{"ip":"190.60.61.139","observed":true,"total_events":547,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"547 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["547 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"115,739 bytes sent","bytes_sent":115739,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T04:33:23","last_seen":"2026-10-16T03:28:02","events_24h":0,"events_7d":547,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CO","country_name":"Colombia","region":"Atlántico","city":"Barranquilla","lat":10.9711,"lon":-74.7837,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"139-61-60-190.ufinet.com.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":5,"protocols":[{"protocol":"udp","events":5}],"ports":[{"port":39131,"events":5}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-13T04:33:14","last_seen":"2026-10-16T01:02:14","recent":[{"timestamp":"2026-10-16T01:02:14","port":39131,"src_port":61924,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u0019�\u0005B2�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"410019f4054232e30000000000000000fcd10000","sni":"","session":"4d7c374c-a203-48c3-8d8c-37498cc23345","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T23:57:38","port":39131,"src_port":58753,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u001f�\u0013\u0002��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�M\u0000\u0000","payload_hex":"41001f831302cbcf0000000000000000f64d0000","sni":"","session":"64394c63-9198-4c25-826d-9454226909a2","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T03:44:17","port":39131,"src_port":50994,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000Y�)�a�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0003\u0000\u0000","payload_hex":"4100599429d361a60000000000000000ef030000","sni":"","session":"78a0b5d3-332c-4d1d-acf6-95e1c9de847c","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T01:07:39","port":39131,"src_port":54241,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�H\u0002ԯ�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0011&\u0000\u0000","payload_hex":"4100bf4802d4afd2000000000000000011260000","sni":"","session":"0a5a07be-8960-4ae3-ad5e-c8950f8e0a83","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-13T04:33:14","port":39131,"src_port":55782,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��\u0003\fbu\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100fe87030c62750000000000000000d8e20000","sni":"","session":"dd5505be-f11f-401b-b9da-4dea05f99dfd","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":547}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-13","count":112},{"date":"2026-10-14","count":143},{"date":"2026-10-15","count":184},{"date":"2026-10-16","count":108}],"recent_events":[{"timestamp":"2026-10-16T03:28:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"!p��\u001c��H1��jM���QIGa5MR�X�}3y,�5��3���x�\u0007�\u0007{�s�`V��\r��\b\u0003�\u0016��'\"{��0zd��~�<�\n�\u0016Q��\u00014B,��]��\u0000�p�;�C'��M����\t\u0003�P\u0014\b�*{��V \u000b���k��\u0018�n\u0002Ns�ͱ��+�z\t \u0014�\u0001\u0003��\u0017T��|�?�]��\u0014�����\u0018lߜ\u0013�f��! �쎆0�ח��\u0012P��\t�aރ������L��*��\u001a#\u0004\t=b\u0013���.