{"ip":"190.13.5.68","total_events":522,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"522 events across 1 port(s)","confidence":"medium","network_type":null,"why":["522 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"109,535 bytes sent","bytes_sent":109535,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T00:03:40","last_seen":"2026-10-02T04:40:50","events_24h":0,"events_7d":120,"geo":{"country_code":"CO","country_name":"Colombia","region":"Santander Department","city":"Bucaramanga","lat":7.1274,"lon":-73.1191,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":"190-13-5-68.telebucaramanga.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":522}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-16","count":37},{"date":"2026-09-19","count":86},{"date":"2026-09-27","count":177},{"date":"2026-09-28","count":102},{"date":"2026-10-02","count":120}],"recent_events":[{"timestamp":"2026-10-02T04:40:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�훕p��B�\u0018��У�c����5r�0ed��\u0018 xl��!ꍬ\u000b+�����-��\u0000�˜a`�\rNȆ�\\f܀\u00120k��z��M]��,�\u0006\fE�c�\u0006뜺�+h����Og�\u00020�'�\u0010�\u000f2@��y�{\u0014�\u0016�?����;4��\u0004������1\u0014��b �\u000e�#|\"w�\u001a��3N)/\u0015Ψ�|«)f\u001dq�\u0000e`\u001fA�\u0010�T���,�j�ml�C}�!!���h��\u0002��\u0011�C�\u0018@�\u00103�'\u0016\u000f�H��L��9��c6Ϡ�(\\�(\u0010\nV�(Ϛ|�\u00145\r����x|ߤ{ӳ=��\bS�W\u0005�L������6j0�gy\u0019�<��7��\u0002�3t\"�\u0012�\n=�Ab�v�\u0006�D�\b�\u001b���\u0010�������\u001dqO��F\t\u0003����\\-\u0010�b����':�'-��U\u001d��\u0011�_=��\u0013\u0013�\ruX��T����2��\u001d�F���\u0014u��\u0004��\u000f_��\u001e�n���Ε��zN!�#���\u0015��޶\u0019R��\n*\u0005dQ� \u0010�\u0007���\u0019\u000ei~\u000e��4\u0001�\n��飛z8�7�\u000b1T�e��\u000f\u0014A�+����\u0019�ٿ>?�/��k���`�����M��AC\u0018�l?\u000be�\u0006�](��I��k+b���:\u001e\u001bb��\u0015��*+����\bS��\u000e1^.�����&t\u0019 �b؜\u0003��(��Օ��LS���I���9xy\r\u0007@\u001c\\��n�\u000b��\u0004��~���#u\f�\u0011����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"75dfa7cb-f345-4833-851e-04653f6ea8a2","seq":1,"duration_ms":100,"bytes_in":607,"bytes_out":11,"enriched":{"digest":"c3ed7ad5e07f08b8","strings":["#|\"w","3N)/","b"]}},{"timestamp":"2026-10-02T04:39:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-BydGoN3gMc(n","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d427964476f4e33674d63286e","method":"","user_agent":"","ja3":"","session":"84540a6d-3ed4-4c19-bf79-bed4cf2f8475","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"8fc6101193d75526","strings":["BitTorrent protocol","<-qB5230-BydGoN3gMc(n"]}},{"timestamp":"2026-10-02T04:38:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"~�3�=�Ӣ��J���EQŪ3�dq�x`�}\u0012\\l��䝆���ZN\u0002V\u0014=ر�J�^7�ېS�H���#�w�\u0004�A\u000bķ��~���)e�\nx(�Y~\b��i���~>+�G�p0���Wc�\n��L���_?r�_\u0015#IO��,�u,�><�\u0002���FN���\u0006�jE�\u001c{���\u0001?\u0010cޏ\b��z�N�頰�'Vo�R��W�\u0015��I��~a��hA\u0013E�ID�\u0013��\u000b�0Rr\u001c��g,����m=\u0019\u000e��B(���s���]��\u0013%]\u001aB���j�C\u0006Qӊ\u0006˲�J|H����0�TCR�\u000ft��h_�C\u0019�\u000f\u0018Y9?���Xˁ3�=z�Z�%�^ztg�A>R��tq�1p\u001a�>\u0017�\u0005�D|��\u0016�B^}��&K_\b��w��Jn!�#;�(�>\u001bY��}�ˏ\t�\u001d�l8�s;e��k�az�F\u0012�\b�S7�Pd�x�Ќ\u0017\u001d�Bsy\u0016n\u001d-����|&.g\u000e�����Aѥ\u001cX>\u0012�\u0005:\u0007�V������L�G�\u0017�Z��Rr)O�#�[o\u0016�+��]�k�ϱ:���\u0005��>'���D���:\u0011�\u0010�FΙ�2s���Z�[�\u001bG~�+��O�\u0004\u0012�QG�<\u0001���\\�a�Y�˄`\u0013f�b��-\u0017���N�K��\u000e�Ovn��d�Ň�#\n��\ng�թ}�4>f���%u2�i_{��O{q~���;�\u0018���~RXE����\u0018\u0015�[)\u0000���{d�h;\u0012�J\u0017�}��\u001a-#�Af9����\b15n\u000b����.