{"ip":"106.222.211.30","total_events":576,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"576 events across 1 port(s)","confidence":"medium","network_type":null,"why":["576 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"123,315 bytes sent","bytes_sent":123315,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T00:12:00","last_seen":"2026-08-09T20:06:17","events_24h":0,"events_7d":576,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Mumbai","lat":19.0748,"lon":72.8856,"asn":24560,"org":"Bharti Airtel Ltd., Telemedia Services"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":576}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":576}],"recent_events":[{"timestamp":"2026-08-09T20:06:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-Tz5cV4TrceUG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d547a35635634547263655547","method":"","user_agent":"","ja3":"","session":"b68946f0-7d12-4bd9-ae34-5b05284697f9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c516131cc7c362c0","strings":["BitTorrent protocol","<-qB5120-Tz5cV4TrceUG"]}},{"timestamp":"2026-08-09T20:04:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��6J�(\n�ӄ\u0017����\\\u00053��ٽpO�;�ֆK�\u001e��\u001d��{�6���<���p�Zyѹ�\u0011\u000e��Ġ��]\u0015_�~��\u0012yɍ��5�t8�\u001f6h\n��d��[�q�<���\u0002���4�E�6ۍ*ep\u001f\u0004�\u0003D��3�z[(\u0007!9��\u000bE�š�M���g\t�/Z��X����\n%)f�\u0017s\u0000�\u0006��\u001d\u000e�\u001a�Ng7\u001b�\u0000}\u000f&�\u0010�\u0019�����L�\u001c_n\u0000��\u0011�/��\u0014C�n\"�ܘd��\u000fw�%��62e�\u0000��|�v���hY��^h���#��P2�v\u0015PuV\u0001-eh�2\\PKS\u0001-�\f{�\u0011��D��)�yl�B�)\u0010A�G,���\u0016�\u0000,F�t���\u0000}c��J}\u0011��P6�,0R\u0012\u0017+�\u00128�{�\u0000N��\u001b�3�T��\u0010�\u0005���J���H �\u000fP�q���\\�$\u0014�?%\u001f��P��Z��\u0019�","payload_hex":"b8f1364af5280acad3841789b0a5c65c0533fabdd9bd704f803bc8d6864bba1ee8bb1da5c67bb53694e3fd3cf5919870cc5a79d1b988110ef4bfc4a0f1c15d155fc77e98e91279c98d9ad935aa7438cd1f36680ab78b7f64dcf05be271ae3c8988d0028adbe634f645a936db8d2a65701f04a00344c6ee33db7a5b28072139f8e00b45c4c29af04df7b4df6709d72f5ae9e358f7f5c0df0a252966c4177300e006c1f01d0ee61add4e67371bd0007d0f26c710b319a49dc3edeb4c9f1c5f6e00bda511b72fbbef1443eb6e2298dc9864c0ca0f77b425f796363265d900bda47ca776e78ce76859e4a35e68b2e1bd23cbf45032d07615507556012d656889325c504b53012dc90c7be611b68d4493912995796ccc42b9291041e4472c81fdcd16a8002c46df74c7f6b4007d63d7d64a7d1185925036842c305212172bc31238f87b8b004e9bb91ba733e354fbe810c305927f8ba84a8ac1d5487f20f20f508171f396f85c8c2414933f251fe9a250dfe05a8d8819b3","method":"","user_agent":"","ja3":"","session":"2017b6fd-fb33-41d6-b405-e3d98b5f37e4","seq":1,"duration_ms":100,"bytes_in":373,"bytes_out":14,"enriched":{"digest":"fe925e1c3bf4a8a5","strings":["2\\PKS"]}},{"timestamp":"2026-08-09T20:01:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-~qvTmtL5~M.U","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d7e7176546d744c357e4d2e55","method":"","user_agent":"","ja3":"","session":"a850b834-737a-4c8b-b437-11a5ebfb2458","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"86b0a88a7e2d5e62","strings":["BitTorrent protocol","<-qB5120-~qvTmtL5~M.U"]}},{"timestamp":"2026-08-09T19:59:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"?�-�׾\u0015ªu��whJR�\u001eݯA\rQ~���k�iDC���\bj���\t\n�zG\r���j*�B\br�1\u001f+\u0002�����\\\fR�7d��v��цw�\u0000��\u001e\u00067�=�j\bed�gA�K���\u0011�ؘK��L�Ç!���\u0001���5YL�\\q����)��]D��C\u0010�ص�\u0003\u000bm���)\u0014\u001c�.\f�7�W�i�[t\u0018�qg�,���0�8�m?