{"ip":"191.85.71.19","total_events":595,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"595 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["595 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"125,253 bytes sent","bytes_sent":125253,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T19:52:39","last_seen":"2026-09-27T19:23:43","events_24h":0,"events_7d":595,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Banfield","lat":-34.7574,"lon":-58.4027,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":595}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-26","count":106},{"date":"2026-09-27","count":489}],"recent_events":[{"timestamp":"2026-09-27T19:23:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"aWM\b8h\n\b\u000f{z}�5��sEJ�������\u0010�'R�\u001d�y�x.8��+ݖ']}ì�4���4F'��\u0011#\u001f'�Ν��s��Z\u0016�(�w��.�L�\bH6\u0011�Я�\u0017cn]��i\t\u0002�J\u0004[\u0000�a'r��\t\u0007~p�,���K���W�IJ�So\u00191��O��\"\u001aos`��B�r�kˆ/�6Û��\u000bO\u0016;\u001e���/��.\u001dί��,ͧk\u0012\u0012��;�˃�\u001aiD\r��R\n��\u000b�H�,ibP�p �Lɖ8�����\n\"��\u001bE�zG�9cF�I<�|▽f�=�����\u0018\u001f��W�l��>\u001d��<","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"72d133ad-ddc6-4fff-bad0-deecfbaa0c01","seq":1,"duration_ms":100,"bytes_in":263,"bytes_out":12,"enriched":{"digest":"a41bbd5e2a03b556","strings":[",ibP"]}},{"timestamp":"2026-09-27T19:21:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-KSpJ(OBwwzjB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b53704a284f4277777a6a42","method":"","user_agent":"","ja3":"","session":"34bf7cfd-6f27-40cb-bd20-860c6534ed8d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0ed26a35c55a831f","strings":["BitTorrent protocol","<-UW160N-KSpJ(OBwwzjB"]}},{"timestamp":"2026-09-27T19:18:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0012�����jXK�*��7\u0017\u0012U��p��:\u001e�,�b�����M[t�����ބ!��'�2.T\u0000F7\n,�Ж��9��[x�F#��y@�{��\u0007��&�)���ýN݊��� �TԦ̇��\u0004bE�8�\u0007��)[������Ll������Ǥ\u001c�W-7��/��J\\ �N\u0003�h\u0018^�E:�0\u0002%�\u001e����u��w\u0000�%oA��\u000f@Ǿ���-#2�G��Hnf%���\n�yTйn�wO\u000eC�\u0019\u001a<�b�\u0011��y�<�7�\u0018�i\\��'*fT��Rټ\u001fk{`pJ�\u000f�'i\u0006��#�6�\"`�@w�k�<:Cu�Y�u���\u0017l��J��m*\u0013�p��K@\u001dc�\u001fn\u0019v��8/���KS*z�|1v\u000bA�B\u0016�PM\bQ�I��\u001cع'�rf\u0001್����\u0010��̷n��tOV��D-̜�\u0004a��80��\u0017��N����\u001e������ÿ\u0011�8\bs1\u0017�\u0006�Cߒ1�\u0015�r\u0002�y�\u0016|\u001e���\u0016ٻ���\bI~��\u001c�V�ď#�П>�묃���-�������","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"daaf3d0e-f447-48f6-bc70-4cb910c77c21","seq":1,"duration_ms":100,"bytes_in":455,"bytes_out":12,"enriched":{"digest":"063349a557881e1e","strings":["Hnf%","'*fT","k{`pJ","<:Cu","KS*z","2.TF7"]}},{"timestamp":"2026-09-27T19:16:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-0yfWV_T6DD1S","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d30796657565f543644443153","method":"","user_agent":"","ja3":"","session":"14fce176-d005-4486-b314-8faa031ab9e3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"541c3464401b4dbc","strings":["BitTorrent protocol","<-UW160N-0yfWV_T6DD1S"]}},{"timestamp":"2026-09-27T19:14:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��nN��9���Mv\n��L�0V�� !���cD�\"�j}owOй�B��H\u0013�z\u0017��`�\u0006�쨅�閆3���N?g\t<\u001d��!