{"ip":"186.96.22.84","total_events":822,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"822 events across 1 port(s)","confidence":"medium","network_type":null,"why":["822 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"173,829 bytes sent","bytes_sent":173829,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T19:54:54","last_seen":"2026-08-14T19:50:05","events_24h":13,"events_7d":822,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Mexico City","lat":19.4324,"lon":-99.1229,"asn":22884,"org":"TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V."},"source_domain":"fixed-186-96-22-84.totalplay.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":822}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":192},{"date":"2026-08-13","count":435},{"date":"2026-08-14","count":195}],"recent_events":[{"timestamp":"2026-08-14T19:50:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-!4Lg9.E(VX*a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d21344c67392e452856582a61","method":"","user_agent":"","ja3":"","session":"663f7d8d-21d0-4be2-855f-1f088c6cd53e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"dc03392cbc5cbb1a","strings":["BitTorrent protocol","<-UW1605-!4Lg9.E(VX*a"]}},{"timestamp":"2026-08-14T19:48:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�A7\u001eV���\u0014�m6͍z�\u000b��ʢ\u000f2y\u001d7&\u001a��v:md1\u0002u��G\u001dY�?�Y^2�b��v^�#�\u0019A��?Vv�j`ڜ���\u0001�R���[����\u001d�(����2�\t�|'���t.�e�7�\\[\u0003�\u0006�\u0001�'��fl\u0015��\u001b\u0016f'O�&[���Y�ж��GT��C0�`e͛W����{qh\u0017(+/�O\u0011��m�\\Q��","payload_hex":"8041371e5685a5b114926d36cd8d7a960ba7c5caa20f32791d37261a86e6763a6d64310275e7ae471d59b43f97595e32fa62ebc8765ecc23de1941b8b33f5676f66a60da9cf59cf401b652878ea47f5ba4b5bfbc1de728f7fae38c32f709867c278095ea742eb465b937855c5b03a8068501db27f8c8666c1584a11b1666274fa4265be7eaf559b4d0b6f0ac4754f6e243308d6065cd9b57a7a080ec7b716817282b2f874f11a6ac6de75c51f782","method":"","user_agent":"","ja3":"","session":"200ec628-643d-414b-a026-255c26f6f7eb","seq":1,"duration_ms":101,"bytes_in":174,"bytes_out":12,"enriched":{"digest":"c061589484a9cca3","strings":["v:md1"]}},{"timestamp":"2026-08-14T19:48:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�A7\u001eV���\u0014�m6͍z�\u000b��ʢ\u000f2y\u001d7&\u001a��v:md1\u0002u��G\u001dY�?�Y^2�b��v^�#�\u0019A��?Vv�j`ڜ���\u0001�R���[����\u001d�(����2�\t�|'���t.�e�7�\\[\u0003�\u0006�\u0001�'��fl\u0015��\u001b\u0016f'O�&[���Y�ж��GT��C0�`e͛W����{qh\u0017(+/�O\u0011��m�\\Q��","payload_hex":"8041371e5685a5b114926d36cd8d7a960ba7c5caa20f32791d37261a86e6763a6d64310275e7ae471d59b43f97595e32fa62ebc8765ecc23de1941b8b33f5676f66a60da9cf59cf401b652878ea47f5ba4b5bfbc1de728f7fae38c32f709867c278095ea742eb465b937855c5b03a8068501db27f8c8666c1584a11b1666274fa4265be7eaf559b4d0b6f0ac4754f6e243308d6065cd9b57a7a080ec7b716817282b2f874f11a6ac6de75c51f782","method":"","user_agent":"","ja3":"","session":"200ec628-643d-414b-a026-255c26f6f7eb","seq":1,"duration_ms":101,"bytes_in":174,"bytes_out":12,"enriched":{"digest":"c061589484a9cca3","strings":["v:md1"]}},{"timestamp":"2026-08-14T19:48:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�A7\u001eV���\u0014�m6͍z�\u000b��ʢ\u000f2y\u001d7&\u001a��v:md1\u0002u��G\u001dY�?