{"ip":"45.160.105.198","total_events":225,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["225 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 47,659 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"47,659 bytes sent","bytes_sent":47659,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T22:38:26","last_seen":"2026-09-11T03:03:26","events_24h":0,"events_7d":0,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.6293,"lon":-46.6351,"asn":268397,"org":"REINALDO DE JESUS"},"source_domain":"198.105.160.45.rlnettelecom.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as268397","label":"REINALDO DE JESUS","category":"isp","url":"https://www.peeringdb.com/asn/268397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":225}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":44},{"date":"2026-09-10","count":126},{"date":"2026-09-11","count":55}],"recent_events":[{"timestamp":"2026-09-11T03:03:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"no\u0001�@\u001f��؆=m\u0004��\t<\u001c1��<do���-\u0004\u0017��V��\u001av=踅�<?$�j��hr5-=[H=='��mȧ���#\u001d���c�\fHO���QW\b)�\f[��Kl���\u001d�\f\u0002��^�ѱt�L2iTF\u0019x�J�@��`��,�\u0019]7�N6N~��-m��s�\u0019","payload_hex":"6e6f01fd401febadd8863d6d04def0093c1c31b19b3c646f94d9e32d04179ba856a7841a763de8b8859e3c3f24c36ab9886872352d3d5b483d3d27b8f56dc8a78fc1f9231d81a1cc63d20c484fbff99a51570829f80c5b96814b6ca3c0a71daa0c02e2a45ec3d1b174d44c326954461978c34ade40f5bc60e4f62cbd195d37f14e364e7e8e802d6d98e2738c19","method":"","user_agent":"","ja3":"","session":"c29b7b18-ac16-46a5-acb1-1dae2b867ff6","seq":1,"duration_ms":100,"bytes_in":141,"bytes_out":14,"enriched":{"digest":"4e76eb502d9263e4","strings":["hr5-=[H=='","L2iTF","N6N~"]}},{"timestamp":"2026-09-11T02:59:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-~Q-P*slR~*f4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d7e512d502a736c527e2a6634","method":"","user_agent":"","ja3":"","session":"c108c008-71b2-46fa-8d87-a55a8b684364","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"de29f8b111ffb924","strings":["BitTorrent protocol","<-BW160N-~Q-P*slR~*f4"]}},{"timestamp":"2026-09-11T02:56:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"~�'#%�\u0004�#\u0019��\u0003�\\�x����4��۝��^/���2�׍\u0003�\u000f�\\�!\u001e�(�\u000e���e9\u000f���ьמ\u0016M��\u0010��@_W#y�f�\u0015�)�F���O�|���[���.\u0001�;���L\u0010�Y�L��at �E�Kw\u0010�qC;��\r8��2�!��q$���c\t,mqn[�}�v3�2��Sf�i���t�u/l��΢���\r�@�a,ӱ��υ�\u001fި0����FY\u0000uW�y���?�l��B�Ld�fꂫ�a\u0018��t�\u000b���L�$c�H���\u0007\u0011M�������Cީ�\t&0�߁��\u0012�'��øB���h\u00150\f�P_p�E\"3���ɩ�w }?_\u0015�z6\u001bp�k-\u00007��ɋc��,b�\u000f{\u0015]�A\u0019Dv%�\u00040k\u0000\u0018`;�\u0014���yB��o�{_\u0016�\u0015�3\\���\u0018����\u0013w��C�V�\b�\u001f�U3�\ne.