{"ip":"181.32.165.147","total_events":514,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"514 events across 1 port(s)","confidence":"medium","network_type":null,"why":["514 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"106,905 bytes sent","bytes_sent":106905,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T03:40:46","last_seen":"2026-10-05T22:21:24","events_24h":93,"events_7d":514,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.6074,"lon":-74.1459,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T20:15:50","last_seen":"2026-10-05T20:15:50","recent":[{"timestamp":"2026-10-05T20:15:50","port":39131,"src_port":53069,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�H�\u00048\u001c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100fc48b004381c000000000000000089a10000","sni":"","session":"0bf646fe-42ef-454a-8c9a-798a3ff49e1b","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":514}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":421},{"date":"2026-10-05","count":93}],"recent_events":[{"timestamp":"2026-10-05T22:21:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-h5.O5Zzx~54i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d68352e4f355a7a787e353469","method":"","user_agent":"","ja3":"","session":"f38340d7-394d-4849-aaa3-976e44beca67","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6db590d8f66643f8","strings":["BitTorrent protocol","<-UW160N-h5.O5Zzx~54i"]}},{"timestamp":"2026-10-05T22:20:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����)�Dw�g{�9\n4?tA݀?\u001e���g��G�9��\"����)����sv۶ˏ������\u0006��4\u0013�!Sd.�\t���L\u001eh�w�9݈�}�E4���\u0018�\u0000\u00015�\u0003c�\u0005\u001d��g\u001e���Y\r�5�F[�\u0005j��*\u0010:\u0003M^n��9�!��r+�|�\u0001�7��\u0015�\u000b|\u0012ҝ�\u0000W%?�)=0R�\u0005�N&P;�v��T!�}9侦��Rg{�~��kQ�ݟ$[�2��L�\u0016��\u0006־�b}�7v\u0011ݧ�����{;�N�&[�D��V�\u0002B����'\u0018tG�ϳ�","payload_hex":"e18aec9129be4477ce677b9f390a343f7441dd803f1e9f9fca67bddf478f39b8ba228a94e5e029b6a4e5f17376dbb6cb8fa188edf8ced706d6da3413f52153642eaa098fb3f44c1e68c4779639dd88b87dc34534ccfa9518bd000135bfc28103638e051d92c1671e82a8b8590de335eb465bbd056ad6e12a103a034d5e6e8dd739ec2187e8722bbb7cba01aa3787f615840b7c12d29dcf0057253f96293d3052ec05a24e26503bd676f0fa5421bd7d39e4bea698a752677bb27ebbd46b51d1dd9f245be732e9fa4cc616e3af06d6beb1627dd7377611dda789d9f3ebbc7b3b8c4ed4265ba944e2c156f20242918888d327187447fccfb3e9","method":"","user_agent":"","ja3":"","session":"8fb3b8a8-9551-4a0e-ae29-126fd3179e8f","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":14,"enriched":{"digest":"300013835aa5234f","strings":["4?tA","!Sd.",")=0R","N&P;"]}},{"timestamp":"2026-10-05T22:18:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-wM4PsU2x.ZlN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d774d3450735532782e5a6c4e","method":"","user_agent":"","ja3":"","session":"d37e0211-1683-4c2c-a0cc-e1eacbbc0bfa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"697fe26eb996efa8","strings":["BitTorrent protocol","<-UW160N-wM4PsU2x.ZlN"],"iocs":{"domains":["uw160n-wm4psu2x.zln"]}}},{"timestamp":"2026-10-05T22:17:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"dH�71���Z��%A�(T��\u0004'Si�2�\u0004\u001d�Œ��B��t\u0011An3f~E�u����$2\u0003\u0004!