{"ip":"190.60.61.140","total_events":976,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"976 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["976 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"203,026 bytes sent","bytes_sent":203026,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-03T02:56:50","last_seen":"2026-08-27T01:57:39","events_24h":0,"events_7d":75,"geo":{"country_code":"CO","country_name":"Colombia","region":"Atlántico","city":"Barranquilla","lat":10.9711,"lon":-74.7837,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"140-61-60-190.ufinet.com.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":976}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-03","count":21},{"date":"2026-08-04","count":170},{"date":"2026-08-06","count":292},{"date":"2026-08-14","count":65},{"date":"2026-08-16","count":135},{"date":"2026-08-17","count":218},{"date":"2026-08-25","count":23},{"date":"2026-08-27","count":52}],"recent_events":[{"timestamp":"2026-08-27T01:57:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"k%\u0010\u0014����\u0019\u001c�J���O�*��G��MF�^�\u0014>�j\u0007���V�\u0004/\u0001[�˼�T��c�#��\n�\u0003���cG�'��(nݓ�~��u�\u0005�+�����A�+We\u000bA\n��̍����\r JG�$��]`�\ni����ͨ�\u001ca���J*����S\u000e&\u000e,���@!��~p]c\u0007\u0018��w��e�٢���Y*��\u0015\u0012�xS��\u0001W�J�T���L���R��Q���G?�A��\b�l\u0001�\u0012�p����f�\u000e+ךjY�-ߵ�3��{�5��/–\u000e:/8%J���B��\u0011x�\u0013\u0010�9��\u0016'���c�:z����b�\u0006S=�':TV�2ѱ&�࢖j�\u0014�\u000b{O��\u001f4j���5�m���y@a���\u0018v���cGb�<��`ذ���\u0001|�-B\tژ\t�*'y�«��)\u0002\u0002UdD\u00060&d�}\u0001����d\u00052ߺW��lDŽ��o;�]5\u001f�)[2�������a`��l~��I\u001d�\u0013\t\r��R�n�jgHkJ����y�>��k�[�\u001a�(�P��x\u0002g\u0003�Xrt���7�\u0019gv���J��\t]��(rPC��\u0014G`8-\u0016�%�8x\u000b\u0000��F9��\u000bB\u0019��!��9���o�e'�\u0002c�\u001eZ\u000b��]���+�\u0003\u000e�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"32490ffc-6d88-4258-ba66-4fac42fb1e4b","seq":1,"duration_ms":101,"bytes_in":530,"bytes_out":13,"enriched":{"digest":"6cac9987bdcb8804","strings":["~p]c",":/8%J","':TV","jgHkJ","(rPC","G`8-"]}},{"timestamp":"2026-08-27T01:56:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-_(~m*D)zJ2aD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5f287e6d2a44297a4a326144","method":"","user_agent":"","ja3":"","session":"4f1c81cc-957f-4be0-a3d6-2651cbc3d9d3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"df02bc2a324b8959","strings":["BitTorrent protocol","<-UW1609-_(~m*D)zJ2aD"]}},{"timestamp":"2026-08-27T01:54:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�C/jS��#�/�@mww\u001c��'|֡�qtI�s\u0004�\"�6���\u0002���J\u0019j�Ƙ�W�r�᪀c��b郂�alH�i�\u0019\r\u0013>�YW�9�B�N���@7�\u0004\u0019\fUƽ�_���lY~\u0003�Z�R\u000bvA\u0002yE�lZ7�\u0001O\u000b>@l","payload_hex":"93432f6a53a0d423bb2fbf406d77771ce6d6277cd6a1bb717449917304bb22d2369586c002c6ea814a196ad1c6989c579c72d9e1aa8063fbef62e98382a1616c489d69ed190d133ec259579139ab42d64ef6a2be4037a97f04190c55c6bdc25fbbd4cc6c597e03f55ac8520b7641027945a76c5a37d7014f0b3e406c","method":"","user_agent":"","ja3":"","session":"08e70e70-ced7-4877-a175-bae073dc5765","seq":1,"duration_ms":100,"bytes_in":124,"bytes_out":13,"enriched":{"digest":"d5a032fce83734de","strings":["C/jS","@mww"]}},{"timestamp":"2026-08-27T01:53:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-cj4CvzP1igCj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d636a3443767a50316967436a","method":"","user_agent":"","ja3":"","session":"97ebf986-820c-40ca-8c42-fb866bc5a7ab","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"81a0d3a2345fada8","strings":["BitTorrent