{"ip":"131.0.196.254","total_events":1012,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,012 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,012 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"215,796 bytes sent","bytes_sent":215796,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T04:54:29","last_seen":"2026-10-02T03:41:01","events_24h":0,"events_7d":1012,"geo":{"country_code":"BO","country_name":"Bolivia","region":"La Paz Department","city":"La Paz","lat":-16.5002,"lon":-68.1493,"asn":27882,"org":"Telefonica Celular de Bolivia S.A."},"source_domain":"SCZ-131-0-196-00254.tigo.bo","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27882","label":"Telefónica Celular de Bolivia","category":"isp","url":"https://www.peeringdb.com/asn/27882"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1012}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":849},{"date":"2026-10-02","count":163}],"recent_events":[{"timestamp":"2026-10-02T03:41:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-kkZV.26xAjWn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6b6b5a562e323678416a576e","method":"","user_agent":"","ja3":"","session":"f0f8e1ef-5e71-4cc6-a65e-d7ffadfe8ec7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7fcdad30f90061d0","strings":["BitTorrent protocol","<-UW160N-kkZV.26xAjWn"]}},{"timestamp":"2026-10-02T03:39:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ս�E���P����Z���1\u0017���_=_?�����8��pR\u0019'��95�\u0019\\\u0013&�b��v�\u0006\\~�\u001dG�h\u0005\u0005���\u0004�,j��@�t�OG��ݫ\\\u0014\nr�;L,��?���v��\u0018R,�����n�@U\u0019��y�\u001e\u0014�$~���\u0015\u0013(��E7[Y�(\\����2NY�\u0011:�\n�I���<�\u000b��\u0007����IZ?O�\u0004(���EW�=�E�L��N�bQ���6��h{�\t�\u0018���_�]��v\u0000Qrr�\u000b\u0019�g(R��EQ","payload_hex":"d5bdb645ab88d550ebedb2b15af2dedb31178fffeb5f3d5f3f9bff9ff9c038b5d6705219279b873935c7195c1326e862a48e7685065c7ee01d4799680505bceada04d42c6a90d340c274b64f47b3f7ddab5c140a728d3b4c2cb4ae3ffbcce9769acd18522ccae2acfdfe6e8740551983ab79ea1e1494247e81b69a151328e49c45375b5995285c898c94dc324e59ef113aa50ad449aca8da3cd20bb8ed07c4dfc4c6495a3f4f8a0428ee9efe4557aa3dd745ab4ccad24e876251b9eece36b1c5687ba609ba18bb82dc5fa55de0d57600517272810b19af67285285be4551","method":"","user_agent":"","ja3":"","session":"8c79b5e1-248b-4acd-8906-3df9e80ded20","seq":1,"duration_ms":100,"bytes_in":222,"bytes_out":13,"enriched":{"digest":"d5462539ad95dadd","strings":["E7[Y","IZ?O","vQrr"]}},{"timestamp":"2026-10-02T03:38:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-mTf6PQWVd.wp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6d54663650515756642e7770","method":"","user_agent":"","ja3":"","session":"31e4ffe8-87bf-44eb-bab3-fe4174011955","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ca37948f41c61398","strings":["BitTorrent