{"ip":"45.224.111.22","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"68 bytes sent","bytes_sent":68,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T13:54:40","last_seen":"2026-10-05T13:54:40","events_24h":1,"events_7d":1,"geo":{"country_code":"BR","country_name":"Brazil","region":"Pará","city":"Breves","lat":-1.1666,"lon":-50.5586,"asn":266911,"org":"VicNet Telecom"},"source_domain":"45-224-111-22.vicnet.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as266911","label":"VicNet Telecom","category":"isp","url":"https://www.peeringdb.com/asn/266911"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":2,"protocols":[{"protocol":"udp","events":2}],"ports":[{"port":39131,"events":2}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T13:54:36","last_seen":"2026-10-05T13:54:36","recent":[{"timestamp":"2026-10-05T13:54:36","port":39131,"src_port":57472,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:i���/�\u0018j��@M�\u0011���\u0017�T9:info_hash20:`��$|8�΍���Ә�\u0005M8��e1:q9:get_peers1:t2:��1:v4:LT\u0002\u000b1:y1:qe","payload_hex":"64313a6164323a696432303a698fe4902fe4186ab7fd404da811808fd917af54393a696e666f5f6861736832303a6087a5247c38b6ce8da0dfd7d39895054d38f9ee65313a71393a6765745f7065657273313a74323ae3e6313a76343a4c54020b313a79313a7165","sni":"","session":"06f17941-08c7-439f-8086-4dbdf37e165b","bytes_in":104,"source_verified":false,"enriched":{"digest":"4c7118df582d2e41","strings":["d1:ad2:id20:i","T9:info_hash20:`","e1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T13:54:36","port":39131,"src_port":57472,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�I�R�z\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000ƕ\u0000\u0000","payload_hex":"4100b749aa52bc7a0000000000000000c6950000","sni":"","session":"50b2003b-8543-4adb-986a-6309a1eadfd0","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":1}],"recent_events":[{"timestamp":"2026-10-05T13:54:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6PwcS(81!FWJ2i-ome","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436507763532838312146574a32692d6f6d65","method":"","user_agent":"","ja3":"","session":"24e44e1b-184e-49a7-91d2-4bde074d90fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1d5ac151eb94329c","strings":["BitTorrent protocol","<FD6PwcS(81!FWJ2i-ome"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:23.220595+00:00"}