{"ip":"181.116.201.242","total_events":949,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"949 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["949 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"64,532 bytes sent","bytes_sent":64532,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T01:25:24","last_seen":"2026-10-05T05:50:14","events_24h":38,"events_7d":599,"geo":{"country_code":"AR","country_name":"Argentina","region":"Salta","city":"Salta","lat":-24.7831,"lon":-65.4111,"asn":11664,"org":"Techtel LMDS Comunicaciones Interactivas S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as11664","label":"CLARO ARGENTINA","category":"isp","url":"https://www.peeringdb.com/asn/11664"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":949}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-19","count":114},{"date":"2026-09-20","count":2},{"date":"2026-09-22","count":8},{"date":"2026-09-24","count":19},{"date":"2026-09-25","count":2},{"date":"2026-09-26","count":97},{"date":"2026-09-27","count":39},{"date":"2026-09-28","count":83},{"date":"2026-09-29","count":21},{"date":"2026-10-01","count":155},{"date":"2026-10-02","count":110},{"date":"2026-10-03","count":159},{"date":"2026-10-04","count":102},{"date":"2026-10-05","count":38}],"recent_events":[{"timestamp":"2026-10-05T05:50:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�����H��f��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb98bb8a9f248d6c066b6d1","method":"","user_agent":"","ja3":"","session":"708d0f40-59f2-4ca6-9cd0-6396fda57ca5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"599b651cb9cd3eaf","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:43:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��p׈���\u0001\u000e\u001b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e370d788b08495010e1b","method":"","user_agent":"","ja3":"","session":"7f711f36-535d-4407-b248-5676ce97ebea","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"78f50b1ef0be58f8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:38:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e����|��p�\u000e�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb984d4cc7c91a370bb0ecc","method":"","user_agent":"","ja3":"","session":"1d4bda2d-ac17-4496-b4cb-e08f4f54a931","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f58cfc29558e8580","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:36:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���y�!�q�\u0001","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb995927f79d22198719801","method":"","user_agent":"","ja3":"","session":"20da6732-8852-4707-afa0-2b9e0e9fcceb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ca0ee16018ee765b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:33:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�!wO\u0003\n>\u0019F�r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb921774f030a3e1946fa72","method":"","user_agent":"","ja3":"","session":"0941985e-7223-4498-9f4c-c879f0976ece","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"23aa71348d66c2af","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:32:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���@�rZ]�I\u001e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9fee040fb725a5d8e491e","method":"","user_agent":"","ja3":"","session":"65d8f1d4-a8e4-4309-8a46-867018ad04f2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"24ac8fcb9a81031c","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:30:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���8��TI.\u0015r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9b1b838f1c054492e1572","method":"","user_agent":"","ja3":"","session":"8a819916-f236-4e52-8a79-61aea7887b1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"33e5ee78e6fe031b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:29:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�W\n��\u0017^U�<\u000e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9570af9b0175e55ea3c0e","method":"","user_agent":"","ja3":"","session":"bb5d34c6-05d9-4935-98f9-5e0ba30a8088","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"8f935e799d5f13a8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:28:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\u0012�;J�\u0017^�L","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb912a53b4ab1175e877f4c","method":"","user_agent":"","ja3":"","session":"207894d9-5cb1-4e9e-b3f6-f2646b895dfc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3f4c9b1772171b69","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:26:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��k�ک\u0001�\u00124U","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9f26ba3daa901fb123455","method":"","user_agent":"","ja3":"","session":"3bb8dfde-844c-4799-8adc-13b8ded5009c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"568cbce091b19fb9","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:50:00.495797+00:00"}