�\u0013�׭���]v��\u0011�)�;�Cu\u0003�\"�N�fڱ�\u0000�\u0018���\u0007��9��W�㫟��>\n^��,�q���\u0011��\u000fkk�\n\"�'�g!CM'�h�0\u0018]��\u0007��p���\u001a�^��E��Z�ѩ+\u001a+��H\u0006H�\f\u000fy�W��I\u0006��G\u001f+\f��u+�$���\u001c\u0014-�\bR��%U��w}\u000e��,�\u001bLnlƥ�2�,�eU�PO�\u001ax��w��\u0014�gUb�\u0006H\u0001�f��w҉��MQ�K&�$!�G\u0015I��#�q�m\n�Jxy\u001b��Ӷ�\u0011+M\u001aL{�\"�A�4���(�:��\u0004��rzL�\u0015:n�\u0012�5��L��\u0004���I\rI�b�\u000e̋\u0018�6\u001c�^���w\tg�[�\u0013�ˋPu���h����s_Y��\u0006)��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8c2b8a9e-baef-4071-b351-b46399f4eec6","seq":1,"duration_ms":100,"bytes_in":534,"bytes_out":13,"enriched":{"digest":"53ad62cb9155e12b","strings":["QIGa5MR","}3y,","g!CM'"]}},{"timestamp":"2026-10-16T03:26:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-lr)d92)A-anB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6c722964393229412d616e42","method":"","user_agent":"","ja3":"","session":"818eed7b-d490-425f-954c-f56018851c31","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4fef5dd7d73cf7f5","strings":["BitTorrent protocol","<-UW160N-lr)d92)A-anB"]}},{"timestamp":"2026-10-16T03:25:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�'TM�=u�����r�\u000e*4�)bm�j\u0019]�\u001aH�\u0011��\u0011��\u0006��Ԃ��-�����&\u0000,5��\u000fȣ�%�\u0000���]PM��u5���\u000bR�{T�\u0010��\u0012��/�e���\u0018\u001d��2U]\f�Q$\u001aD���buc��-�A�p��q\u0000Vl�\u0010u��\u000f�O,�\u001bČQ��~�9��_\f�D���@���\u0003���:��\u0012kGܖ7\u0001�9�PlzE�庻�D[%F0j\u000b3�v��w��;ğd�\u001c�\u0015I�\\\u001b#���(\u001b-]�x<\u001ah�\u0014�L����3D5�c�R�4��\u001562���\u001c�e.\u0011Yw��_u��OL��~jG���\u0001�����E���u���\u0007\u0004\u0010\u0018��K\u0001t�t�Y��\u000bPJ\f�\u0004\u001b��\u001dc���\u0005(e��}���`Z+9�r�3\u0012lrᘮ�j5��z��ut'�\t?�l�I��\u001bu��{[�i\u0015Z\u0010\u00003~\u0000ޙ�\u001e��'�\"Jw�\u0019�m�\u0012��a�\u0019]�BY%","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ae6b6cb1-6b9d-422b-9c60-53b0901ecf33","seq":1,"duration_ms":100,"bytes_in":402,"bytes_out":13,"enriched":{"digest":"1676a2162024acfb","strings":["D[%F0j","`Z+9"]}},{"timestamp":"2026-10-16T03:23:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-PK9brghI7~Cd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d504b396272676849377e4364","method":"","user_agent":"","ja3":"","session":"267d1835-7feb-40e1-a635-523327d3af52","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c08f341e464eafd3","strings":["BitTorrent protocol","<-UW160N-PK9brghI7~Cd"]}},{"timestamp":"2026-10-16T03:22:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"D���E�p,᳇�WgH�nG2�`���\u0015)�����ωí��t\u0017��\u000e��j+#�s\u0011g�\u001a\b\u0007���\u0016��p�%������ei����\u001a@6}\u0014s�/\u0005��\u0011d%vI.�\u0006O\u001c\"���g����=��:��I�G�.A��G��1;G�kʽ�F�\u0011i��E\bYo�\u0001���[<��J\u001d�EY�a��2���I�M��\u001a�?S�^9\\��#��ōǍF��\u0006�d`��qy�\u0007�1\n*��q�\u0010������\u0019�]<��j�\bD�ݟ\u0000}��� }�Rnw��7�2�G��R-\u000f�]t\n�^�\u0018�m���|�3|L\u0000\u0002ll���t��}��n\f\u0012�Ҷ0�S�iF�)O\u0011��WMU\f","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"89cfb94f-c793-4712-9df6-38cb3d465d72","seq":1,"duration_ms":100,"bytes_in":306,"bytes_out":13,"enriched":{"digest":"8560bfe4a7d6f27b","strings":["d%vI."]