��� ��.�l�+�i��̈́\u000b?\u000e:::ˑ�\u000b�pv��\u0016J]�dB4\u0015$���\u0012@�\r�R�UßfT�\\щP�\f�罴�\u0001��k(�����\u001b�O�Z��F�o\tJ���o���DZ�g);pi\u001a����&���Yq�\u0016�\u001f3��N�w]νP�\u0017V���\u0010�E��}3?d\u000e\b!\u0013��6�7#5�GV\u0002ۊ��(x��R�\u001c�w��\u0011���ǒ\b�\b�\"�K}ϸ\u001a�����\r�k�� ��\u0019������k���hp����x\u0019�@c�W/̚�\u001b�L��\u0012���\"(*Ɂ�\u0001b@\u001b��l]�J-�決5\u0011�n�@�$���d/sȌw���<�g��(�y@����\u0011C\u0004N�+��\u0016|<>���\u001c�ψ\u001e��+]�Ϗ\fn���Ș9�#\u0012Ӿ�,����HG�F��)9fr9���f1�j>sK}�d��fmD��l��\t�\u001d!\u0001��'U��\u0016B͋b�Y�+Y���Ȏ�X+\b՜\u0013\u001f��mW��\u000b���V��\u0007��\\�\u0011�cE","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3d0851cc-462d-4580-8df4-160563ff9008","seq":1,"duration_ms":101,"bytes_in":491,"bytes_out":14,"enriched":{"digest":"a91378aa40463aa8","strings":["An3f~E","g);pi","}3?d",")9fr9","j>sK}"]}},{"timestamp":"2026-10-05T22:15:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-(l2wPbRiC8cp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d286c32775062526943386370","method":"","user_agent":"","ja3":"","session":"bf9bd339-7828-4448-aff0-0681bb408c3c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"659fb0532aca5a7d","strings":["BitTorrent protocol","<-UW160N-(l2wPbRiC8cp"]}},{"timestamp":"2026-10-05T22:14:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�.�j�6�M&��3���q��b�\u0017Z��,\t\u0013V�_�2Ǘ�sW�G^/�c9��9�-H\u0018�F�\u0004ӯ���L\u0015�!�����ǥ�˔�y�k�b��\u0002�S\\n�A��\u0001��M,\u0000����L�l\u0014-��Q�\t;�\u0006�B�*�`Tt\u0013!\u0012L\u001f��\u000b��\u001c�6��\u0010�\u000bk�Q","payload_hex":"ff2eb86ad5369b4d26d7c433b685ad71c5e562d6175af2a22c091356bc5fdf32c79791735792475e2fad63398eb339fb2d4818d7469804d3af86e1c34c15af21ffb5fd96e7c7a5b1cb94e8798e6bca62868502e3535c6eba41d4df01c18a4d2c00e2eaa1f24c826c142df7f251f4093b8506be42f62ade6054741321124c1fbb950bc4ca1c923682ae10d90b6bd751","method":"","user_agent":"","ja3":"","session":"330b49b6-49f8-40b6-9be6-6884bb1a1505","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":14},{"timestamp":"2026-10-05T22:13:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-DzsJKZZ(E0aA","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d447a734a4b5a5a2845306141","method":"","user_agent":"","ja3":"","session":"94f1e39f-6b26-485a-b932-cac499dd5b59","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b0c8ce8f452da3ea","strings":["BitTorrent protocol","<-UW160N-DzsJKZZ(E0aA"]}},{"timestamp":"2026-10-05T22:11:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\\���<\u000e��얬�ȵ��u\u001eNo,ދ���_\u001f\u0006\u000f\u0003�\u000b��W���HA��~�%\u0019�\u001ff\u0010�t\u0019\u001e�\t\u0019Br�Z-\u00079��\u001a�iсɆաa��\"\u001f���I����9\u0007��}���\u0004\u001e3r�O��l\u0002\u001f\u001e\u0015:N\u0002W\u001f.