protocol","<-UW1609-cj4CvzP1igCj"]}},{"timestamp":"2026-08-27T01:52:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z�0�oڪ�\u0003��_��J����V6q���]��ԭU���\u000b���\u00067��յ�f�k�\u0012��qB����K�8�Z����L�\u000e�+��A\u0005u\u001c�����\u0003[�����Q�\u001e��I�����udh\u001f��\u0017ۚ\u0000͏���\u001e�\u0019s+6V�b-�ѳe�S6F ��^\r��nϏ\f\u0006:\u0005\u001a�0���8\u0003����\b.yX��^�u\bbgL��\u0000���2�~�Ɏ8�Ior�4�{�3h�Q��y^==�\u0019���{\u0007�K��C�I�&\u001dU��D�B�AlwqT�L�e\u0002J��1C\u0013�\u0004�\u0016i���]�\"W��\nɅ<�޾;lD$\u0003��\b���\u000bS�uH�bG�;H\u000f\u000e�(CЋ�z\u0015aՋ�V\u001d�:f\u0014\u001c�����u;��������vh2�\u0002���|�.�s��(��Qc�x��?�A�>\b�hq�/�oá��Z[�yȾ*�G-W��G\u0003\u0019O����OJ\u001e��B�]��6`E \u0017\b\u0018�:�]8���Km�� �k�`r6l�8j�\n���w���(�v�h\u001b\tٶ\u001c��\u0013,\u0010\u000f��6ЄF3lO\u001a�9�'~�H��B�\u001f��\\sK3K�T�b�M,��\u0018�G=M\u0016-�8ڬ �\u0001ч��,��B�+N����}%fЧ�)��\u0003Ы|T۰�}F< ��\nlO\u0017\u0012�Е�Ѭ�����V�!�α+���/\u001e@�o\u0010,5n\u0017I��\u0001-\u0000*R��@ZG!��{�d�","payload_hex":"5ac230ce6fdaaa9103eaad5fb0834a968ae0d6563671aee8b05d8ed2d4ad55d4edb30be4ed890637fec5d5b58e66c26ba412d3f87142b2aaadec4b80388a5a98b9f09a4cea0ee12bbcc24105751c86a28dbfac035bc7ee8ae58551c31ef6fc49928cd1f8857564681f91c017db9a00cd8fdadbdb1eee19732b3656c7622dddd1b3659e533646209fb75e0d9dd66ecf8f0c063a051a9330ef89f4380381afefaf082e79589cfa5eab750862674ceda10098b793328b7eb9c98e38b5496f72b934bb7b8b3368d151b4cf795e3d3dcc19b0e8ef7b07f04bc4c0438149bb261d55b2d644d342e0416c7771549d4cce65024acddb314313a404e61669fae1f85da622578aca0ac9853cb7debe3b6c442403819c08a1b0ae0b539a7548896247a53b480f0ece2843d08bf27a1561d58bf6561d983a66141cdae39cc1ec753beda69da68ee5ddeb7668327fb702e4a7f37cad2eae73ceef28fdb95163c278f0cb3f9041863e08ee6871fd2fb76fc3a1a4dd5a5bef79c8be2a84472d57ab864703194fdcd6c6ec4f4a1ec08f42a35de0ab36604520170818c93ac05d38d9f0f24b6daae320956bd36072366c937f386af40ab9a9b677bfc6d628a376ef681b09d9b61cf4da132c100fe5bc36d08446336c4f1ab83981277e8b48cdca42a91f9dd55c734b334bd3548162de4d2cbd8c18cc473d4d162dc138daac20bc01d1879c952cfc7fa342fd2b4ebe84b49a7d2566d0a7dd29b4e503d0ab7c54dbb0e87d463c20acb00a6c4f171280d095bcd1acbce68dfc8856e721a7ceb12bc8f9e52f1e40816f102c356e174994b7012d002a52f7ba405a4721978e7bb964fe","method":"","user_agent":"","ja3":"","session":"6443da6c-55a1-4b12-9e36-e4573555dbf4","seq":1,"duration_ms":100,"bytes_in":600,"bytes_out":13,"enriched":{"digest":"fa84b3acfbdead94","strings":["s+6V","y^==","AlwqT",";lD$","`r6l","F3lO","\\sK3K","@ZG!"]}},{"timestamp":"2026-08-27T01:50:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-.iSQU46AeVDn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d2e695351553436416556446e","method":"","user_agent":"","ja3":"","session":"c5d2f9ce-22c3-4ebe-9029-d0bc40aa2c3a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ffce3b3b25a8b61a","strings":["BitTorrent protocol","<-UW1609-.iSQU46AeVDn"]}},{"timestamp":"2026-08-27T01:49:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"^�mD�2n��J��Z�\u0018�s���=\u000b1+]�ta�\r��p\u001f�\u0004�+\u0004�a\u0012\u0016)\u000e�\u000b�s�E�!