{"ip":"131.161.61.230","data_as_of":"2026-10-23T02:53:05+00:00","observed":true,"total_events":887,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"887 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["887 requests against 1 service(s), so the activity is deep on few services.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload was observed, so this describes volume and focus only.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"182,072 bytes sent","bytes_sent":182072,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-07-02T19:45:54","last_seen":"2026-07-05T17:32:54","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Paraná","city":"Curitiba","lat":-25.5026,"lon":-49.2908,"asn":263569,"org":"DIRECT INTERNET LTDA"},"source_domain":"131-161-61-230.directwifi.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as263569","label":"Direct Internet Ltda","category":"isp","url":"https://www.peeringdb.com/asn/263569"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":887}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[],"recent_events":[{"timestamp":"2026-07-05T17:32:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160P-ykkvwMhFJv).","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630502d796b6b76774d68464a76292e","method":"","user_agent":"","ja3":"","session":"7f1db008-4f7a-4205-b417-c927cbb6abcc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d9fd1f6614a140b4","strings":["BitTorrent protocol","<-UW160P-ykkvwMhFJv)."]}},{"timestamp":"2026-07-05T17:29:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000#�� ��.����tU��g�o���ԿR\u0013\u0003)�%1�\u0003�#�lV����#R��0P�\t�s\u0019^���E]����}���R����\u0013ǽ����z�MNF�\u0004v_�h\th�C�P�bF@ۀ�ۺ��\t\u0011\u0000p��U��'�g,5���3������/���+�G�dz\u0017_��@�\u0018$^Ng~�\u0006��U\u0016G%�v�~�U��1!f�Y��j���\u0012�LJtXU�:��A�G?��l","payload_hex":"0023a7c820a3ac2effaa91f47455f18b67c76fbfefead4bf52130329be2531d603e223db6c56a085fda12352aa893050a109f473195e9df080455dbeefe7b37d92ea9c52c1a790e413c7bdfcb1c1907aca4d4e469c04765fc6680968b243e8508d624640db808fdbbafdba09110070b5fa558ae827fd672c358de3c133ac96d0e2deca2f83a1f12ba347ca647a175ff9e1409918245e4e677e92068bf1551647258a76fb7ee255f3a3312166a459e5d46a92e6c612b34c4a745855df3aa1c241d5473fb2f06c","method":"","user_agent":"","ja3":"","session":"d2ffcedf-0894-4bf8-ae90-94b74e33497b","seq":1,"duration_ms":100,"bytes_in":198,"bytes_out":14,"enriched":{"digest":"8bb3f340a867c24c","strings":["$^Ng~","LJtXU"]}},{"timestamp":"2026-07-05T17:26:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160P-_xsB(kCtlaE0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630502d5f787342286b43746c614530","method":"","user_agent":"","ja3":"","session":"b24705c1-1b2d-4367-a019-0d4e15d4d317","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a47d04e531ee15b5","strings":["BitTorrent protocol","<-UW160P-_xsB(kCtlaE0"]}},{"timestamp":"2026-07-05T17:23:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ّ\u00040lg����\u0004ki�j�\u0017����w�����K\u0006�,O��FoL��$��G�YS�BL\u001b�C\\?Ş���3|\u001e��&BDv�eW�\u0011�M߸����NZ� �hrWďn��M.��\u000bz�����\u0010��b&Ĉ\u0000�]\u0000c\u0003!�a�s\u0001b��?\u0000\u001d8���\u0011d�\u0010\"V?����\rb�\u000b&�\\��9ճ�F�L��Q~��[�5���깸�9��a�#Άl�9�>\u000f/���","payload_hex":"d99104306c6789878bd6046b69ed6adc17f3b599c677a4a4a186a14b06ac2c4f87da466f4cf5da24ecf647b05953c6424c1bf4435c3fc59ea4f49c337c1ee6d726424476af6557bf11a24ddfb88da6af834e5af42086687257c48f6ee1ac4d2ef2f40b7a8ae3e785c410e5aa6226c48800805d00630321ee61a57301628be03f001d38adf9f411649f1022563fecebdeee0d62b30b26de5cc5d339d5b3fd46ec4ce495517ec4cf5bb9358796f9eab9b8eb39f1d761e423ce866c8339913e0f2fc9f5b9","method":"","user_agent":"","ja3":"","session":"c120a2d5-8c3e-4f97-a7dd-7b80bc1c05b4","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":14,"enriched":{"digest":"f4e136cbd1d09b37","strings":["&BDv"]}},{"timestamp":"2026-07-05T17:19:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160P-LfIna*nmsLhC","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630502d4c66496e612a6e6d734c6843","method":"","user_agent":"","ja3":"","session":"8a896d4a-25c3-4723-9707-ae699ededea6","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e60b284763f32427","strings":["BitTorrent protocol","<-UW160P-LfIna*nmsLhC"]}},{"timestamp":"2026-07-05T17:16:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Qy�����T�#�0\u0010\u00170��2`lf��\u001c0H�%��\u0019p8�N\u0001\b�c���� 5�MuX\u001e�Y\u0014-\u001f�����\f�❋��F����\u000e�7X��2��c�Ѕf8�KRn��F\u001a\u0011�\u0002�\u0002�\u0003:@�\u0001'�\u0018�]6�J,�E6�`�|]�\t�5ك\u001f�\u0017�\u0000�\u000f�vqb�!