\u0001\b�+l�fx��X&��X�/����1�l\u001c{l��w6��^r�X\f��LQ�\u0013���4\u001e��^]N\u001f�?BL\u000f�\f���� ��\u0010}_�\u0010�e�ى�;�ta ����Շ\b�I��,{ώq�b��'�Ct\u0015�I�#I��\"�>��n�#�]�'��\u0018��_��e��\f�\u0004V��{�K�Q�S?\u0017*\u0019\u0011q��&�\u0013�K�<\nʋ=C2�\t�3P���-栘��MK��;,\u0011O��<,�ݚ)�\u0015a�$h�S\u0012E�6�L!kc���ԋ���Xʆ�ܻ��\n\u0012>�x@\u0006\u0014��\u001a�\u0018`�A�.\u0017N�t\f�O�p�N��\u001a\u0006��\u0016������tM��\u0007��fpi\u001c\u0004�<��U�7��\u0000@\u0018�Z���\u001f�=\u0001]dF��\f���#n��C\u0014\\T�3\u0012i�2ɦ���i3�*\b�\u000brR�gsE=T��/��$��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7f1f1d4d-2682-4043-bcb6-1209cee0f5a9","seq":1,"duration_ms":100,"bytes_in":437,"bytes_out":12,"enriched":{"digest":"a6955dfb6ece71be","strings":["j}owO","L!kc","gsE=T"]}},{"timestamp":"2026-09-27T19:11:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-G6Ja(oa)nrj6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d47364a61286f61296e726a36","method":"","user_agent":"","ja3":"","session":"e06b9731-8c0f-475e-b1e4-287b1bf8e01b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"df8f48b2ff902e4e","strings":["BitTorrent protocol","<-UW160N-G6Ja(oa)nrj6"]}},{"timestamp":"2026-09-27T19:09:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":";��\u0001[\u0014�\f���A�i{x�S��r�V\u001a�\u00056��\u0003�j�\u000e�l��r&���xYi���� ���ޝ�\\Ji�\u001b�j�I��N���_!�_�;\u0017�\u000e<1\f�U\u00193�.��Px���","payload_hex":"3ba6dc015b149b0cf6a0fd4191697b78c353b6e772f2561a810536ebfe03bd6ae70ee46c9aaf72268ab0b3785969bcd4f6ba20a4a6e9de9ddb5c4a69bb1b846af2499bfc4eb19dfd5f21ce5fd73b17d40e3c310ca6551933e92edcdf5078c6e6fc","method":"","user_agent":"","ja3":"","session":"8eb5f6c5-f624-489e-9708-821a89dd2561","seq":1,"duration_ms":100,"bytes_in":97,"bytes_out":12},{"timestamp":"2026-09-27T19:07:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-jjOz56dOTvGD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6a6a4f7a3536644f54764744","method":"","user_agent":"","ja3":"","session":"cbc9d1f7-eb7d-4810-ab83-caab3af01787","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"dffe73c9c558dc03","strings":["BitTorrent protocol","<-UW160N-jjOz56dOTvGD"]}},{"timestamp":"2026-09-27T19:04:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�o�\u0018@��ɫ\u001b>�\u000b~�`1\u0002\u0019\u0005�O\r��/��̕�w��1���#���9�5�{�ӗ��nvG�S\b?I�q�/L\u001dhV\r�r��D��j�\u00106i�h�ok�\u001f�۟HEs�Θ��)��-7��ֻ���G�\u00180?݆=�rq�ҍ\r\n��cF a\u001e�o:s���h�\f`�&Bj�)bғ*%uE�X7��T�Y\u0001�Zxdh�\u0011�a@)\u0004�݇UĻnӊ��sZ��{\u0011�:\u001d⊸%�&�h�������\u0014�Փr�ܠ�T�q'�FN^�v�����4�\u0003���Hܡ\u001fC}�(���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c91e48cd-9c4d-43a8-a008-3db37c9d5201","seq":1,"duration_ms":100,"bytes_in":259,"bytes_out":12,"enriched":{"digest":"b01e3ff55c662bcb","strings":["cF a","*%uE","Zxdh"]}},{"timestamp":"2026-09-27T19:02:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-UPrQ.BQ1FTDX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d555072512e42513146544458","method":"","user_agent":"","ja3":"","session":"a4a009e0-5575-4fe2-8642-20b9b6a8628e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ff652e04d898de33","strings":["BitTorrent protocol","<-UW160N-UPrQ.BQ1FTDX"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T15:06:40.221490+00:00"}