{"ip":"189.28.65.134","total_events":3080,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"3,080 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["3,080 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"209,440 bytes sent","bytes_sent":209440,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-27T10:36:07","last_seen":"2026-10-05T16:59:45","events_24h":11,"events_7d":557,"geo":{"country_code":"BO","country_name":"Bolivia","region":"Cochabamba","city":"Cochabamba","lat":-17.3822,"lon":-66.1518,"asn":27882,"org":"Telefonica Celular de Bolivia S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27882","label":"Telefónica Celular de Bolivia","category":"isp","url":"https://www.peeringdb.com/asn/27882"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":13,"protocols":[{"protocol":"udp","events":13}],"ports":[{"port":39131,"events":13}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:33:22","last_seen":"2026-10-05T16:43:11","recent":[{"timestamp":"2026-10-05T16:43:11","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000k���w�\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�F\u0000\u0000","payload_hex":"41006bb8b1d577800000000000100000aa460000","sni":"","session":"8224b66e-c74c-400b-8a81-df9a8a91d8e9","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:43:05","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000k��x��\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�F\u0000\u0000","payload_hex":"41006bb8b178f6c40000000000100000aa460000","sni":"","session":"22f96b1c-09b2-49c4-b83d-7d74c083302e","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:43:02","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000k��D�.\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�F\u0000\u0000","payload_hex":"41006bb8b144f82e0000000000100000aa460000","sni":"","session":"2c7e258a-44ef-4b08-a48e-fb14c192013c","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:38:29","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000|��\u0004Ő\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000n]\u0000\u0000","payload_hex":"41007cc1a104c59000000000001000006e5d0000","sni":"","session":"1e5c2f52-ce40-48b0-887c-a48dfbaaa26c","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:38:23","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000|���\u001f�\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000n]\u0000\u0000","payload_hex":"41007cc1a0a91fcb00000000001000006e5d0000","sni":"","session":"a6f60db3-5933-4d28-8238-8e26276ec4e0","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:38:20","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000|��vAr\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000n]\u0000\u0000","payload_hex":"41007cc1a076417200000000001000006e5d0000","sni":"","session":"4cfd3f66-4cf5-4bea-a5a9-fee128eed632","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:35:19","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\u001d���a\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000?�\u0000\u0000","payload_hex":"4100871d95b1fc6100000000001000003f9f0000","sni":"","session":"f59211ba-b7d3-4c36-9b61-711cffb1b3fc","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:35:13","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\u001d�T\u001e�\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000?�\u0000\u0000","payload_hex":"4100871d95541ec200000000001000003f9f0000","sni":"","session":"27bfb7d9-f197-4f20-b908-e60b2b68a15f","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:35:10","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\u001d�\"��\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000?�\u0000\u0000","payload_hex":"4100871d9522a5a200000000001000003f9f0000","sni":"","session":"bca6dc7d-4b62-445e-bf80-f4ea39ae1854","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:33:31","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u00008؏<�5\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�t\u0000\u0000","payload_hex":"410038d88f3cdf350000000000100000e1740000","sni":"","session":"ff4549e1-6e4d-48f2-bd1d-ed634e2ca677","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:33:25","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u00008؎�\u001aJ\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�t\u0000\u0000","payload_hex":"410038d88ee11a4a0000000000100000e1740000","sni":"","session":"acd38e52-9cc2-4a69-a7d1-b56e0c7e5255","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T16:33:22","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:S}*���\u000ex\u0018RE�׹c����6:target20:S}*���\u000ex\u0018RE�׹c����e1:q9:find_node1:t4:�2\u0000\u00001:v4:UT�\u001e1:y1:qe","payload_hex":"64313a6164323a696432303a537d2ab6ece80e78185245bbd7b963a48d7f96d1363a74617267657432303a537d2ab6ece80e78185245bbd7b963a48d7f96d165313a71393a66696e645f6e6f6465313a74343a92320000313a76343a5554b91e313a79313a7165","sni":"","session":"cef791a6-cb5e-4ee6-b3ed-388aa50b9822","bytes_in":103,"source_verified":false,"enriched":{"digest":"4b8dec663ee66005","strings":["d1:ad2:id20:S}*","6:target20:S}*","e1:q9:find_node1:t4:","1:v4:UT","1:y1:qe","21:v4:UT"]}},{"timestamp":"2026-10-05T16:33:22","port":39131,"src_port":40981,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u00008؎���\