{"ip":"45.183.226.248","total_events":1458,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,458 events across 1 port(s)","confidence":"medium","network_type":null,"why":["1,458 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"306,333 bytes sent","bytes_sent":306333,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-06T08:49:46","last_seen":"2026-09-10T20:26:21","events_24h":444,"events_7d":1458,"geo":{"country_code":"BR","country_name":"Brazil","region":"Santa Catarina","city":"Penha","lat":-26.8042,"lon":-48.6287,"asn":269312,"org":"NETFLY LTDA ME"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1458}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-06","count":506},{"date":"2026-09-07","count":146},{"date":"2026-09-08","count":249},{"date":"2026-09-09","count":160},{"date":"2026-09-10","count":397}],"recent_events":[{"timestamp":"2026-09-10T20:26:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R�S݃u\u0004�\u0000��ˊ�9~�3q�=c��q��[\r钑Y�U��C�_�\u0010ot�ΪO܈kz,ù<�|+\u001a���\u0007\u0001\u0001��d\u001e�������kt7�o���Β��1cW�s3�Gl��-�9'��-���\u0018K�=\u0002Γ��le\u0015����qod�\u001f�\u0016��.i9�t�=�#�\u0019��c�\bJ�@�ɶ\u0000�h\u0004�Qa�Y�\u0010\nZJ,�d>�r�","payload_hex":"52c653dd837504a10088b5cb8ac5397eba3371dd3d63bd9271b4955b0de99291598d55edff43df5fa8106f74e0ceaa4fdc886b7a2cc3b93cab7c2b1ab8f7fd070101dcf2641ed7d0f9f1b6e6e96b7437b06fb29da3ce929cbd7f316357e37333b7476cfddf2dc33927acb92d838cca184b933d02ce93e5f36c6515d8c9d0c7716f64a31fa316b1f62e69398274f83d9923a419bbaf63dc084aad40f9c9b600a76804cb516198598f100a5a4a2ce2643e9672d9","method":"","user_agent":"","ja3":"","session":"63cbdb45-a4f3-44bb-bd51-4d0045593ef0","seq":1,"duration_ms":100,"bytes_in":179,"bytes_out":14},{"timestamp":"2026-09-10T20:25:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6G1*wGZGITFuI_hP3x","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443647312a77475a4749544675495f68503378","method":"","user_agent":"","ja3":"","session":"271e533b-2e8d-4fdd-b2b5-7f90e8940063","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4fcb35d15235448f","strings":["BitTorrent protocol","<FD6G1*wGZGITFuI_hP3x"]}},{"timestamp":"2026-09-10T20:23:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"L�:Hc��,\u000e�\u0006*�\u0012ꌭ#e`({�\n��&�m\"\u0005�X\u001b�M�l$\u001d�K,׉����UU�/ ������0IX��\\�)T\u00135AW��������H�z}���W\u001a�\rR\u0011�U�����,\u0002�l��\u000f��G\u001aW�ݩ��)��ZP�![<�%0\u0003���\u0001�\n��J>E�\u001f�IB\u0006��dgT��b\rvSE\u001c'�ݏ�\u0002��@W\u001a\tN�~�w>#9En��!\tÁ�pĻ�iIPW\u0013݆�Z~��\u001dh\u0010��l���6�\u0017��)�\u0004�>�`�0߈\u0004�<\u001f\"�娋�檀\fL�7�F��\u000e�\u001e��\u001d���(��\fkvR���q\b\u0006U\u0005Թ6\u0016�4�E�\f�\f��a]�Z\u001f!J��@���D(�u�n�Y��~\t�\u0007Y�'5b���\u001c��Z��XR\u0002�:��o#yq����\u001eW�\u0002V�����.l�9����E��o(�2�HM\u00141�3�x�\fן%\u0016�c&\u0017�\u0018UK�������'�EN�}G����\u001f�\u0014C,�/J�\u001f<�N:|�\rPb�����\\��ÌgЏ\u0018���Mcpg`�\u000f3Q�\u001d9\u001b2\u000eI\u001d\u001c\u001eo\u001b��\u0016��V��� �\u0003�L��2�h n[�v\u0017_�1=��&��q.v�Ql!