e6d317fc90e","strings":["BitTorrent protocol","<-BW160N-52BIZ!nN!ST0"]}},{"timestamp":"2026-08-27T05:28:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u00042\u000f0[odJ��\tn%d5��|m���\\�w���ō��9|�����\u0013\u0015'�}m3���y�^?���;������\u001b���3R|[�\r�*�uo\u001b\u0016&��7[�\n�\u001f\u001b^t��(�f�\u0010\u0003\u000f\u0017\u001f�\u000b����hZ<A\"��0\ty;�r�؆>\u000bZ����\u0012 R;���1�Vp\u0004��\u001d����\u0019��΂b}P��������5\u001e�`�:���>�I0���\u001cpMp�H�ÖydƦz����\u0018�U�2[����%�\u0007����D�E>��BO��\tQ","payload_hex":"958f04320f305b6f644ad8fb096e256435a0f77c6dfce7cd5cd17785e0cbc58d8c7fe9397c9fafedcfee131527b17d6d33f68cb5798c5e3f91f3e43baee987f7a1861babf5ec33527c5be60dd12adc756f1b1626d6e0375b800aaf1f1b5e74e0f728f566e110030f171f810b87868ee4685a3c4122babc3009793bfb72cad8863e0b5a8990b2951220523bbd95943187567004a2e71df0f59f9c19bae9ce82627d50f5c3d4ecdedff084351ec960f23ae1e6ba3ef8493083ced41c704d70b348b3c3967964c6a67abd8e85df18f35588325bcaf7c1ad25ac07b0a7d4c14496453ee69f424fcbff0951","method":"","user_agent":"","ja3":"","session":"a4ec183b-eb62-41d5-8865-7cf7b204779c","seq":1,"duration_ms":101,"bytes_in":233,"bytes_out":14,"enriched":{"digest":"76c5e4918d79ba4c","strings":["0[odJ","n%d5","3R|[","hZ<A\""]}},{"timestamp":"2026-08-27T05:25:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-vCKGqLjKjGZz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d76434b47714c6a4b6a475a7a","method":"","user_agent":"","ja3":"","session":"056c445b-9f89-4031-871f-5f595ccdfcb5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0892055da9f3502a","strings":["BitTorrent protocol","<-BW160N-vCKGqLjKjGZz"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-28T14:15:43.556280+00:00"}