@q+u�\t\u0010���E�-6\u0002","payload_hex":"3fe02dc1d7be15c2aa75bdb177684a52fa1eddaf410d517ef7f8986bec694443fb82c8086abaab95090aba7a470dfcb6f06a2a9e420872c7311f2b029ae8f4a0e05c0c52dd3764e98576d1c8d186778c00a0911e0637d43dd26a086564996741e54b8df3a111d9d8984b9ce74cf4c387218282dc0184be9c35594ce25c7188f5c3f5299ea65d44afcf4310f9d8b5af030b6da99e8f29141ca72e0cc937cc578a69915b7418b47167b62cf49f9a309b38ff6d3f40712b75c509108899da45b12d3602","method":"","user_agent":"","ja3":"","session":"5e09263c-9ae4-47f6-85eb-05bbe47b7366","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":14,"enriched":{"digest":"ee6a0ea31f2a3e16","strings":["whJR","m?@q+u"]}},{"timestamp":"2026-08-09T19:56:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-zJ0tzFBX_8MC","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d7a4a30747a4642585f384d43","method":"","user_agent":"","ja3":"","session":"190c0f44-65d1-4dc8-af4a-4b0d9f08f807","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bee9c6429062c353","strings":["BitTorrent protocol","<-qB5120-zJ0tzFBX_8MC"]}},{"timestamp":"2026-08-09T19:54:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"bۉ@:2����8��\u0018�a��\u000f\u001b[N�\u001bX�\u0002\u0003A��V�F���\u001cV�\fPX\u0012N<>�O\u001a���9��~D$�w�:\u001aI�4������Dt�߀�\u0006�\u001a}r�\u0014k$� �?�g(\u0015�PZ�+P��h�!͂oj�<\u001c/�E�Z;�k3>m�\u0016X\u0014`sp�\u001de$����2�����x��m��9;q �b`F��H��9\u0006�����\rƟr���\u0015��T�ATpp\u0004���\u0016�S��.ʹ�¶z�.Y� x����@����=F�㝁��\u0003C\u0014a��.�\t�[�>H�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9cbf0f7c-3fba-46af-8083-a37a7666114a","seq":1,"duration_ms":100,"bytes_in":366,"bytes_out":14,"enriched":{"digest":"4fe2260a9e8ddbb8","strings":["","k3>m","ATpp"]}},{"timestamp":"2026-08-09T19:52:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-t6*9lwLmOg~H","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d74362a396c774c6d4f677e48","method":"","user_agent":"","ja3":"","session":"f0218cdd-6408-4b4c-960a-b282c40339a1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"53137ed25099bcd3","strings":["BitTorrent protocol","<-qB5120-t6*9lwLmOg~H"]}},{"timestamp":"2026-08-09T19:50:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u001aE\u0014��#i�\u001a��\u0019\u0012�( \u001c�7��\u001a\u0018���pL��\t�'�� �J\u0002�8���\u0013\u001a\u0010�F�\u001a�\u001f��\u001eY��\nHj���>j\fL���1���\n[��P+%���\u000617��D\u0005Y�z� p\u0017����߱�\u0006Cx�\u0006��u\n�j@�\u001d���c�k��9�\u001as\u0007��","payload_hex":"bf911a4514acf92369a51adef71912c628201ca237b5871a18c6f8d6704c9ff6099b27d7d420884a02f638f4f1d3131a10a3468c1aa41f8fef7f1e59eb940a486a9d828d3e6a0c4c928de531fb85e90a5ba9dc502b25b89fa30631379de2440559a57ab220701791a4a98cdfb189064378f606a5d3750a8a6a409f1df3b6f463eb6b8dbc39d51a7307e0af","method":"","user_agent":"","ja3":"","session":"5e2e3ae9-443a-477b-b176-5e1f9628e2c6","seq":1,"duration_ms":100,"bytes_in":139,"bytes_out":14},{"timestamp":"2026-08-09T19:48:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-dXtSYmxrpnT(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d64587453596d7872706e5428","method":"","user_agent":"","ja3":"","session":"67ea61e3-ff92-4a23-acdd-c453803158a6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0d31df58f5cd45d6","strings":["BitTorrent protocol","<-qB5120-dXtSYmxrpnT("]}},{"timestamp":"2026-08-09T19:45:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��������w�_G�����\u001e2���E�ݰ��!]�B�[\u0019$�q:{�-�a!z@�\u0019�։\u00181�~p�\u001d���b\u001cg���F�[m\u000b������U\t��ۯ\"FoM�5(��<>��\n�T^�\u0014\u001d�N(~�b�?��\u0002�7