�:\u0004���\u000b��\u001f����\u0012��(\u0006h\toݻm޷/�-��~88G*;���5*lp>�\u001d�\u0019b�����lo�xn5�\u0010i�X��rC�\u001a�\u001f","payload_hex":"051fd37a12b79fceba4bfbdcf0db401eb1bedec4937744a5d5266eb7716d51dcd8fb9db13cc39baa075e3cd4fbbcc974f91e5de79aedb5c4873914d328e6155ad66aa85063d8358e0edabe6789e19c33ff81dabe21c3b1f616a0190f17d7304b06f59ff930517e9ea20fc06aba2924b4f3b390f79362017551bddff3b1d54a595e21b9e26c8c1766e86a5591612cebe775d1809973b2b0ba4cde95abd69ffddd199523f6a27cfa4db51f2af2f7a28257a37b0a9b8cf7fdbc77214ec0d2fbf46113d24779ef1ef2fa9a864a703ac76e87df7ff4afca6e574d03dd21fd5044243e79166e1d2dfda597887c262e670efe89e4c3da41d1a51c583e12d0053a07b75690ba859dd6c04c9d47e817835ab2805272294fdb238c5b6f16f42bfbf45d866bb0cfb13adae59f05e7d53e279293f544ffa1cd3a119910a246ce99f93273c5c2c45af45b881b477ec42bd5d54fa80412e751479e3c01f1f7b15cd761d1598bcb84601366c562e4f72d17b9e6b74e934b85fb0ec94f766ec1ea64afc587a7230aefd80a679dd5a97dc9343e66a7e584257532fb695f7bf5fe4f7b717ea9e8973ba07f18f58c987e525845e0f3c3d818158a5b2900ba86ca7b64f0683b128c4a179a7db8c11a2d23cf416639e0cbe5ae0831356e0bbed6fa892ea23a048bc7d30bd2f71ff7eed3ea12fade280668096fddbb6ddeb72fb32daaf97e3838472a3bcbd5fa352a6c703e921dc41962c6e693c3fa6c6fd5786e359d1069b658ecd672438f1abf1f","method":"","user_agent":"","ja3":"","session":"f56f84cb-2360-409e-8bec-b34da309dc0c","seq":1,"duration_ms":100,"bytes_in":548,"bytes_out":11,"enriched":{"digest":"152fff93a6d66e5a","strings":["JY^!","PD$>y","|&.g","Rr)O","O{q~","~RXE","~88G*;","5*lp>"]}},{"timestamp":"2026-10-02T04:32:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-mC1FnTT)fh9Z","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d6d4331466e5454296668395a","method":"","user_agent":"","ja3":"","session":"b24a0ee8-4831-4db4-9d31-6d797ec4d49c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"9059a09d531cfb7c","strings":["BitTorrent protocol","<-qB5230-mC1FnTT)fh9Z"]}},{"timestamp":"2026-10-02T04:31:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�S��g}����c!\u0001r�,���\u0003z\u0002�\u0011ce\u0005\r�p��,�};����lԤ��n���#\b�Ck���:\u0017��V��U��\u0002�KX����_�\u0012�l�le�^�\n�>2�%��\u0006>�_Y��\b�re�\u0013��\bƆ\u0016�X��f��~�\u0002����sN\rDo\u000bFUv(&�Ѫ\u001f�\u001e\n�\u0014yZ����","payload_hex":"cd538de5677daf9baea863210172fc2c9eb3ff037a02a1116365050d7fc570d3d92cba7d3ba0f696f86cd4a4d3f46ed7d0c12308e4436b82b7f23a178f8c5689fe55ff9802ff4b589082a18d5f9212d16cec6c65f35ed10aa63e32e225b7e1063eb15f59b5aa08977265f313f09508c68616c358e8c266c6e07efa02a18bf68b734e0d446f0b4655762826f4d1aa1fa51e0ace14795a9dc0dbf6","method":"","user_agent":"","ja3":"","session":"2dd1008d-56d1-4ae3-8209-61b897ab0281","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":11,"enriched":{"digest":"2880d347daf20387","strings":["FUv(&"]}},{"timestamp":"2026-10-02T04:29:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-Ou2HU2OqOf6c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4f75324855324f714f663663","method":"","user_agent":"","ja3":"","session":"f0d75685-7045-4ef4-9bda-914d1ff14ec4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"19dac0dd21ec600c","strings":["BitTorrent protocol","<-qB5230-Ou2HU2OqOf6c"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-06T22:52:38.822665+00:00"}