���Q�s������R�f�6���\u0019.�&j�\f}XXr��P\u0002sV��ٺ.~�hߘ�uE�Z3#�\u0001BF�z��\tb^\u001a9����0�K�� |�iܼ�����+\u00191��e�t[�,*���.P%��Ԗ�7_�d\\�߂\u0007��\u000b��ڸS\u0010����ek]�\u001d\u001d\u0013\u0001n����7�\n?�1����!AfH6H���A\u001b'`'�M.8N���3�~�*e7��~a?��56�>�@$ù�\u0013;\u0018Qmz��`���>W��\u0019�53}\u0006�\u001d<�հ\u0010i�_��(�\u0012���l�2�����\u0001�I]l�%���\u00149�^�3!C��Q�N� �(,�rߜ��F�J�T�+�9�o�O����C8[ጉ1|�6�����e]{�һ��\u0005g7���;��9\u001d��Li�F\\�","payload_hex":"5eee6d44d2326ebceb4aa0ea5ac618ee73a6bfe53d0b312b5dc97461ce0d93e0701fe604d52b04a0611216290eca0bba739645ee21ffb0bf51c873e3b9d1feeaf3529966ef36968adc192e9d266a880c7d585872809250027356f693d9ba2e7e8d68df98b27545cb5a3323a80142469c7ab4cd09625e1a39ececff8230e14bf3c4207ca069dcbcb8b1b0dde82b1931e89e65c2745b942c2a9397912e50258ea2d496a7375fd2645ce9df8207e68f0bb2cbdab85310c0a7fef6656b5dc61d1d13016e98fbb5d837ec0a3fca31a5d3c187214166483648b1ade9411b276027c54d2e384eaf9edb33bb7ebc2a6537cce17e613fe0ea3536e13e814024c3b9c8133b18516d7a87c060b3fda23e57cac7199335337d06fb1d3cdcd5b01069ad5fe5d9288212f88eae6c8332ff94d6ddeb01d1495d6ce625ba92db1439995eb2332143c4ea51ca4e8120ad282cf072df9cf39446a04ae454832bbf39c06f9b4f96f2c9d843385be18c89317c7fc336e2e5b4d4ef899fa3655d7b80d2bbee8fb4cff5056737b4867fc23becf8391ddede4c7f69f9465cf8","method":"","user_agent":"","ja3":"","session":"487cf4ae-c113-4b04-a2a0-3b8a3f137a8c","seq":1,"duration_ms":100,"bytes_in":404,"bytes_out":13,"enriched":{"digest":"20a1fc84c059136b","strings":["}XXr","!AfH6H","M.8N"]}},{"timestamp":"2026-08-27T01:47:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ZKIX9*!wjPQ7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5a4b4958392a21776a505137","method":"","user_agent":"","ja3":"","session":"b1daea67-7748-453e-865b-921683d438e9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2f45274ada709b88","strings":["BitTorrent protocol","<-UW1609-ZKIX9*!wjPQ7"]}},{"timestamp":"2026-08-27T01:46:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u0015(s��\u0015\u0002䧂�t�ٽ���C�W;�{9\u001c��e��5\u001e\u0010�\u0006q��BR�\b\u0011���}�\u0011�\u0018�\u0018�A�mN��\u0019������IJ?��yB\u0011��V\f�D\u0004��X\u0018��9�|��?��\\O��ٲ��p\u0003#rT�Ԫ��ԍcdP4�����`A�^I�-�f^","payload_hex":"80f483152873a38f1502e4a7828074d2d9bd8de0c843df573bb17b391ce4fd65f490351e10940671d1db42527ffd0811eca5d17dae11df18b318ff41ce6d4ea59019aba5ecf6a9f9c4b23fe6cc794211a291560c8d4404a4e85818aacf39e37cf6a23f97e05c4fecc5d9b2a1ea7003237254f4d4aaaa9fd48d63645034a9d1f5dbe66041cf5e49ec2d81665e","method":"","user_agent":"","ja3":"","session":"29b954db-2b7b-4e2d-a446-6cd32fe622ce","seq":1,"duration_ms":101,"bytes_in":140,"bytes_out":13,"enriched":{"digest":"351fe548d2abea7e","strings":["cdP4"]}},{"timestamp":"2026-08-27T01:45:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609--X2uM(5Znzl9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d2d5832754d28355a6e7a6c39","method":"","user_agent":"","ja3":"","session":"59f96df5-c4ea-4cc9-baf3-27b2d197a532","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2a7b5b6dbb724ca4","strings":["BitTorrent protocol","<-UW1609--X2uM(5Znzl9"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:21:04.987202+00:00"}