�Y^2�b��v^�#�\u0019A��?Vv�j`ڜ���\u0001�R���[����\u001d�(����2�\t�|'���t.�e�7�\\[\u0003�\u0006�\u0001�'��fl\u0015��\u001b\u0016f'O�&[���Y�ж��GT��C0�`e͛W����{qh\u0017(+/�O\u0011��m�\\Q��","payload_hex":"8041371e5685a5b114926d36cd8d7a960ba7c5caa20f32791d37261a86e6763a6d64310275e7ae471d59b43f97595e32fa62ebc8765ecc23de1941b8b33f5676f66a60da9cf59cf401b652878ea47f5ba4b5bfbc1de728f7fae38c32f709867c278095ea742eb465b937855c5b03a8068501db27f8c8666c1584a11b1666274fa4265be7eaf559b4d0b6f0ac4754f6e243308d6065cd9b57a7a080ec7b716817282b2f874f11a6ac6de75c51f782","method":"","user_agent":"","ja3":"","session":"200ec628-643d-414b-a026-255c26f6f7eb","seq":1,"duration_ms":101,"bytes_in":174,"bytes_out":12,"enriched":{"digest":"c061589484a9cca3","strings":["v:md1"]}},{"timestamp":"2026-08-14T19:47:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-zkNCy3oZLCyN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7a6b4e4379336f5a4c43794e","method":"","user_agent":"","ja3":"","session":"1c9ddd30-eabc-4f71-87bb-b266861c5cbe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"9acd7c0bfd29abb4","strings":["BitTorrent protocol","<-UW1605-zkNCy3oZLCyN"]}},{"timestamp":"2026-08-14T19:46:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":")\u0019�9득\u0000�D���k�'�蘓�\u0012�(Z+F�Y�Ť\"\u0016��v����\u001ee/���Jr���_�#\u0011*m\u0007�n� O�\u001eq��lU�s�~�\u001a�\u001eB\u000e�-�I�<<�8�_&�;�\u001dI\u000b�K���\u0006X���J\u001b�m�\u0000ˋQ��\u0005�p\t���7\u0001��Rp�C���n~���&��;V��-�k'HmdG,���Ξhos��(b�fu\u0003I�����\u0013���I\u0014\u0017�\u0015S�i\u0014���\u0018�w��*�틏/��;\u001a8Wq��lܺi:c��(�~��щ�\u0002= �����\u0006\\�`\u001a�\f���Xj��b���!�7d1�s\u0010A\"\u000b���$۪k}\u0015ԟ���v֙Z�k\u0000K�s�zс¥P��\b�����@��\u0019�8��\u0012��a��\"L?~h�2������\u0011�\u0016��\u0011}[Н�����҉\u0017�����Ŀy�������\u001b�\u001b\n\f\u0016�\u0007�\u000f��\u0017�d\u0003�_`$#(�3t\u0003�����cv��t3�_j咗���b����o\\>GW2�̺\u000bn��eUp#�_��\tX�*P`\u001eۉ{���\u000e{\u0010�(u����g�?�v>la���5�hq��j6��)\u0012V��[��>=��Y�����S���\u0018���a��`?q����)��\u0001*.)�a�B\u0001��j�KşG���6�Sw�ޓ�y\r\n�\be�>�Ym�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"53da1911-4f7b-440d-a3a7-102115f881a3","seq":1,"duration_ms":100,"bytes_in":567,"bytes_out":12,"enriched":{"digest":"438913c004f9a79a","strings":["(Z+F","k'HmdG,","\"L?