{"ip":"166.114.54.226","total_events":846,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"846 events across 1 port(s)","confidence":"medium","network_type":null,"why":["846 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"57,528 bytes sent","bytes_sent":57528,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-01T03:01:12","last_seen":"2026-08-27T03:03:33","events_24h":0,"events_7d":94,"geo":{"country_code":"BO","country_name":"Bolivia","region":"","city":"","lat":-17.0,"lon":-65.0,"asn":6568,"org":"EMPRESA NACIONAL DE TELECOMUNICACIONES SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":846}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-01","count":46},{"date":"2026-08-02","count":72},{"date":"2026-08-03","count":32},{"date":"2026-08-04","count":14},{"date":"2026-08-05","count":29},{"date":"2026-08-08","count":17},{"date":"2026-08-09","count":82},{"date":"2026-08-12","count":28},{"date":"2026-08-13","count":8},{"date":"2026-08-16","count":49},{"date":"2026-08-17","count":49},{"date":"2026-08-18","count":70},{"date":"2026-08-19","count":3},{"date":"2026-08-20","count":53},{"date":"2026-08-21","count":18},{"date":"2026-08-23","count":182},{"date":"2026-08-26","count":29},{"date":"2026-08-27","count":65}],"recent_events":[{"timestamp":"2026-08-27T03:03:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��z\u0016y�[V\u001f�7\u000b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87a1679d05b561fd5370b","method":"","user_agent":"","ja3":"","session":"ce193ce7-d37e-472b-a307-80141832cd5e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e7ca355d18d920ac","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:56:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u000f.�������W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b80f2efbcdc0d9cdfd9657","method":"","user_agent":"","ja3":"","session":"96587c95-f293-4e50-91fc-92358e943956","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ad930d71e7239c9b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:52:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Y&�M��\u001e�S)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85926964df0fd1ecc5329","method":"","user_agent":"","ja3":"","session":"8f9a9b22-37e9-4695-af09-a658b96a7574","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e759d813dc972290","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:49:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��`�v�?и��j","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b860d276ea3fd0b8b4956a","method":"","user_agent":"","ja3":"","session":"06f870bc-8c88-4e28-8f0d-208607ea32c9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"87e5c2916ead5f5b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:47:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��%��:��r:��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b825f9d03a91ce723aa8db","method":"","user_agent":"","ja3":"","session":"2a561a40-6bc3-441b-a22e-66d56e194c59","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2a330e1dc9cb31cd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:45:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�� ��<�>�XA}","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b820d6c03caf3ec558417d","method":"","user_agent":"","ja3":"","session":"2bc657a9-a83c-40db-878b-bf932c942fad","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"833c5f8e48caa17f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:44:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��k�x1!s@\u0010�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b86bce7831217340107f90","method":"","user_agent":"","ja3":"","session":"4fd91f37-2014-40b6-9a42-e7fec1de7c3a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"aa1162a7ffd005f0","strings":["BitTorrent protocol","<-UT360W-","x1!s@"]}},{"timestamp":"2026-08-27T02:41:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��.∁7��]Q/","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82ee2888137fbcf5d512f","method":"","user_agent":"","ja3":"","session":"364a2697-3eb0-4fcf-a640-c4090a8aa9d4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"dfe80d700796592b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:39:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0010���\u0013�,(J�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b810d0c1b613dc2c284ae7","method":"","user_agent":"","ja3":"","session":"77ac1a4c-8ef3-439e-9a3a-226a77fb3e4a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2fe430cb55dac1a3","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-27T02:38:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����Tq\u0018i�>|","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f9fad754711869f93e7c","method":"","user_agent":"","ja3":"","session":"b501c71a-df45-473e-a8c9-6837b5284e92","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1adcf50075c6b2b4","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:46.596200+00:00"}