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000�t\u0000\u0000","payload_hex":"410038d88eb284a40000000000100000e1740000","sni":"","session":"8e3f26ae-7303-4c1a-a63b-305863cdbe6c","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":3080}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-27","count":158},{"date":"2026-08-28","count":46},{"date":"2026-08-29","count":62},{"date":"2026-08-30","count":25},{"date":"2026-08-31","count":86},{"date":"2026-09-01","count":153},{"date":"2026-09-02","count":16},{"date":"2026-09-03","count":65},{"date":"2026-09-04","count":67},{"date":"2026-09-05","count":71},{"date":"2026-09-06","count":65},{"date":"2026-09-07","count":34},{"date":"2026-09-08","count":70},{"date":"2026-09-09","count":29},{"date":"2026-09-10","count":203},{"date":"2026-09-11","count":82},{"date":"2026-09-12","count":66},{"date":"2026-09-13","count":65},{"date":"2026-09-14","count":37},{"date":"2026-09-15","count":139},{"date":"2026-09-16","count":28},{"date":"2026-09-17","count":98},{"date":"2026-09-18","count":69},{"date":"2026-09-19","count":108},{"date":"2026-09-20","count":109},{"date":"2026-09-21","count":164},{"date":"2026-09-24","count":11},{"date":"2026-09-25","count":77},{"date":"2026-09-26","count":120},{"date":"2026-09-27","count":129},{"date":"2026-09-28","count":127},{"date":"2026-09-29","count":63},{"date":"2026-09-30","count":28},{"date":"2026-10-01","count":133},{"date":"2026-10-02","count":157},{"date":"2026-10-03","count":42},{"date":"2026-10-04","count":67},{"date":"2026-10-05","count":11}],"recent_events":[{"timestamp":"2026-10-05T16:59:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��\u001e���]af��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9ac1e8be69b5d61668af4","method":"","user_agent":"","ja3":"","session":"d9fe0b2e-e1ca-4d1c-b566-7585dd46cff2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"242f30feed36daa5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:53:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�S��\n(u�)/�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb95397f20a2875af292fc6","method":"","user_agent":"","ja3":"","session":"558cc866-2f4e-4fc6-938a-bc68ac6387e3","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"526b00e64013c5ba","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:48:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��$��N��-�~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9f42495d04eedf02dc37e","method":"","user_agent":"","ja3":"","session":"40196d1c-87bc-475f-9e1c-1ca56c5ae9d3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c0b13b8c8c2ebf83","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:45:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�׻�ڔ\u0013�d�\\","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9d7bbe1da9413dc64cb5c","method":"","user_agent":"","ja3":"","session":"b613f1cd-f964-47f6-8cbe-2672efa396e2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"38d126ab5d1c7fed","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:42:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��]4�T�܌\u0013�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9dd5d34fc54b8dc8c1399","method":"","user_agent":"","ja3":"","session":"1af59104-1818-4353-8cbf-a6f1d1ab65f7","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e283727c854ade1e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:41:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��4\u0017%A�+!�\r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9dc34172541d12b21d90d","method":"","user_agent":"","ja3":"","session":"7c8616de-faec-4f91-9c4f-521be199cb75","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"529c222c20f5bd42","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:39:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e����+w�8\u001fd\u0002","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9b9bda82b77f6381f6402","method":"","user_agent":"","ja3":"","session":"10561b5d-22b3-470c-9eb4-b76b3b742787","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"3b3bc43cf2b3c378","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:38:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e����D�O\u0004b \u0018","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9a4c0b4448f4f04622018","method":"","user_agent":"","ja3":"","session":"e6c0e273-d341-4a5e-8e6f-477d8bd58f2a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"79223be4b5b81471","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:36:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�F��GQO��}h","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9468fe847514fbab57d68","method":"","user_agent":"","ja3":"","session":"700c8c37-6041-499e-8499-fd8d71033a4a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2bd480243572ca62","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T16:34:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��b�M_�|\u000b��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9a862de4d5f977c0babb5","method":"","user_agent":"","ja3":"","session":"75716457-b0cd-4699-8d0a-8da62122fec7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"80c32a110b3bd7ba","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T18:51:45.772927+00:00"}