�[��T�I|�9\u0019��\u001b��O\\]��ٌ�\u001d%Q���\u0016L�Tq��XHYL)ŋ_�\t\u001bX�\u0003\u001d8\u001f\tL�1.jC��^���N�\u0001�LuL������fb��H�/\u00177","payload_hex":"4c833a4863f2de2c0ed2062aeb12ea8cad236560287bbf0a87cf26e36d7f2205ef581bb14d8c6c241d814b2cd78988e79ccc5555ad2f208eaacaece2ae30495895bc5c8d295413354157b4ad82d6c6e7d5f548ce7a7dbda9ef571af70d5211ce55bef987aab92c02cf6c97d30f9cfb471a57a3dda9eb7fb72999d15a509c215b3ce325300398b2a9019f0acecf4a3e45f01fa9494206ee95646754c3ce620d7653451c27a8dd8f9802b2c440571a094ea57e86773e2339456ee1cb2109c381ef70c4bbe06949505713dd86d25a7ebaaf1d6810ccca6ca2878436b41793f8299b049a3eba60ae30df8804f03c1f228ee5a88b87e6aa800c4ceb37da468afa0eb01e90d01d92bfa228f8cf0c6b7652f5f0807108065505d4b93616a734d845b40c980c9ecd615dc35a1f214af1a440a1e7d344289b75f56e9159a6bc7e09bb0759b7273562aab2a91cb8df5ae7a6585202d93a87ea6f237971f69c8ef01e57f5025696e7f1eeca2e6cc9399fe68ef64597b46f289b3286484d143192338478df0cd79f251699632617ec18554b86edd7d4eefd8a27ff454e877d47d8daf7c71fad14432c7f912f4a9b1f3c8f4e3a7cca0d5062f4b193eedb5cfba2c38c67d08f18f0a2ee4d63706760e20f3351ea1d391b320e491d1c1e6f1be1d316c5ef56a8e0bb208703cf4ccdda32d368206e5b8176175fbc313df6ea26bfcb712e768f516c218d5bffdc548a497cf93919cfd11bc5fb4f5c5dfdb0d98c831d2551eebbdf164ce35471acf45848594c29c58b5fc2091b58b1031d381f097f4cdf312e6a43a2f75ea1caea4e9901924c754cbf8af6af919266628ba0488b2f1737","method":"","user_agent":"","ja3":"","session":"a16a37f4-3b20-4e1e-b736-505f1835688c","seq":1,"duration_ms":100,"bytes_in":603,"bytes_out":14,"enriched":{"digest":"de4fba2d2468e1e2","strings":["#e`({","w>#9En","iIPW","o#yq","Mcpg`","h n[","XHYL)","1.jC"],"iocs":{"domains":["1.jc"]}}},{"timestamp":"2026-09-10T20:22:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6Vzu54aPW1omGOOenf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436567a753534615057316f6d474f4f656e66","method":"","user_agent":"","ja3":"","session":"1c45dc84-3b2d-41c2-a189-e344edc2e2b0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"35fb581d37d0db2f","strings":["BitTorrent protocol","<FD6Vzu54aPW1omGOOenf"]}},{"timestamp":"2026-09-10T20:21:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"X�}\u001c\u001bi��V�\u0007I���h�\u0000\u0011�H<1�4?Ș㈖[� �C�\"�ؑ\u001c\u000b�T�|2Xƞ[�\u001d��\u0019�Vy��͕�lF�2Xx���ѸjE��^sO�\u001c\u00022a�\u0002\r0�ݶ ���m��x�H\u0018/��ht�o���#HH���\u0003����D�wIۙ","payload_hex":"58817d1c1b69e7d356bc0749c0f6fc68e8001197483c31ba343fc898e388965bd420f443b322e2d8911c0ba254aa7c3258c69e5bb01d8df519d356799cf9cd95ef6c46c2325878e58fe5d1b86a45bebb5e734fa81c023261cf020d30feddb620d3f3dd6df39078bf48182fe3f46874c76fb9a69d2348488188fd0397e6dbff44fa7749db99","method":"","user_agent":"","ja3":"","session":"b1877e31-30b3-48fa-98e6-382d227af14a","seq":1,"duration_ms":100,"bytes_in":133,"bytes_out":14},{"timestamp":"2026-09-10T20:20:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6B8OXEauT6hvziMMv!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443642384f58456175543668767a694d4d7621","method":"","user_agent":"","ja3":"","session":"78ba271d-262b-40e3-9e46-bf5a7040b0db","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"60ddde69c956bd26","strings":["BitTorrent protocol","<FD6B8OXEauT6hvziMMv!"]