���\t���\u0003��Gv\\���c�\u001cիcC-��n ��c�\u0000�\n\u0017�\u001e��>\u0013rD����@�t�3b�A;#�/��񨭏��\u000b\u0003K,΅3&��\\�Tך�neO��Q\u0014د]*`�\u0007Z7Ȧ�����:6@<]1\u0018;h4�\u0004�\u000e���熀x��x`�\u000b6s/=����Լ\u000e\u0002��\u0002�����8u5�l�'���\u0004\u0015-\u0018\u001dL�s�І��o_","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"958ad629-392c-4976-88a3-13f705ac643c","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":14,"enriched":{"digest":"b7361f792bbe1786","strings":[":6@<]1","6s/="]}},{"timestamp":"2026-10-05T22:09:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-dC0~oD)CtDV7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6443307e6f44294374445637","method":"","user_agent":"","ja3":"","session":"1cc2d845-7606-4b2e-b06f-8732f59085aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"64551139b5d5babf","strings":["BitTorrent protocol","<-UW160N-dC0~oD)CtDV7"]}},{"timestamp":"2026-10-05T22:08:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001aA�@ 4��e.��vXXo��|�����2��VK<�,Nkr\u0010Ki�;\u0000\u0005�\u0014���Q\u0013*�� Ss0��w\u000f����\"l-�@�<����aR�\u0005���Y�u��n�H?�,�00G\f�rݵ�v�\u0000v.����qC��a��\u0004w�=Z\u0014!\u00112\u000e\\�F�\u0004\u0001�ƕ%S�P�\u0016�v�-A��>�18Y3-�B��IO��N\r�K��XŇ_��\u0002���6��x����W{�H/�C&���\u0010ǣR[,�@|\u0012[��ZfY\u0003x\u0013ȉ'47�\u001e=�N\u0013��'��\u0000��?�{��͉%�Jr�TtY��q���x��\u001e!Hw\u001b��\u0005���L����c��#��\u0013�\u0001#`�5�-����ǒ�\u000b��1�U�\\kB��q4���F�RCތ�z��-,]���FU�\u0011������o\u0014�\u0005�Y\u0006���;(=Y�'x\"1�}\u001f^��X\u0000�����\u001f�;�I\u001b�B&��w\u0005�x��v��|\u0007\u0003Ρ�\u0006��*շ\u0001\"����\u0017ߗ��y�Gs���\u001e\u000b��m#�,�E.$\u001b�<%��\u0007�\u0002�$t�8:WV�f�,�y\u001c\b�Ã","payload_hex":"1a41c2402034adbf652e9dc67658586ffed17cc3d0d0f0873296e4564b3cd12c4e6b72104b69a23b0005c514a680c751132a81ec20537330a7d6770fbaaf998f226c2daf409b3c98b6e3ad61529e05fbf3e259d175b4fc6eea483fc42cb03030470cb072ddb5ce76b500762e9b80d2c9714387f261a3990477a63d5a142111320e5cf9469c040186c6952553e850ef16ee76832d41d9fd3ed5313859332dd442a0c3494f9fa64e0dbf4bd7ea58c5875fe4fa028db9b836b8c378ffb4e4eb577bad482fa543269488fe10c7a3525b2c95407c125bad845a6659037813c889273437d71e3dfc4e1396cc27ebdd00c5c83ffb7bb6d2cd8925f04a72d4547459b4d271a0f9ed789d941e2148771bd7ce057f939cff4ce5f6c4c663a2fd23a3d613e07f012360af35e82da3fcf2dac792870bee9031b455b55c6b42e6d671349894d846a55243de8ce77a8a8f2d2c5da5ebe546559b11b7849bf5a7fd6f14b105bc5906fbc7e93b283d59bf277f782231d87d1f5ee99358009788d7cdc11ff83bc4491bfe4226f0af7705ee788eab76b2d47c0703cea1cf06e1bb2ad5b701229dadf5ef17df9784ea79e64773b6bfc11e0bf1d96d238f2cd3452e241bce3c25edb907c602c6247490383a5756e466e82c9f791c08f9c383","method":"","user_agent":"","ja3":"","session":"ddd5a112-0fc6-4745-926d-781494ba5bc6","seq":1,"duration_ms":100,"bytes_in":469,"bytes_out":14,"enriched":{"digest":"70f5b5d7e211c32d","strings":["vXXo",",Nkr","18Y3-",";(=Y","8:WV"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T22:22:47.230566+00:00"}