~h","o\\>GW2","eUp#","v>la"]}},{"timestamp":"2026-08-14T19:44:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-KA.dE4jKFFq7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4b412e6445346a4b46467137","method":"","user_agent":"","ja3":"","session":"cdc62359-4210-40e3-8ce8-c9cb6893dfce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"35b2fdf5e440c005","strings":["BitTorrent protocol","<-UW1605-KA.dE4jKFFq7"]}},{"timestamp":"2026-08-14T19:43:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�W�'��l�\u000b���QF\r\u0005�,\u0004�Tk����l\\��(��ޱɤ\u001a����\u0002�\u0013�i@\u001a�;�#y�hr$2ٝ�����\u0012�\n��\u001d�.bS�\u001a��@r�\u000e���]G�W\"ޗ�s\u0002�M#\u0002bܐ�������d\u0001Rv��R�#^�<w3�dc\u000f\u000f�z�j�9RJ(`��6_����$\u0014���W[\f:\u0010\u001e�\u0003�\bF�\u0011��X\u001f��bݘ)Q�a>f������\u000e���G� i=Tb��\f�Q.���F��\u0003���C#\"5]ITF��X\b�/�\u000f��KS� \u0016E�Z�bW�r$�v�\n�^;��\u001dw�\u001b��)^P��\u001a �\u0003�T\b��w�\b�U�'������2E>\u0010~�]F�\u0018�|���Y\u0011��B,\u0001\u0012��ئ^ \u0000B��N�\u0012�CgM��2��ļ\u001a�@vȯ��n#�+ћ��\u0013���k5(J�,)�ɗƦ�\u0019\u0000�\u0005%;\u0018�<\u0015�\u000e�e \u00068f�\u001c\"u�5���۔d{I����8PG�1\f*�\u0015�\u000e8����\u0017��#o7#8,S���*��6�\u001cT� ]g�\u0003Ds\u001dm�r�0��E�\"r\u00145��\b���\u0004˛\u0019�����i��W�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"abda6245-6634-42b8-9324-467d0a085feb","seq":1,"duration_ms":100,"bytes_in":483,"bytes_out":12,"enriched":{"digest":"3756d6cc53790084","strings":["hr$2","9RJ(`","i=Tb","C#\"5]ITF","k5(J","#o7#8,S"]}},{"timestamp":"2026-08-14T19:42:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-BDbmmwd5df_L","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4244626d6d77643564665f4c","method":"","user_agent":"","ja3":"","session":"ef2901ab-9400-4a24-8e50-0e166ae431f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"80612440a7d63741","strings":["BitTorrent protocol","<-UW1605-BDbmmwd5df_L"]}},{"timestamp":"2026-08-14T19:40:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"7�:\u0005�\u001a�\u0015R\u001f��'\u0012x8�ѡl���S���@�3)Y���\u001ew@��k\u0002�]4YD\t\u0017{\u00125+Q\u000e�@�w�&?����0\t0顮���\f�@�߷I��:�\u000f�ԹHc'\u0016���A��!Y�ه�4\\��\\��i��\u001a=b�����\b��W�&�N\u0006.�K#�2����c�\"B\u0000�|�_b\f\u0005�u�I\u001d.�Ր�\u0005\u0011��Ѐ�\u0003\u0012��\t�>�����A~�K4Z��L���܉����\t�C\u001b4ʆ��=8=��:e\u0007c-�C\u0016�=��L�D��X�ti,\u001c���w�juŒ|�$�yK�_L/A37�\"0m�\b~ͻ�\u0011������t?�/o9��\u0005�\r�]��}Z|\u0005\u001b\u0005\u0005\u0004���\u0003,�\u0005!\u0011ugS�\u0016;pTeP�\\����\u0012�gS\u0013Huu�[5\u0015�\u0003ڭ]���]�\u0016������Vm��Zo4�?��\u0019��-�\u0001�dz�S��&��\u0012�\u0017� �s�y}��|�e���\u0019ج\u0018oi�+[l�\u0013(�\u0017�L~$�\u001b\t!�]3Py��3�Y\u001d}�Ix��������[�_P\u0012���Q��\t�&�k\u0017�f�I���Ea��Z��e\u0018_k","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"91a73cc2-5b7d-4600-bd2d-a34ec6a15aa1","seq":1,"duration_ms":100,"bytes_in":487,"bytes_out":12,"enriched":{"digest":"9bd8878673f8b357","strings":["]4YD","_L/A37",";pTeP","]3Py"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T09:47:31.629042+00:00"}