protocol","<-UW160N-mTf6PQWVd.wp"],"iocs":{"domains":["uw160n-mtf6pqwvd.wp"]}}},{"timestamp":"2026-10-02T03:37:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�t�Her\\��P��y͏�~�D�\n\u000fU��3پ�Pm��&ԍs\u0018\\�\u0019�\u001eC_\u0007I���a���\u0016�geʓ[Ž����}��BS�\u0006�Xd�'m\u0012�)@\u0001�\u0002��ȢvH���1�\u000b\u001a�`D�m��\u000eӄ���\u0019W��ۺ\u0001��R��瘸bE�Î\u001do܊\u000b��᠞��PܟԤ�&�Enӿv\n\rGz���vp������P^��FW���잩E�Jw��*�&�Zf�<q��owg*�\u0004����\u001d\u0003�Z�Y�\\\u001a��X��Gkn�&�ьEE��\u001d�\u0019�","payload_hex":"ec74874865725cfaf450c67fe879cd8ffd7e9744b00a0f55e8cd33d9befb506db8f026d48d73185ccc19971e435f0749c6f2da619d8aa816916765ca935bc5bda68afcae7d8a864253d506ab5864fd276d12ff29400187027fc8eec8a27648bad0fa31ed0b1ad96044b86daf800ed38495b483195798e3dbba01a4aa52a2d8e798b86245cac38e1d6fdc8a0b8db2e1a09eff8d50dc9fd4a4aa26aa456ed3bf760a0d477abefbe77670bb87a290cdff505ed3c34657bc89a1ec9ea945f64a77dbf82aa226905a66ca3c71e8966f77672a9304dbfaf1c71d03c55a9d59f35c1ac1f458f3d4476b6ec226e3d18c4545d4c71dc919d5","method":"","user_agent":"","ja3":"","session":"87b4efa7-2eaa-4d13-937c-cc0405d248d0","seq":1,"duration_ms":101,"bytes_in":244,"bytes_out":13,"enriched":{"digest":"143e673cc1f48d73","strings":["Her\\","owg*"]}},{"timestamp":"2026-10-02T03:35:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-tXEU5dRB!tyv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d745845553564524221747976","method":"","user_agent":"","ja3":"","session":"99eddbf0-23e3-4d7a-8abe-8208c58359ca","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5275ed8e1bff6a83","strings":["BitTorrent protocol","<-UW160N-tXEU5dRB!tyv"]}},{"timestamp":"2026-10-02T03:34:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0002�Ik��Lt���� \u0000앋G<t���d4(��\u0018��ϙ�\u0013�Q\u0005y�Vn\u0005LX��.=Y�\u001e�\u000fQ\u000ep�4���!�\u0000�uϲ��bI�\u0006y�\u0013\u0012�O��3���=���\u0003�ލ������5X\u0012�ˌ�<��u:�&\\G�_��M\u0000\u001b[�n�t\u000e\u001f\u0002�\u001c&\u0007F�S��\u0014��{�� qYt�P�S��»��՞\n��+�[�bȺ}\u0006��ً��u\u000e��","payload_hex":"a402ef496ba6e44c74c6fcb9b62000ec958b473c74bef8c9643428f08018a4a1cf99d013cb510579ea566e054c5898ce2e3d59c31ef40f510e70ee3483ebee21ea00e475cfb2d9d36249e80679931312e94f82dd33e3edf33dafa5c303efde8da6aeebf08aee355812b6cb8c823ca3b2753af3265c47e95f91d44d001b5bf66eb0740e1f02f11c260746d453bbd714a1b27bfca6207159749550b253d3e2c2bbb08bd59e0ae8ff2b925bf062c8ba7d06b596d98bec9e750ef1c0","method":"","user_agent":"","ja3":"","session":"61072be4-9a08-47f5-b1fb-141fb36d9208","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":13},{"timestamp":"2026-10-02T03:32:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-meK*kxZXEA)u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6d654b2a6b785a5845412975","method":"","user_agent":"","ja3":"","session":"80ec1a8b-7e4e-42b3-b143-e3700bbcf6f2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7bbc8a7c64ec2f11","strings":["BitTorrent protocol","<-UW160N-meK*kxZXEA)u"]}},{"timestamp":"2026-10-02T03:31:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�w�\u000b\u001bl2\u000f{G짒\u001b���%�c�@��h\n\u000e��o\u001fd�S��:͓�%�\u001c\\Ļ�O�(�z�X\u0015�\r\u0001V�֏\u0010�D���\u0019�����F]�u\u001fd}t\ng/.�ԄJ\u0004�R�*\u001d龪bD�=}����B\u001f�\u001e�\n?Ox2��\u0010���Va\u000f��k���=1*x7��Lɋ-\u0015�=J��d�>\r �c�F&VE��ň��j��3�Z���2�\u0007�\u0006N���k�i��Oq\u001e\u0012�\u0010I,6\u0013A��V9�ms1X��H8^�\u0004JW��c��7[j;���\u0001|e�� ����T,C���\u000b���/\n�I�|�>\bv��Ţ.