�3�\u0011�&J\u0011/>)��fx�Qbu��W","payload_hex":"7eec2723259804e82319cee003e15c9578c7f1eb803494fedb9dd3ce5e2f8ec0e632ddd78d03ea0f7f805c8f211e9228fd0e8daa8765390f8ca2bad18cd79e164dedbf10ab96405f572379c066d0158f29fa46e9ffdc4f947c8cf1905bffdb7fec2e01d73b89add84c108e59994cede5617420fe45ec4b7710b971433bf0cb0d38919232f421eb87712488e4d763092c6d716e5bd07df07633df32fea45366ee69888db474e1752f6c80e5cea2b499960d9740b8612cd3b1caf2cf85c41fdea830f29eff914659007557a27985ebca3fc56cfb8242b84c64ba66ea82ab8a611883d374eb0b92a5b94c9f2463c548c6fbda07114dabd2fc98f785e443dea9d209263083df81e8ce12a927bc9bc3b842c0ad956815300cd1505f70fa452233ad8cdcc9a9df77207d3f5f15b37a361b70e56b2d0037ed82c98b63c6f02c628a0f7b155dc54119447625ac04306b0018603b7fea14bffc9f794289ee6fd57b5f169f1596335c80fd8918a1958c841377a4b9439d56eb089b1fa55533b50a652ef333f21195264a112f3e29e5cb667893516275eecf57","method":"","user_agent":"","ja3":"","session":"5fb90475-8b3f-4129-a0e2-ef2caabfaacb","seq":1,"duration_ms":100,"bytes_in":404,"bytes_out":14,"enriched":{"digest":"c1eeb66d00d62cdb","strings":["@_W#y",",mqn[","w }?_","FYuW"]}},{"timestamp":"2026-09-11T02:53:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-spGILewmF7V(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d737047494c65776d46375628","method":"","user_agent":"","ja3":"","session":"aaa9c12c-72ad-4cb0-82c4-3fdfe870346b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1d9d477bc64ad66b","strings":["BitTorrent protocol","<-BW160N-spGILewmF7V("]}},{"timestamp":"2026-09-11T02:49:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������\u0000\u0014�7��+e��ʭ�3\u001b�)��\u0007_��F:�\tN��\u001a�)8U\u000f�'�]#���\u001c.��D�;���I���#Y؇��f�_\b\u0012�βį���7{W\u001dh�d�L\u0015h]ˢ�뱩��\u0017Y\u001f\u0001�.�G!�f$���|!�W�Ԅ6�b񱏓��4+�\r\u0010U���,��y���o\u0016�\u0010\u0017�3JJo�>m4\u001e�\u0007 ��!�\u0017����X���;�8H\f֑2��","payload_hex":"93bdb9fa97e90014d037d1ff2b65acb9caadda331bb729bc9a075ffbbb463ad7094ed9fb1ac42938550f8e27e05d23ba7f88881c2eea8144b13bac898a49fa8fcb2359d887a8ba66f05f0812bcceb2c4af818ca2377b571d68dd64b24c15685dcba2ceebb1a9fdba17591f01952eba47218b6624aae3837c21d457f9d484368762f1b18f93ab88342be50d1055dcf0c92c92d079cdf5856f16c4101781334a4a6f983e6d341ebf07208ef421ee17a0c3cedd5897e08b3b8138480cd6913288f5","method":"","user_agent":"","ja3":"","session":"9056fb16-d907-40bd-ac5d-7e4876d19790","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":14,"enriched":{"digest":"69e057383fe41500","strings":["3JJo"]}},{"timestamp":"2026-09-11T02:46:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-6nL.Zta!d8B(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d366e4c2e5a74612164384228","method":"","user_agent":"","ja3":"","session":"707c19d6-3f4b-45e2-b34e-92e3fdc49a67","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5e9c8f0108940f8a","strings":["BitTorrent protocol","<-BW160N-6nL.Zta!d8B("],"iocs":{"domains":["bw160n-6nl.zta"]}}},{"timestamp":"2026-09-11T02:43:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"}��*S���'�`JLS���q|��&\u0005\u0018���\u000f\b��\u0005{\u001fS�9ˢ�Ę��\u0019[�#�q\u0001�7�\u0019��9\u0013\u0013TP!n�/�\r&��΀\u001a�'t\u001fb���J=�\u0017\u0017N�2�L�X\u001b5ť`��D1]b���y��\u0000N\u0018��9-\n��;O^b�݅�[aq&\"]���\u0012l��6-�\u0017���t�}� \f\u000f�]\u000e��\u0004kc\b�z�m%S�_\u0013�E�RC�\u0017�Q7�����\u0003��G���\u0002�z�\u0003��\u0013�C��\u001fX�1Q��,\u001f�E\r\u0014�-BB�up\u001d<�/[���S�\u0018\u0006\u0000��/��a!jw\u000b;!