{"ip":"186.39.208.133","total_events":543,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"543 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["543 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"36,924 bytes sent","bytes_sent":36924,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T00:26:51","last_seen":"2026-09-27T11:26:53","events_24h":0,"events_7d":543,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Canuelas","lat":-35.0496,"lon":-58.7467,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"186-39-208-133.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":543}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-24","count":110},{"date":"2026-09-26","count":161},{"date":"2026-09-27","count":272}],"recent_events":[{"timestamp":"2026-09-27T11:26:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�u�m�T\u001f����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9759e6ddc541fceffb9b7","method":"","user_agent":"","ja3":"","session":"a622a376-68da-4887-bf80-e4f0c9528cf8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d508bbf72ec6dc22","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:20:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���y5�.k��+","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e8957935da2e6bfbf62b","method":"","user_agent":"","ja3":"","session":"7412c4e2-dc36-48ad-8cd3-953a341d3574","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b650d49eb6cac022","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:15:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�ZZ�\u0015��\u0013٪�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb95a5ab715bbda13d9aaae","method":"","user_agent":"","ja3":"","session":"bdadf4ba-fdde-413a-8551-e9a445d5df4a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1b4fd1d138711de0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:12:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e����\u0014�Ze�x}","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9ae9c9714f65a65e6787d","method":"","user_agent":"","ja3":"","session":"2a0e7c2a-1fd3-416d-b719-8403f5a437f5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8d2e523973b5cf1c","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:09:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�wEy�>��\u001c'�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb97745799a3efe9d1c2789","method":"","user_agent":"","ja3":"","session":"5a0110aa-5496-4e02-81f2-d6fc353ffc60","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b3c8605a65668154","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:08:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��\u0012sFJ&�&\u0018K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9d31273464a26a426184b","method":"","user_agent":"","ja3":"","session":"db3937be-2335-47cd-8e4e-d0b32d732cd5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e5e03bf73e7efe30","strings":["BitTorrent protocol","<-UT360W-","sFJ&"]}},{"timestamp":"2026-09-27T11:06:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��ݦ�`�\u0019߀\u0001","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9f9dda69560c319df8001","method":"","user_agent":"","ja3":"","session":"26c9a385-e9a3-4331-bf87-dca0ee2472ee","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"526fad403079dc06","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:05:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��{��\n\u0012�\u001c�u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9817befd60a12a21cf775","method":"","user_agent":"","ja3":"","session":"6463ec4d-c378-428a-89d6-a814de5ff94c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0dbd6a537add0f92","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:04:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��ՙ:E}\t��D","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb999d5993a457d0987dc44","method":"","user_agent":"","ja3":"","session":"fc1e9f22-2d8d-4ab0-b01c-82a7c900b0d8","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"19bc74962ab96bdb","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-27T11:02:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�,�W9 -fii\u0016","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb92cae5739202d66696916","method":"","user_agent":"","ja3":"","session":"cdf2ce14-313b-41d6-97d9-7db26cfcb80a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c3c08d88e9d10d3f","strings":["BitTorrent protocol","<-UT360W-","W9 -fii"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T20:46:01.530319+00:00"}