{"ip":"186.39.209.162","total_events":922,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"922 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["922 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"62,696 bytes sent","bytes_sent":62696,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T14:19:08","last_seen":"2026-09-29T20:44:09","events_24h":498,"events_7d":922,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Canuelas","lat":-35.0496,"lon":-58.7467,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"186-39-209-162.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":922}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-27","count":117},{"date":"2026-09-28","count":378},{"date":"2026-09-29","count":427}],"recent_events":[{"timestamp":"2026-09-29T20:44:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��c�\u001a�l�Ip`","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9da63a51ad86c9b497060","method":"","user_agent":"","ja3":"","session":"2e5c5879-2e2c-4315-a5ea-a7fed8aa24b3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"60af531edddf40f9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:43:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���m�W\u0001��\u0011�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb991c56de15701c4e711be","method":"","user_agent":"","ja3":"","session":"6461c2fb-688e-426e-b2c2-63b71cadc6c2","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"92f14365bf9bedf7","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:41:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�i-|�0�y5U�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9692d7cac30d7793555b0","method":"","user_agent":"","ja3":"","session":"c2cd5103-6ca9-418b-b0ed-805bd5d22336","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"484613c76f026219","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:39:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��-j\u000bW��\u001c��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9a92d6a0b57f9921cfd9f","method":"","user_agent":"","ja3":"","session":"1bd8287c-b20b-4ab0-a864-c0b7a9218f98","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a9055a3bcf0f7f2f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:38:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\u0006�GQ�\u001bDv��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb906ee47519a1b4476bcd8","method":"","user_agent":"","ja3":"","session":"fa496ab6-d946-4146-80ab-dc7d4529a4a7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0022d79e56a14ebe","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:36:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���F~ΰܹ1$","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e7e4467eceb0dcb93124","method":"","user_agent":"","ja3":"","session":"b8dc6183-fd36-440d-bc41-3cca3a13bd4c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4c9f65967bea2c27","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:34:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��-\u0002:@\u001c��d�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9942d023a401cdbd6648f","method":"","user_agent":"","ja3":"","session":"2c296184-500a-4847-b604-453a00cb8cf3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"68dd88402a020db6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:32:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�2\\�������:","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9325caf928a8dc9e59d3a","method":"","user_agent":"","ja3":"","session":"56df7893-cd38-431e-9667-c6ca8fafff91","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b1890e5b8f4d9f7f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:30:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��\u001ad1�%ԷC5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e51a6431e125d4b74335","method":"","user_agent":"","ja3":"","session":"3da0f3be-6e1f-4e89-b763-f902eb920193","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"45d146c7754abcd7","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T20:28:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�;�x��p4ZQ1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb93be578c0a470345a5131","method":"","user_agent":"","ja3":"","session":"06bdb9e7-8412-4822-ae68-d655a346e618","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"89723fd8c7a8c0dd","strings":["BitTorrent protocol","<-UT360W-","p4ZQ1"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T20:46:01.534483+00:00"}