{"ip":"186.33.42.134","observed":true,"total_events":1403,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,403 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["1,403 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"289,718 bytes sent","bytes_sent":289718,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-21T21:59:19","last_seen":"2026-10-16T00:57:16","events_24h":0,"events_7d":296,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"EC","country_name":"Ecuador","region":"Bolívar","city":"Guaranda","lat":-1.5968,"lon":-79.0013,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"134-42-33-186.ufinet.com.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":3,"protocols":[{"protocol":"udp","events":3}],"ports":[{"port":39131,"events":3}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-13T01:34:53","last_seen":"2026-10-15T18:54:10","recent":[{"timestamp":"2026-10-15T18:54:10","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:�I��a\u0017oܙ�d����Y�A�59:info_hash20:�J�@\u0006ݗ`�\rY�,<:�H\u001c�\u0018e1:q9:get_peers1:t2:\u0016`1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ab649eaeb61176fdc99fa6492a7e0aa59de41a235393a696e666f5f6861736832303ab64af34006dd9760850d59a12c3c3ab1481cd11865313a71393a6765745f7065657273313a74323a1660313a76343a4c540102313a79313a7165","sni":"","session":"de5033c2-c43e-4c6c-815a-8655e296fc96","bytes_in":104,"source_verified":false,"enriched":{"digest":"9b8771232c485849","strings":["d1:ad2:id20:","59:info_hash20:","e1:q9:get_peers1:t2:","`1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-15T18:51:09","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:�I��a\u0017oܙ�d����Y�A�59:info_hash20:�O\u001f�d6\n\u001b��RQ\u0000�\u0013���iJe1:q9:get_peers1:t2:+�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ab649eaeb61176fdc99fa6492a7e0aa59de41a235393a696e666f5f6861736832303ab64f1f9764360a1ba6c3525100a113b89cd3694a65313a71393a6765745f7065657273313a74323a2bc6313a76343a4c540102313a79313a7165","sni":"","session":"9011908f-71da-4e4f-aa4d-34971d539fba","bytes_in":104,"source_verified":false,"enriched":{"digest":"050729876a205ef5","strings":["d1:ad2:id20:","59:info_hash20:","iJe1:q9:get_peers1:t2:+","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-13T01:34:53","port":39131,"src_port":59783,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000.�7\u0016#7\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"41002ed237162337000000000000000089f40000","sni":"","session":"1c9fcad0-dccb-40a4-baf3-b53f17f6a220","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1403}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":89},{"date":"2026-09-22","count":241},{"date":"2026-09-23","count":8},{"date":"2026-09-25","count":321},{"date":"2026-10-01","count":418},{"date":"2026-10-02","count":22},{"date":"2026-10-05","count":8},{"date":"2026-10-12","count":2},{"date":"2026-10-13","count":9},{"date":"2026-10-15","count":264},{"date":"2026-10-16","count":21}],"recent_events":[{"timestamp":"2026-10-16T00:57:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�IH{�}��2��\f�\u0015f VFw�̤�Ud��\u0006�\u001eq����\u001d\u000b�e�\u0004�����'zl�_#�\u000e]\u00138\u001bw�\n��\u00007\\q�\b\u00018��\u0018�\u001c\"�n�����\\\u0016�Lz�\u0010\u0011I�\u0019\u001f�\u001c��\"��Hb}","payload_hex":"a249487bad7dbd8832f9ea0ca0156620564677c2cca4e155649aa106e51e719fe5ff821d0bc965a004f9899beda6277a6c9c5f23b80e5d13381b77940af4a600375c7182080138be9518ce1c22ae6e8aaff4e7bf5c16b94c7af0101149b9191fb81ce8c922c0a748627d","method":"","user_agent":"","ja3":"","session":"b95ddc29-470d-4a24-aaef-e17411c411d3","seq":1,"duration_ms":101,"bytes_in":106,"bytes_out":13,"enriched":{"digest":"ac3a4c5db1881252","strings":["f VFw"]}},{"timestamp":"2026-10-16T00:53:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YTWvLMA~gxHG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d595457764c4d417e67784847","method":"","user_agent":"","ja3":"","session":"e8f3a1fb-44ff-4861-bd28-c904a588ae10","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"623876b7a6577fbc","strings":["BitTorrent