πo�\fH�&р\u0005\u0019ul���d��A\u001f�5]�H�+\u0005Ŋ=4\u0002�\u0018�#��hO��l���c�X���N��,��\u000e\u0007���\u0000��[bE��dg�7�3/��񹁎\u001c\u0012�T�\u001c%��c_T�����0\u000e�tA``-K8���\u001bA�Y\u0004t�v���\u000eh�q�?isΆH\u0018\u0005�>\u001a\u0001\u0012\n�=��^�o���\u000f���ҀH�u�IÙ��\u001c\\�w��\"�d��K\"��%4f�/咽T�pd�\u0005t��x�1gE��Ї:�\n\u0016(��]0h��I��\u000f�����Iz�������P\u0003Q2�r0��\b)����C�Nj\\V�����\u001b\u0002��\u0016<E\u0007��m���\u000fz�Sj�\u001a����\u001d�W�mܺ\u0006�T\"KΓ�Q�\\ڔ\u001c!��\r��;�\u001av1�~����}","payload_hex":"bc77ed0b1b6c320f7b47eca7921b9792fd25bd63d740ecd6680a0edcfb6f1f64f053cfd03acd93ce25fd1c5cc4bbf44f9b28db7abf5815830d0156b6d68f109144a9bfaa19888bf3c3c4465da3751f647d740a672f2e95d4844a04e252ce2a1de9beaa62449a3d7dbaa5e4f5421f9a1ed40a3f4f7832f4ed10b2bb8056610fbf886bfaefc13d312a7837cbf34cc98b2d15ce3d4abdf364eb3e0d20fd63f546265645c9d1c588efe96ae0d633fd5af8bfb032dc07d0064e9becc86bd069e0b84f711e129d10492c361341fa9f56398d6d733158bcf448385e92044a57ace26381cf375b6a3bbfeb82017c65f6e820f1e9b7f1542c43f7a9e00be1a5c42f0aef49ee7cf93e0876f8b9c5a22ecf806ff00c48b326d1800519756cb382e964bcc7411fee355ddd48ce2b05c58a3d3402be188c239cac684f80b96c9aeee263d45889a8bb4ee2c82ceafc0e07fbd7e200e4d75b6245a1816467a837af332fe08af1b9818e1c12ef54b41c2597d8635f54f49dc2f9e5300ee1744160602d4b38f2b0811b419c5904748f76908d970e68f171963f6973ce86481805fe3e1a01120aad3d8cce5e936ff4b7de0f9ef3a8d28048bc75d349c399a6831c5ce077c6ce22bb64a7bb4b22b19b253466eb2fefa69e54e0706494057483fd78e3316745ac99d0873ae50a1628ede15d306894e37f49ccd90f83c5f18995497abdb0edb7d2e5ff50035132e4723086c00829fbcbeef543fc4e6a5c56baefcff1fa1b0285cd163c4507ab996d8b8cf50f7afa536a901ad5e085931ddd57b26ddcba06bf54224bce93f251dd5cda941c21e7f50dedb63bbf1a7631997e80ccfb817d","method":"","user_agent":"","ja3":"","session":"068e3bab-ea7e-4e8c-980c-6484a9230eb8","seq":1,"duration_ms":100,"bytes_in":601,"bytes_out":13,"enriched":{"digest":"4daaddd7a693174c","strings":["?Ox2","=1*x7","F&VE","ms1X","7[j;","tA``-K8","Nj\\V"]}},{"timestamp":"2026-10-02T03:30:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-vkh0tsuaiu9h","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d766b68307473756169753968","method":"","user_agent":"","ja3":"","session":"3bfc8808-4c50-4acb-8121-81e2c14e3a33","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"26ef1272910fddf0","strings":["BitTorrent protocol","<-UW160N-vkh0tsuaiu9h"]}},{"timestamp":"2026-10-02T03:28:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�}@\\{�����1\\_3����Y�����Z�|K�M�9��yH7}\u0018����H#��Ԏi'z��Ơ|_2�=m}��=�\u0005\u000b�EL����.�Џ\u0006���{@~�hs�\b�m$l\\�Ҙl�����BT����nR�\u0013����5\u0002]�Ր�#Qh�z���M~[ԃ>\u0019ȃ�q\u0014���\\�kS�\u0015:�\nW��\u000f\u0002UN�o�Hp��NW��kݺ�\u0019�0�G�\u0005؏\u0013D�\u001e05X�SF�Q(%��\u000fg��C�/���9�͒0P�B�~��w�E��*2�*���\rr\b����z\u0011m�6\u0010%������%���\u0006�\u001dE)\u0013�=�����*%\n�D�+17��\u000eH\rc\u0013�5��&���\u0019�dGĆ.k1\u0018��u����kz�p\u0013�Y��\u0004) �ӞFR�ߠ�r�3�=_�D���t�\u0000���3\b!)��,f\u0016mP�\u001e\u0019�\u0015��j�������!���A�`�v_\u0014xwf��=D�<�U�n��,&\u0010\u0018�T�v%���E+\u001e�\"�:����zy�;1 \u0019��,�\u001d\u001c��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0f67b4f7-e16a-4719-a68b-3cfea832a14f","seq":1,"duration_ms":100,"bytes_in":448,"bytes_out":13,"enriched":{"digest":"a840c518fe46e56b","strings":["1\\_3","yH7}","m$l\\"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:26.418704+00:00"}