{"ip":"104.28.245.96","total_events":760,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"760 events across 1 port(s)","confidence":"medium","network_type":"CDN","why":["760 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"51,680 bytes sent","bytes_sent":51680,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T00:51:33","last_seen":"2026-08-31T20:28:13","events_24h":48,"events_7d":390,"geo":{"country_code":"PY","country_name":"Paraguay","region":"Asuncion","city":"Asunción","lat":-25.2869,"lon":-57.6511,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":760}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":14},{"date":"2026-08-16","count":19},{"date":"2026-08-17","count":69},{"date":"2026-08-18","count":67},{"date":"2026-08-19","count":57},{"date":"2026-08-20","count":55},{"date":"2026-08-21","count":47},{"date":"2026-08-22","count":12},{"date":"2026-08-23","count":30},{"date":"2026-08-25","count":61},{"date":"2026-08-26","count":42},{"date":"2026-08-27","count":49},{"date":"2026-08-28","count":159},{"date":"2026-08-29","count":20},{"date":"2026-08-30","count":11},{"date":"2026-08-31","count":48}],"recent_events":[{"timestamp":"2026-08-31T20:28:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0005�%~\u0016<��\u0015�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8059e257e163ce8ab15b3","method":"","user_agent":"","ja3":"","session":"4b028987-2425-473a-9224-3c51e0195c30","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"efd9a8e147301de4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T20:17:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\n\u0014Y\u0003AQ�h�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8a00a1459034151bc68da","method":"","user_agent":"","ja3":"","session":"096c9fe2-2fb5-404c-beb9-aab0f60b0671","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8cab0325e030dcc8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T20:14:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0007���� \u000e�\u0019@","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b807edb89298200ee31940","method":"","user_agent":"","ja3":"","session":"03a285ef-6332-4df9-8b03-7b81016d3d9b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1ea8b11067f79079","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T20:08:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����\u001a�?\u0004�M#�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b88ede1aa33f049b4d2384","method":"","user_agent":"","ja3":"","session":"7794c4d3-a0f5-4aab-83eb-1d6039946645","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"dba5bff4f730b8d6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T20:07:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���|�b*����z","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8857cd9622abaac9eaf7a","method":"","user_agent":"","ja3":"","session":"4671b8b5-5654-468f-a8d0-88f8da047f1e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"02c14ecaf1fe5f6b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T17:10:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����q0\t��Ɇ�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b6b9713009f5bfc986de","method":"","user_agent":"","ja3":"","session":"8aaa80a5-51b1-4ca7-afc3-975f910fcc4e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d69898170c671768","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T17:03:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��3\u000bg��kux \f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8330b6780f66b7578200c","method":"","user_agent":"","ja3":"","session":"931f6d5d-76ac-4d05-a4db-13a1e5b6b877","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"368b78c0c8ebfef6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T16:58:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u001f\u000b���{H�\u0011�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81f0bf3b6b27b48a111f9","method":"","user_agent":"","ja3":"","session":"2793e7d3-67f1-475e-ae86-1fcf3ebc7682","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9ac3d3c877c3048b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T16:53:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��W_�S\u001f�w��R","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8575fa9531fba779d8052","method":"","user_agent":"","ja3":"","session":"f5ee485a-f612-43a5-acf4-fa99146f329b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1bd07a63b14ef226","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-31T16:51:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��r�����\u0003?l�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b872fd8bdeeaff033f6ccf","method":"","user_agent":"","ja3":"","session":"cf7b2ec1-788b-48b6-a1eb-95c86f66339f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ecece3c0e91758aa","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:16:46.573742+00:00"}