}},{"timestamp":"2026-10-16T03:20:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YYCWi33*7)E1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d595943576933332a37294531","method":"","user_agent":"","ja3":"","session":"3616d270-c3a7-42ed-bc35-356955ca77f8","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"724465cc5d9b8556","strings":["BitTorrent protocol","<-UW160N-YYCWi33*7)E1"]}},{"timestamp":"2026-10-16T03:19:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"_�D���T�?�\u0010!�ۄ\u0016W�\u001c��p�R�\u000b1t�z{b&+���E��?u�ޏB,I\u0002\u0016\u0000)\u0001a\u0004\u001bE\u0001*mh�v�1 �q�w`��8#�����\u0010a��\u0004�B��B\u00109¾\u0002זΐ~�au�V$2� qA�\u000f����\u0011�@׊�M����'D�n�Q\u001ek���v����$e���z2\u0004�cb\t\u0011'f��[\u000bƠ8N�L�ԕ�\u0005 :������\u001b�\b+�Ч\u0016u{e��\u0006x��>Ƿ�[","payload_hex":"5ff94482869c54843f8b1021fcdb841657f81cc7f270c552910b31748d7a7b62262bf8a8c645e6f63f75c1de8f422c49021600290161041b45012a6d68e576e33120f971f97760bcf23823d6c3fed9e01061f48b048042abf0421039c2be02d796ce907ea26175d5562432aa207141cd0fa0b8aeb011b540d78ae44d9082feda2744b76ecb511e6be9f9c576b885cdd92465bdba8a7a3204a5636209112766ecac5b0bc6a0384ed54cc7d495eb05203aeb98c0e6b9c31bed082bfdd0a716757b65bbb90678ccd53ec7b7805b","method":"","user_agent":"","ja3":"","session":"ad2ccb00-d3e2-4ab3-8a10-b2284f761d77","seq":1,"duration_ms":100,"bytes_in":204,"bytes_out":13,"enriched":{"digest":"ec2daf864834bf67","strings":["z{b&+"]}},{"timestamp":"2026-10-16T03:18:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.BCmJaYlCQ7V","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e42436d4a61596c43513756","method":"","user_agent":"","ja3":"","session":"69ce39e6-8fdf-4ecb-bacf-3e52cc1145d0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e5ec349a753defb4","strings":["BitTorrent protocol","<-UW160N-.BCmJaYlCQ7V"]}},{"timestamp":"2026-10-16T03:16:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���&��'�(L���G\u0004\b\u0014�6���n\b�KK?���\u000b��g]ʇY3\u0016rZ��R��m�i�\"\u0011\f`\u0002q\u0010Y�\u0015\u0017��[x?Kl��-\u0001��\n\u0002lz�������\u0015�H9�����北V�u\u0014��*�aT�W�JrI�r�p��pU��y���~'�|.\\/���S\u0007\u0016�X��)ĥ�ָy\u0004\u0012`~>\u001a\t���ijߕ\u001c�\u0016�):l����u����\u0006����$��\t�!\u001d\u0016�\u000f�{P�k����[k\u0001\u0018�>&�s��߬��U� ��87 �Z7��4&!Ɇsg��m�M\u0005\u0018+蟮���C�i�[�����}f7GT\u000f�-2}l[�$x�N��\u0016�9��M��$S\u0011ү\u000f\u0006\f�x���k�\rG}��\u000b\"�\r]?���F�6{\t&ڂm4g\u0019�A���ʪVGmuv�A;��\u0017\u0002ܝ�Aa|ܭ�\u001d����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1966111a-e7da-4ee9-808e-b6d165d0e079","seq":1,"duration_ms":101,"bytes_in":369,"bytes_out":13,"enriched":{"digest":"811f5a36fbd1c2b3","strings":["[x?Kl","}f7GT","-2}l[","VGmuv"]}},{"timestamp":"2026-10-16T03:15:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N--XSSKK_4hvgx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2d5853534b4b5f3468766778","method":"","user_agent":"","ja3":"","session":"018a2d4b-32f4-4950-8753-52cb693ed293","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4bcb6e7330550737","strings":["BitTorrent protocol","<-UW160N--XSSKK_4hvgx"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-18T10:42:34.070211+00:00"}