}},{"timestamp":"2026-09-10T20:19:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"5�\u0010\r���;��[�����+MWaɨ(�I\u001d\u001dd�\t�N��N�{�\u0013ރ��\u0016��݋i\u0019�\u0014O�L�H=h_m\u0006qW0i\u0012��lbe�\u0005���K\u0010\u000b=m\u0014�l&\u0004�y\"\u001cm �n�tzty\u0011\u000b�\u0006\u0004c�f��\u000b�bh2�\u0006�kt�.:\n�|9z�h�ꇜX�н�pLY�P\u0003GG�z[�2:\u00167�\u000f��\f\u001bV���T/�R ��\ru�\u0006�\u0016}�-Y�m\u0000�<�\u0017Z\u0002�I�\u001aE\u0012\u00034�Ydck����L}Q\u0010k\u000e�n\u0018�9\\�I~��?\r3Z|.��U�����x ��?-���ӆ���C�q�n\u001e���J��3\u000bq�\u0011&\u001d�Y>\u001f6���r�<\b�\u0002���aa�Z�P\u0014��.)|�}A��\u0000\u001e@��<\u001b�?��\u0017�FHw���M\u000b˿r�h\t�l\u0018�ňP�\u0015�Fl�š3���v\u0016\u0015�Ƹm<D��?����\u000f�%�_\u001e\u0014�\u001c����\u0002����JO2�\u000b��,�.��\u0015�Qf\b�B�r)�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"de4ab93d-d3ee-43ee-b9a0-1c2a329a0186","seq":1,"duration_ms":100,"bytes_in":411,"bytes_out":14,"enriched":{"digest":"86590b3161f94a66","strings":["+MWa","H=h_m","qW0i","tzty","Ydck","3Z|."]}},{"timestamp":"2026-09-10T20:18:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6U8iYyf~re7(El9-m1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644365538695979667e72653728456c392d6d31","method":"","user_agent":"","ja3":"","session":"91e08743-86b7-4b9e-9736-93b5d7652f41","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5d54b9584a49ca94","strings":["BitTorrent protocol","<FD6U8iYyf~re7(El9-m1"]}},{"timestamp":"2026-09-10T20:16:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"b�Z�k�$PM�,F��|\u0004X|\u0007\u0013N/Rf�\u001f���_���]��,\f^�,��\u000f!�\u0010s�Os.N�İ�(*�ۂ��l�\u0017�~�����\f\u0010B\u0010����\u0002}<�\u0011�s\u001f?h�\b�mú_s\r����\r��Ē�b�xD�ԑ��!��\u0014\u0002h|\u0019.����H\u0002Q\u0010.zU?��-��Azp1R�A��OҏXX}k\"�q�7��X*��;��\u001e\u0004�.�3�Q�_'κ�v���Xv����CE=\f��������V,��\u0004M\f��mr-�`��d�&�,\u001fM\f�uZ��^\u0006k>0\r:���ғ���\t��\u0006@��\u001ct�^N뗘��b�K�\u0013E�\u001eqM\u0013�{GP��a��p\t\u0011�`�cB�\n<K׮XL�jN����~�j�@.�\u0018�d w0?>����mb)�>!F�Kn{: x!�<�TP������\b\u000f<d�/��?��4\u001f/��zF���\u0014\u0016�����\u0018m�\u001a\u0019�,�>�H�P��q<�h5V��qζ�P ܉������������ ��\u0010����YO֯�F֮AcPa\u000f�\u0006�����9�#Đ>�\u000e�с�c3\u000fx�\r���.�+n5��;���iHl2���%��\u000f�H1k���\u0005I엚߻Ձ�͢\u0013�u,����PD�}�`–���v`��yv�wH�3�p�_1��\u0019�\u0007\fS�k\u001d�\u001e�\u001f�n/�/-#\n\u0018","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"407268b2-de41-4f56-8b80-64ae8ec92cd0","seq":1,"duration_ms":100,"bytes_in":585,"bytes_out":14,"enriched":{"digest":"e0deeed94faa0fa2","strings":["N/Rf","Os.N",".zU?","Azp1R","XX}k\"","d w0?>","Kn{: x!","AcPa","iHl2"]}},{"timestamp":"2026-09-10T20:15:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6RYBQGQyO_UN~Mxo-I","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436525942514751794f5f554e7e4d786f2d49","method":"","user_agent":"","ja3":"","session":"748a2d55-8701-498c-9d05-73cd49953698","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"608164832e01f4ed","strings":["BitTorrent protocol","<FD6RYBQGQyO_UN~Mxo-I"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:19:18.447082+00:00"}