{"ip":"181.27.74.51","total_events":853,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"853 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["853 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"58,004 bytes sent","bytes_sent":58004,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T12:35:15","last_seen":"2026-09-24T10:44:25","events_24h":0,"events_7d":186,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Haedo","lat":-34.6265,"lon":-58.5989,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"181-27-74-51.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":853}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":122},{"date":"2026-09-22","count":283},{"date":"2026-09-23","count":364},{"date":"2026-09-24","count":84}],"recent_events":[{"timestamp":"2026-09-24T10:44:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-������o�\u001c�e�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b89aaee2966ff31cd165e3","method":"","user_agent":"","ja3":"","session":"38666b16-169c-4e37-a43c-af04cbbdd9fe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2645f0f6213c597a","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:37:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-�����@�u\u0018�\r^","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8ecc8c240ed7518c60d5e","method":"","user_agent":"","ja3":"","session":"4f2e2a96-2a04-476c-b53c-024219ec10af","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"563fba332865068c","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:32:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-��\u001e��%TG�1�D","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b81eb4d4255447de31b444","method":"","user_agent":"","ja3":"","session":"ad2cb4ac-76ac-4b9d-b2d7-f168f526d5bb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c6a85c9a8c48f25c","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:30:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-���:\u001b�!\u0004��&:","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8f23a1be121049fe4263a","method":"","user_agent":"","ja3":"","session":"6aa00c1c-32ed-4f85-8d45-5973dc8ebfb7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"168983b2ca1764c6","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:27:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-��@C\u0007�T�\u001a�kR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8404307f854851ad36b52","method":"","user_agent":"","ja3":"","session":"746e336e-a085-4e0e-9453-415e1b24d5d6","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"5b76675143503654","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:24:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-����Ph,\u001e\u000e�k�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8b5f650682c1e0eff6ba8","method":"","user_agent":"","ja3":"","session":"b0b0e60b-c4cf-4fa6-87c2-340a0c6bbf88","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f6b8c61e4b6461bf","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:22:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-���\u000ex'���I\u0018\r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8c20e7827ed8bf849180d","method":"","user_agent":"","ja3":"","session":"cbcb2ea5-f79e-4530-9f11-56ff1056de5a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a0f6ffe09215f259","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:19:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-���zP��F-���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8ec7a50fcfa462d90d7d0","method":"","user_agent":"","ja3":"","session":"157bff91-5285-49be-9f62-3b8042b8d459","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f1152fdf5e75c183","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:16:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-���)_t���6 ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8a7295f7494e17f883620","method":"","user_agent":"","ja3":"","session":"d4e2841c-894f-4ef7-a68d-7430ad4b6e0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0cfc8eac688a90a7","strings":["BitTorrent protocol","<-BT7b0W-"]}},{"timestamp":"2026-09-24T10:13:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BT7b0W-������k5�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4254376230572d97b8acc8ef8088aa896b35d1","method":"","user_agent":"","ja3":"","session":"ed43bf5b-f872-48ad-bc71-d6f7a47377ba","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"528b3112c3424a07","strings":["BitTorrent protocol","<-BT7b0W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T15:01:51.397031+00:00"}