��˝e\u000e0�qv��Z\b=}�_1\u0005=%�w#�N�G��?q\u0010��b���\u0001\u001fN=�P�s�,o���O�z�>�6<A����3x��N�&V\u0004<#\u0004\u001f�\u0000��E�z�d\u0003�L�-�E\u0003�L�l�@��\u0011~#���3��BKE\u001ak\b�`/\u0012T�c�7\u001d\t8�zw�L�\u001c��\n��?\u001f�!5⛄l&������c����\u001c���7\u001a\u0005����O�����@�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"64265021-3b20-4718-b6f5-75f2ddab93d9","seq":1,"duration_ms":101,"bytes_in":440,"bytes_out":14,"enriched":{"digest":"8ffb8be347e0b431","strings":["`JLS","TP!n","D1]b",";O^b","[aq&\"]","a!jw"]}},{"timestamp":"2026-09-11T02:39:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-!paj5xenjKg2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d2170616a3578656e6a4b6732","method":"","user_agent":"","ja3":"","session":"d289b78e-7a7d-46e1-a1c0-b9921737ac6b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"45784648a8b3c193","strings":["BitTorrent protocol","<-BW160N-!paj5xenjKg2"]}},{"timestamp":"2026-09-11T02:36:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�h}'�P�-�d��:�\u001f5����A���'�T�D\u0002lx���\u001d�\tu���\u0015\u0010��{�\u0003��\u0015�ejR����0j-�Fo\u001f��܌��g9�7ʼ�J�@o0b��*\u000f?@\u0000ݙ�D\u0011�y�\u0013�2&RF��;��\r�t�3\u001d����If\b5\u0010�qh~�](��j,\u0001U\\�����\"0e�t�\r\u0005n��Jj\u001c�-�t&%�_�t>dGIȑҧ�\u0005\u000b����\u0007�0e\u0003�$\u0017oZ/;Ur.]Irژ=�ݷ\u0006D�D�z�y�\fx�Ҙ�p)��̐j\u0011+t��K\u0018>��\u000e�`JǼ�:�<8%�\u0006F���[p�{�\u001b2\u001f2��\u0017p�hT��͘�\u001a\u0004�*a��%J5X&\u001dk�V1a#e����R�HN�Uz9/�-�Ae��)\n�ݗ<w���py����:��C~���*�\u0005\u0017n e\u001f�?\u001a�ǜ0��C�\u001bڹ��]%\r����\u001f�6\u0017�^ivHv\u0001|j\u0019�\"n\u001b\u000b��lwC�j_\r�؜�i\f�,v$���M\u0013Juܔt:y��E\u001e�\u00034x���eW�\"j�壓�J��$ZMJ�O��m\u0005\u0006�?��^�/$GQ�\u000f�z8�H�3�i���X-!�9NF\u0001","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6164a453-1561-4f38-9642-1771bbd08379","seq":1,"duration_ms":101,"bytes_in":493,"bytes_out":14,"enriched":{"digest":"0eabfb61c7408728","strings":["@o0b","2&RF","t>dGI","oZ/;Ur.]Ir","%J5X&","V1a#e","Uz9/","^ivHv","$ZMJ","/$GQ"]}},{"timestamp":"2026-09-11T02:32:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160N-SX1KQ1W_3I)k","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304e2d5358314b5131575f3349296b","method":"","user_agent":"","ja3":"","session":"00029bdc-9955-42e4-8b82-3f1cebc3f4ef","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e6e8700ead204ff5","strings":["BitTorrent protocol","<-BW160N-SX1KQ1W_3I)k"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T23:46:49.360334+00:00"}