�5��uŷ=��p\u0005�]���p\u0010�\\�PC]������b���\f�?�\t��s���e���&@�ݥL�9","payload_hex":"cf5179dcc9f6e5fc549023ef3010173097b432606c66ecf91c3048de25f4ef197038f74e0108f3639a95ddda2035e97f4d75581eb359142d1f9abbddc0a80cdce29d8b95a046b3a3e1f10ed13758eab732ae9363c2d0856638da4b526eaf98461a11bb02ac029e033a40920127f118c35d36f64a2cb14536f660a47c5d8c09c035d9831f8617b6008f0ffb7671629921ff35f8df75c5b73d95e07005825dcffee07010865cf850435d819fb3a6b69b62bab3b10cb13feb09c7d37383caca6590f1f02640b2dda54cf739","method":"","user_agent":"","ja3":"","session":"98b271af-dba9-4f92-bd0d-7eb12d1b3390","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":14,"enriched":{"digest":"c1dd36f55b9aef9f","strings":["2`lf"]}},{"timestamp":"2026-07-05T17:12:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160P-d7-D1V-9eKSN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630502d64372d4431562d39654b534e","method":"","user_agent":"","ja3":"","session":"de32090f-f04f-4eb4-84aa-c5095ce476e5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"737a9254549d330d","strings":["BitTorrent protocol","<-UW160P-d7-D1V-9eKSN"]}},{"timestamp":"2026-07-05T17:09:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�R\t]yvJ�\u0002ו�A\u0001�1�2�8\u0014�!7\u000e\"R\b}\u0007d\u0018\u001c�$�s��9��\u0013lZ�r\b\u0012���\\\u000eh �=J<�\r�k��=\u001b��E\u0011.���u�}M\u0006\u001a71�c�S�&-�.�'(\u001cG�u�lU�J\u0019?��;1\u001b�m��\u0010(X\u001e1�\u0007so�s�)\"�|&1\u0000�&\tb:�\u0016\u0017��3�6j�S�l��dd^\u0015�V���0�M","payload_hex":"e552095d79764a9102d795dc4101a231e2329838148f21370e2252087d0764181c8d24f973a7903985c8136c5adf720812d9f7f65c0e6820a23d4a3c860da86beccf3d1bbeeb45112ed1c3d275837d4d061a3731d163b8539a262dd02ec827281c47b175d76c55d34a193fd7d73b311bab6d85821028581e319a07736ffa73e22922c87c263100832609623aa61617a6f333b4366aeb539e6c8a9364645e15be56f99af530834d","method":"","user_agent":"","ja3":"","session":"cd37bf0f-418e-435c-8414-1346f07f987e","seq":1,"duration_ms":100,"bytes_in":167,"bytes_out":14,"enriched":{"digest":"f3c784f748e1bf82","strings":["]yvJ"]}},{"timestamp":"2026-07-05T17:06:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160P-BPy5O37pRhO9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630502d425079354f33377052684f39","method":"","user_agent":"","ja3":"","session":"870cd418-7f42-4e2b-8421-93cd1776babc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e94d8128e37896ae","strings":["BitTorrent protocol","<-UW160P-BPy5O37pRhO9"]}},{"timestamp":"2026-07-05T17:02:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���M�\bR�W�;Ľ�\u0004�\u0011Ac���۷�\u001a��\"\u0012}����k\u0003�G\u0006z\u0012/n�Y��M�\u0011�X =��+�\r\u000e`1I\r�9F��&�Ÿ����\u0010������4\u0013˜��N\u0006A&\u0006�ݳש�=��ͥ,W��Of\fK\u0002�c�A�{\u001b�Ն�Qrb�\u0019��o��\u001aG���c�@�����.�S\u001d��\r\u0007\b���K�}�����,�\u0015��2ɫ�zo�miR��L����(%y���\u0013�\u000f�m{�+�F\u0014\b�Ȁ\u0013q\u0013\u0000\u0000\u00001.e����o.�C��_�J�\u0007�p-�z�������U\u000e��G\u0018��bC��\\U�\u001bX���va]/,~�\n#g-�A�\u0013��'�\u001a2?���\u001c�H�\u001b�0�UF��o�a�\n6�U��d��$���p*��L��)1|�\u0007&�-.�),�\"\u0016��k%dg�����LAf�)w�^e�\ns�,��z��)\u0004m\\��\u0018\u0002a�iM[�W|C\b","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"08ac1584-cb1d-4d96-a2c8-f7fab4db15a9","seq":1,"duration_ms":101,"bytes_in":394,"bytes_out":14,"enriched":{"digest":"eb2149b20acab61f","strings":["va]/,~","k%dg"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}