{"ip":"190.138.53.62","total_events":549,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"549 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["549 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"111,527 bytes sent","bytes_sent":111527,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T18:13:50","last_seen":"2026-08-15T16:53:05","events_24h":210,"events_7d":549,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Matheu","lat":-34.3769,"lon":-58.8494,"asn":7303,"org":"Telecom Argentina S.A."},"source_domain":"host62.190-138-53.telecom.net.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as7303","label":"TELECOM ARGENTINA","category":"isp","url":"https://www.peeringdb.com/asn/7303"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":549}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":104},{"date":"2026-08-12","count":235},{"date":"2026-08-15","count":210}],"recent_events":[{"timestamp":"2026-08-15T16:53:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2Ze!Hv8-HRxl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d325a65214876382d4852786c","method":"","user_agent":"","ja3":"","session":"3391f549-cc46-4f9f-8418-2bc20b9f334b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"fc2030c7173c5b3d","strings":["BitTorrent protocol","<-UW1605-2Ze!Hv8-HRxl"]}},{"timestamp":"2026-08-15T16:50:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0019uU\"յ����+\u0001p�-ɔ��)m<8pp�\u0012V\u0003�Ꞡ��3Wɢ\n۶��T\u001e�Џ#�����珼/\u0013�S^��r\u0002\rX�\u0012l��e������I$Ů�bp�;�]\u0017��\u0006\u001f��L��/ww��,Ü�5�\u0010MD������\t���!��\u0016\u0018V;�]��h\u001cy%�ԁ��\u0004k.���\u0004)7\u0010��>��4��\u001e��8sH��`�\\3{؏\"���ASd�P:�+�\u0012\u001c�\u001f\u0012gD슕��X���\u001f\u0017�\u0003\u0016��Yͷe�q?w�K\b�З��qH��GuI�r��\u001d���46w�tԷc+���Y���W�n�{õ�˯�R�>\u001d��nI���q\u000b0�\u0004�xn���\u0011�^r$�\u001d3\r­:\\R�8�PzKX\u001c�\u0018{N�����9\u0019Qf*1��X&��\u0002�\u0010\u0016�M]�\b-��\u0017��>%�����\u001b\u0005��8�m����;Ե��ᾴ��g>���?˥5��߾ݝj\u001e��\u0018\nez)\\˰!�GS���j�W.�'�����,V\u001b�v�p�����\u0000�?�\u000b��2$%�ֵ\u0018�fE�0�m�\u0000Ί�ǐ�8�\u0015��\t�\u001aw�u��� �a��\u001e��H��Zع�\u001f\u000f]�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"377d8427-9cb7-4173-a8fb-89da1aebccbf","seq":1,"duration_ms":100,"bytes_in":505,"bytes_out":13,"enriched":{"digest":"7ce7056973b39a87","strings":[")m<8pp","PzKX","Qf*1","ez)\\"]}},{"timestamp":"2026-08-15T16:48:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-s7fO*jpsLM-H","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7337664f2a6a70734c4d2d48","method":"","user_agent":"","ja3":"","session":"636a6ba2-edee-4340-aa3b-857983dbacfc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0290ab1b0726f100","strings":["BitTorrent protocol","<-UW1605-s7fO*jpsLM-H"]}},{"timestamp":"2026-08-15T16:45:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\"���y�_\u0015����y�~�5?���\u00111oD�K��gk��\u0018F��\u0000I7\u001e>s\u0011�%s�\u0015\u000e�K\t����B�{�T\fx�����\u0003�e%\u0018Zija�@'%��\u0007��м��\u0000e�E�Xc\nd3��A���\u0000�\u001a\u000b��#\u0000�L�\\=���M}��N�Ԋnl\u001d�����\\ƅ�0�#����ڡ[׮��xn����8��\u001e�&���(�i��\u000bЊz�j�7\u0019��\u0011&J��h8���6,�s�~�Њ�����Zija","-q#`","/lTF","yZoI","FN&m"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T16:54:37.447333+00:00"}