protocol","<-UW160N-YTWvLMA~gxHG"]}},{"timestamp":"2026-10-16T00:50:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"C�R�|x��6�U�\"w]-�\u001e�\u001e�����4��^��~e���\u0018Úٯ\u0005�T��9C�(A3�c\u0002'�/���e2q�]w\u001b\fJ��1��Ƭ����\u001ek\u0000\u0004��],��m���6H�hޑ_\\�͵","payload_hex":"43b952dd7c78affd36be55c222775d2df11e971ed9fee7fe81349eda5ef8cf7e65e8fefd18c39ad9af05865490f939438d28413389630227872fb2b8d3653271855d771b0c4a858531ccf0c6ac818f81bc1e6b000499985d2c95cf6d83caee3648f668de915f5c96cdb5","method":"","user_agent":"","ja3":"","session":"d547cb56-2465-4f21-818b-33e28490be1e","seq":1,"duration_ms":101,"bytes_in":106,"bytes_out":13,"enriched":{"digest":"db00d35cc16337ab","strings":["\"w]-"]}},{"timestamp":"2026-10-16T00:46:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-IoDmgi0X16.s","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d496f446d6769305831362e73","method":"","user_agent":"","ja3":"","session":"1d1707ce-40da-454e-8055-4a9f95eac1f4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c46437e4beeac490","strings":["BitTorrent protocol","<-UW160N-IoDmgi0X16.s"]}},{"timestamp":"2026-10-16T00:43:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��?g�J䬨-�\b�\u001a�o�&��P��ġ\u000f�����\u0015��Z�蠟\n�c�qX�\"f�\u0014#�85$ۀ@w��1\r�ns���\u0018��m��R3�K\u0014�V��\u0015t:��3\\\u0018d���B�ϯ�\u0014\u0003�$?���]��\u000f�vG�\u0012ʻ�i���\u0004_��ء�\u0011\u0006g��\u001b~��\u000erq��G���(�z7�\u0000'?{]0}\u0016ku\u0006$�S��N��£�G��\u0006���t�\u001d;��\u000f%�Z:��๋\r�&R��;\n���\u0015\u0000[�owe�ІJS�\u0014�s���<\t�����Q�oh�\u0016�\u0000q�\u0000!�Ɲ_�%m�P�7~�uz\u0000J�^\b\n��:��K�r����wXߌm��\u0017�Jh��W�\u001f\u000e~�\u000b�DP\u0001�2��+� �1T�d��[���\\g�A��r��.�E�ch�ٚ��\u0019��\u0004t\u0002�0\u0015_�m��\u0004:j��\u0018��?0��\u001e�\u0004\u0007��s�\u0019:��R\u0003S�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2e190ef6-45f7-43e7-912f-0d02a0e83694","seq":1,"duration_ms":100,"bytes_in":387,"bytes_out":13,"enriched":{"digest":"4467af95c078e5a9","strings":["'?{]0}"]}},{"timestamp":"2026-10-16T00:40:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nAPM2QfEDyb8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e41504d3251664544796238","method":"","user_agent":"","ja3":"","session":"29ece774-51d3-4d0e-8a4b-bccab3d38f82","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4c9eafa89aff3542","strings":["BitTorrent protocol","<-UW160N-nAPM2QfEDyb8"]}},{"timestamp":"2026-10-16T00:36:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"P\n\u000b�\u0006��@�3L�\u001e\t\u0004���d�i\u0013���\\*~���}��Į\u0007�\r!M�~˯\u000e\u000f����cV�0p}\u001a�\u0019\u000eK6����r\u0017�Ε:�1�&\u0016\r��\u0016��ak\u000b\u0011\u0018Դ\u0015��;�g�j�$C�r����u��\u001b�赺�.\u001c\u001ag���#:�k����@\u0006\u001a�H���I�ff\\��'�^�[��c�<\n_��A�H��T","payload_hex":"500a0bd80683814080334cc91e0904fee78464916913f6e9d85c2a7e86a6a67da5d8c4ae07a20d214dbf7ecbaf0e0fc4ccdfde6356be30707d1aa5190e4b36a2b9afd77217c0ce953a8b319526160dc9c116a088616b0b1118d4b415f49a3bc767916ab52443b872feecf4d17f75f68d1bc5e8b5bab32e1c1a67b9e4d4233a826bb7be82fb40061af748bbbcab49f166665cf5d5279f5e9a5b92dc63a23c0a5faba7418848c4d154","method":"","user_agent":"","ja3":"","session":"eabdcfca-36a0-409c-ae40-74aa54bac1a0","seq":1,"duration_ms":100,"bytes_in":168,"bytes_out":13},{"timestamp":"2026-10-16T00:33:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!oBa7Ce-hKv.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d216f42613743652d684b762e","method":"","user_agent":"","ja3":"","session":"78a23e91-de71-4b41-b0a1-d868147181b2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"75856166197cd377","strings":["BitTorrent protocol","<-UW160N-!oBa7Ce-hKv."]}},{"timestamp":"2026-10-16T00:30:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u000f���/���\u000b��DޢTi�f�Y����Ȁ���\u001b;\n����\u000e\u0004�<��� �\"�|J\u0017�\u0005�E�$9V����\u0018\u0013�\u000b�8��B�\u0005&:����-��T6U�ݞ#c\u0006�\u000fD���t�m\u0018V�\b�\u001e\u001f\u001d��\u0002�\"\f�k�Z\u0017\u0013�\u0014\u0016\u0005&��\u001f\u0016�`u�ĺ���wI","payload_hex":"d10fa8ebae2ff8a1870bd4d744dea25469e266995983b79486c8808689f01b3b0a7f7ff3fb95ee0e048c3cb7c9fe20b2229c7c4a17d105b645ed2439568899eded18139f0bbd38b1f442ec05263af8e5d2c02dfbb3543655b4dd9e2363069f0f44ccedc174d46d1856c608ff1e1f1da8a90296220cca6b875a1713bd14160526bcfb1f16906075bac4baf9d4d17749","method":"","user_agent":"","ja3":"","session":"59274e0d-db90-401b-82f6-0c3b8615f82c","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":13},{"timestamp":"2026-10-16T00:24:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nVdpRbo11k*3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e56647052626f31316b2a33","method":"","user_agent":"","ja3":"","session":"e85b3947-0cec-44f4-a3ea-6851eecbf746","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d74bcffb8add641e","strings":["BitTorrent protocol","<-UW160N-nVdpRbo11k*3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-18T06:51:13.447133+00:00"}