{"ip":"190.60.38.230","total_events":569,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"569 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["569 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"122,114 bytes sent","bytes_sent":122114,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-17T19:08:33","last_seen":"2026-08-25T02:01:04","events_24h":0,"events_7d":1,"geo":{"country_code":"CO","country_name":"Colombia","region":"","city":"","lat":4.5981,"lon":-74.0799,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"230-38-60-190.ufinet.com.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":569}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-17","count":37},{"date":"2026-07-29","count":14},{"date":"2026-07-30","count":44},{"date":"2026-08-06","count":248},{"date":"2026-08-07","count":67},{"date":"2026-08-08","count":4},{"date":"2026-08-14","count":123},{"date":"2026-08-22","count":20},{"date":"2026-08-24","count":11},{"date":"2026-08-25","count":1}],"recent_events":[{"timestamp":"2026-08-25T02:01:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"d��W�\u0018\u000e\u0013��ڢ//�Fz��+]a\rՕ��6e �]��K�tOH\u0015s�G����IH.��S��&���F���\u0010U�\u00035fK�l�Ț\u0013��=\t؟!��W����Fb��f)\u00036\u0010","payload_hex":"64a99d5784180e139383daa22f2ff6467a9cec2b5d610dd595a19e366520ea5ddac74ba0744f481573ca47f9a79dfe49482e90ca53c9ed26b0a29d4690f2ad1055de0335664bd26cacc89a13d3c33d09d89f21fc9357fc84b0ec4662a9e56629033610","method":"","user_agent":"","ja3":"","session":"30c15515-33c3-414f-a6c5-73ffd4cfa0f2","seq":1,"duration_ms":100,"bytes_in":99,"bytes_out":13},{"timestamp":"2026-08-24T22:14:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-)uf92pbSjUze","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d29756639327062536a557a65","method":"","user_agent":"","ja3":"","session":"3f1e790c-97ed-4fb6-93b7-10946b89e4e7","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"79941fe7453b9725","strings":["BitTorrent protocol","<-UW1609-)uf92pbSjUze"]}},{"timestamp":"2026-08-24T22:10:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"N����{�$m�}�N�K��;Z�@�A�̡�m{\t���\u001f��\b�ۑ\u0004Z�l�R�:�95������y�\u0000dSF\\�E4i�d̍+���\"��e�?�\u0011����21CE\u0019�\u001b]�\u00163.�Xf\u0015�y\u0017,�q�\u001e�}��D���\r)�$$��J-!ߊ{zѝRv��z��\u0016ڶw@l���p�2����܋�\u000e�~\u000f��H\u0000lN�\u001a��U\u001f�T�ȇ_H�!x��K�̇�=�\n��j�\u001e\"X=�Ū��oвA��&\u001e^��R�o��P��ô���I\t�2�ޫ�J�MJ��8����TF��%��^��\u0013��_�H&d�o�KB�-��f>��H\u0004H�u�~Ky�j���Q�J���u�\u0010���\u001f��FF�\"�\f�\f՞#�����5\b�%�G�>\u0006<$�#\u00170�E�b\u0015\u001c<�\"\u001f���X C�p\u0014��.nU�#�\u000e���پ5�V�Xy5����\u0017_\u000b��\u0007�8�v�!�\n�V�\u0005�\u001f_s\u0013[-m�H���ɹPBM�.�h","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"eac40d3b-8e1f-483e-a395-4bd968c0778f","seq":1,"duration_ms":100,"bytes_in":437,"bytes_out":13,"enriched":{"digest":"50218afc9e0c8c44","strings":["dSF\\","21CE"]}},{"timestamp":"2026-08-24T22:07:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-iMk*og6R3~yL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d694d6b2a6f673652337e794c","method":"","user_agent":"","ja3":"","session":"72401b4f-afdb-4439-b650-9c2695c88eea","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e5598b2de09bb615","strings":["BitTorrent protocol","<-UW1609-iMk*og6R3~yL"]}},{"timestamp":"2026-08-24T22:04:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ܐ��ʕ\bt!��ŕƵ�8\u0013g�%��t��?�R܎��\u001dx���\t|\u0003���}�N\u0003u������1���ϚCXZ\u001e�AX�bׯ��ӫ�as\r�����$�qX�!\u0000��\u0018\u001f����1��Ѱ\u0019���\u001edT�G@p\u0002�s���S�\u0013s�\u0007���\u0000Dž�\u0004��u�� F�3���tݳO:Rv�C�s��\u0016��F�ε\u0002Vqd\u0014������G?O\r{\u001eM:(\u0017A\u0010\u0001ԓb��~��R#>M���[u)���D�I9�tk\u001f��]\u001d\u0002�2Z1(�譀�\u0001P�3;i�L�?\u0018\u0003��\u0015R\u0013\b/M?��\u0010\u0004Z\u0010^��z��~�\rM��7�A��w���-]�O����\rM\f�\tRT�\u001a\u0013\\��+�Lg�,\u0016y��7n`�u��^w������J���,rE9�~#i\u0019Jg֔\u0004����%ab\u0011�7\u0005��^\"gh%�ԑ5�3�y�@)V_����\u000ej�\u0010�.qR\u000f�]�?�\u001e\u000b�\u0013P�����f\n(W�g�]��Ή�R|o��\u0017`\u0006�T�Z�i3q����nE��\u001e����E�\u0000�\u0018�ιʅ�peo\u0014��ҶD�\u0012�ӳ\u0012x��~�jm��N�����^BO<Ɓ�_f�jZ�\u0005��X���g�p����h��ʮ\u0000�\u0006\u0017\u0004�u��AF�����\u0003\u0003�\u0019�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c1537d1e-f0b0-4589-9d05-5bee0b899bf1","seq":1,"duration_ms":100,"bytes_in":545,"bytes_out":13,"enriched":{"digest":"cad3e6cfdb2b9c73","strings":["O:Rv","R#>M","2Z1(",",rE9","^\"gh%","@)V_","^BO<"]}},{"timestamp":"2026-08-24T22:00:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ffmrsBu7Y(Nh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d66666d727342753759284e68","method":"","user_agent":"","ja3":"","session":"5c439762-dd09-4cb5-a7f5-75c6191f6977","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"23e16d4890c97917","strings":["BitTorrent protocol","<-UW1609-ffmrsBu7Y(Nh"]}},{"timestamp":"2026-08-24T21:57:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014�Hz�_��H�,F4�c�?\"d��6܅��\u0001��ދ�z\u001c\u0001K�X޸)\u000fF�4T��\u0015�t�!b�D�;1�{�/����\u0010&Y�m\u0007�48\u001e�Ę�;`�,=g�P�}�g��hퟛ_U��\u0010�\"�\u0003���\u0006\u0019�\u0000\u0013y��3��H8Ǭ���=��6���l��K�(\u0000m�\u0005@#\u000b^��:\u0007�$X\u0011\u0006�\f\u0002K֡xu^��.�1-��#�ŰL;'/\u0017��7���ɲ 'i(��\u001bE,\u0010��v�?��~y<\u00036dΨ����w�����\u0017�\\0gKp�[2(��\u0004�,�5a\n\u0016f\u001c\tpg&)dHa�\u000e��Ç�(�O��s�\u001e����\u0006��\u0018\u001e\u001f�\u001dX�|E���g5����yw\u001b*�\u001c���*F:i�\u000fp��a�\f���Wx!K\f4\u0005ળB��.\u0018�;�U������2������(\u0002�o����1�KՍ�\u001b����Gb�\u0014h��0��P�hޒ{�X���$S���.I�,W��\u0006��\u0017����d