{"ip":"189.28.65.96","total_events":846,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"846 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["846 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"57,528 bytes sent","bytes_sent":57528,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T18:26:55","last_seen":"2026-08-20T10:50:06","events_24h":87,"events_7d":704,"geo":{"country_code":"BO","country_name":"Bolivia","region":"Cochabamba","city":"Cochabamba","lat":-17.3822,"lon":-66.1518,"asn":27882,"org":"Telefonica Celular de Bolivia S.A."},"source_domain":"LPZ-189-28-65-00096.tigo.bo","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27882","label":"Telefónica Celular de Bolivia","category":"isp","url":"https://www.peeringdb.com/asn/27882"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":846}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":8},{"date":"2026-08-12","count":104},{"date":"2026-08-13","count":30},{"date":"2026-08-14","count":98},{"date":"2026-08-15","count":155},{"date":"2026-08-16","count":54},{"date":"2026-08-17","count":159},{"date":"2026-08-18","count":109},{"date":"2026-08-19","count":111},{"date":"2026-08-20","count":18}],"recent_events":[{"timestamp":"2026-08-20T10:50:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��5h�!���:\"�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83568d721fab5ad3a22b3","method":"","user_agent":"","ja3":"","session":"bfe8edb1-98f9-4b1a-a74f-a1db3944b627","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"4eee89dcd2871334","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:45:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���a\u0002գ��ʀ�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8986102d5a3dac6ca80e4","method":"","user_agent":"","ja3":"","session":"bb6788cc-60db-4c74-81da-ef600a951527","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"fb3e6eda86af55f0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:42:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��A�=6;N�u�`","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b841e33d363b4eba75d160","method":"","user_agent":"","ja3":"","session":"17a19efc-19f1-4ab7-93f6-8453e5b53743","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"89dab8ad6ce68757","strings":["BitTorrent protocol","<-UT360W-","=6;N"]}},{"timestamp":"2026-08-20T10:39:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0014\u0014Lq^��,�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d914144c715ef8962cc0","method":"","user_agent":"","ja3":"","session":"8389bec6-c55e-4a89-85b1-8eafd5c4962c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d95f96998d0ddc71","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:38:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��_aaܣ\u0013��\u001b�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85f6161dca313b5b31bf2","method":"","user_agent":"","ja3":"","session":"eecb6c6d-ce52-4901-b0c0-6361233b0c60","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"96fadd54f2482a10","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:36:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��S��NJJD5A�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b853f1ecc78a4a443541e7","method":"","user_agent":"","ja3":"","session":"d44def44-1d5b-4cf4-93a5-f60c5d71b795","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"afd7b6f9f96063b5","strings":["BitTorrent protocol","<-UT360W-","JD5A"]}},{"timestamp":"2026-08-20T10:33:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����0�W�ݕ\"","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b6befe30b057e5dd9522","method":"","user_agent":"","ja3":"","session":"a5d01c6c-518e-4b38-844a-0ff61cb76df8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"8026bc3db9901eac","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T02:01:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��8��.\u0002u�u`�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b838bdb62e0275a275608d","method":"","user_agent":"","ja3":"","session":"ff856cd7-e108-4579-a59c-a48585a79068","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ea1f1932b41961e0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T01:59:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��#G�\"\u0019�\b\u0016I�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82347fa221982081649ec","method":"","user_agent":"","ja3":"","session":"ce8e8726-3485-4961-a8ae-08cbcae28750","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c20f86454334a808","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T01:57:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����~���_��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8bcaa947e99a9905fffab","method":"","user_agent":"","ja3":"","session":"e7f14ed9-6460-4bfb-879e-d8bd233a32a8","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b417efd0fcc5309f","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:29:37.994500+00:00"}