{"ip":"45.160.105.84","total_events":1621,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,621 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,621 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"335,925 bytes sent","bytes_sent":335925,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-11T22:52:36","last_seen":"2026-09-21T23:45:43","events_24h":561,"events_7d":1527,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.6293,"lon":-46.6351,"asn":268397,"org":"REINALDO DE JESUS"},"source_domain":"84.105.160.45.rlnettelecom.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as268397","label":"REINALDO DE JESUS","category":"isp","url":"https://www.peeringdb.com/asn/268397"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1621}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-11","count":49},{"date":"2026-09-12","count":45},{"date":"2026-09-15","count":24},{"date":"2026-09-19","count":308},{"date":"2026-09-20","count":644},{"date":"2026-09-21","count":551}],"recent_events":[{"timestamp":"2026-09-21T23:45:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ʕ$�i�3f�\bi\u001d\\�9Գm�%��<җUb\u0019O�h����3�i�J�.�7u�+�%c�'D�����R:\u0004\u0015%\u0016�7�\u0015��ӊn�\u001a�Ie[>�X�V�h\u0016ף��˾��m��{[��\u0015\f\u0010w@\u000e|��\u000b\u000f�U\u0016ռע*��A�|��ʫ�\tbt�\u000e��\u001fhТ���\u000f�q�9���;Y\u0010\u001f�\u0012alN��<�#�]-��\\K�q\u001f��0����ב.��\tf\u001c�Cq\u0015D��ŕ�Ӧ\t\u001e[���{\u0018-\n���\u001b85(�\u000b�{��K�Q\u0015Ʒ�\u001b\nu[�)%�\u0000��4\u0019�sD�o�t.�t.&\u00142�di/\u0015P���\r{~��\u0004L�zKm�\u0012� q����+�=���nI\u001d��v�r���\t��%�C/H�{j\r���;^n��p�Ԅ�g�\u0015���m^��'yi}XS��r��\u0014\u0004<\u0006\u001a#kL֛���zwc�WY*�4�j\u001e�j�\u0001N�*�h �k=Īu\u0002�S\t2\u0006","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"bfa686e8-6978-43fc-8327-79f2456f8808","seq":1,"duration_ms":100,"bytes_in":357,"bytes_out":13,"enriched":{"digest":"5f5e01d7b7bc0ad5","strings":["Ie[>","'yi}XS"]}},{"timestamp":"2026-09-21T23:38:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-OLhPIOTRyJ8U","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d4f4c6850494f5452794a3855","method":"","user_agent":"","ja3":"","session":"48401cd8-932d-4dcb-9fa4-0b3d1ef157dc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4edf740eb0ac9f96","strings":["BitTorrent protocol","<-BW160M-OLhPIOTRyJ8U"]}},{"timestamp":"2026-09-21T23:37:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�,\u001e��T�v����\u00106�w@��ʦ�ۚ^�����;B��\t�y��4�\u0011mU\u0011��\u0013\u001e\u0001x\u0001R�\bN�\u0016��\t&j��@��7�F\nu� 8��\u001f�\u0011M��\"\u0014��j����X�y\u0005�l�X�ш�\u001f�\u0016","payload_hex":"d32c1e8bd054c876a9949de41036c47740969dcaa6c3db9a5ee9eedddbd03b429bc9098379a7893491116d5511f0b6131e0178017f52b3084e8b16aaed09266ac4df40939137c1460a758020389fae1fbd114d819d2214edef6afdb07feb9b58af7905b26c8358a9d188f11fd316","method":"","user_agent":"","ja3":"","session":"c2a7c070-253a-432f-aa5e-5a8e2debd297","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":13},{"timestamp":"2026-09-21T23:36:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-imX8k5VsBod0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d696d58386b355673426f6430","method":"","user_agent":"","ja3":"","session":"1713f430-757a-48f3-b45a-0a4d6933ac23","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"db28c47e32aecb15","strings":["BitTorrent protocol","<-BW160M-imX8k5VsBod0"]}},{"timestamp":"2026-09-21T23:34:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��o��%W\u0004X�ݏ����=\u0006f�\"�\u0005#\f�\"!�`�)�\u0013:\"�\u001e�J����\u00033��e]\u0014^xc+j�\u001d���4gW}��q�a\u0010,)��˛\u0001�߅�3�*4����q$���F�D���d�>ЫZ\u0011r���\u0001`h���\u0010��φ��d\u001a��Z���6o�XI�}\u001d6z�m�dIW��\t{t����ӧ\u0007��]\u0004\u0016ji�&��RX���\\�(<\u0013�ҥ�FbS��g��ܺ%\u0011�[��T.O�%�M6=�;{z��/��G{]�N1�Ԋ�0Ϲ�\u0001ꗣ_^F��@L5��z�\u000b�8�?\"~�5�E�Y�\r�z���yyl�E/���\u001e�(.�Ky\u0011+}�\u0004��\u0018�H����/\u001ba�O�y�g�\u001b��������t��lL�\u0006\u0011XB�r�᳠%\u001ao����R��\n\u000bV\u0001@8[����\\0�i�n�q`D1��@\r�M�\u0017��>xH������y�|H9�\u0005\u0006�W���`r��_��K�}��(%����5\t)=��6�N@�\u000e�:��\u0018��Gx�\u001a@\u0012y\fS\u000b�g+���3��>W�󀧇QY\u0004q�.5C��%�^�.� L��q:�ig��\r{\u0007H\u0017�� \u0018��fn�.M���\u0010�\u0003���Y2�� 9�\u001c?�� m�\ba2��v�\\����v","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d7dd50dc-b0bb-4676-99f0-58af4461d481","seq":1,"duration_ms":100,"bytes_in":546,"bytes_out":13,"enriched":{"digest":"6e6a627b880fc093","strings":["^xc+j","4gW}","q`D1"]}},{"timestamp":"2026-09-21T23:33:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-W*QpkI~Y6kQ3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d572a51706b497e59366b5133","method":"","user_agent":"","ja3":"","session":"1750aee5-a6bd-4c88-b47b-a30c2ba25399","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"90ca53cd9d5ef29b","strings":["BitTorrent protocol","<-BW160M-W*QpkI~Y6kQ3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T23:46:26.882699+00:00"}