{"ip":"201.177.133.190","total_events":712,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"712 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["712 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"152,954 bytes sent","bytes_sent":152954,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T12:15:46","last_seen":"2026-09-27T10:58:36","events_24h":0,"events_7d":712,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Merlo","lat":-34.6639,"lon":-58.7282,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"201-177-133-190.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":712}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-26","count":461},{"date":"2026-09-27","count":251}],"recent_events":[{"timestamp":"2026-09-27T10:58:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0019�\u0012� �\u0011EyЭ\u001fT\u001b�%�E�^_U8�\u0006�f���G�-Ϧ���ị�\u0005tY)\u0012�����k\u001c�\u0010&��i$�1�x��\u0016a\u001f�T�\u001c\u000b��T�\u0011�х���\u0006rٲ�\"\f��,4���\f�^\u0016ڬVI�.���\u0013\u0004�~Su��$Z\t�)��\f��)d\u0006\u0014","payload_hex":"198112e420a6114579d0ad1f541bc025d145bd5e5f5538f706b766aac97f8b47b12dcfa68dec8ce1bb8b900574592912bdf9b2eaa56b1c8610267f92da6924be31b078998d16611ff954c61c0bcad554cb1185d185b0a7bf0672d9b28d220c8d9d2c34fabaf60c825e16daac5649a42edafece1304f17e5375d0d9245a09ba29fc950cba9d29640614","method":"","user_agent":"","ja3":"","session":"5c76340a-acfd-4b0c-a81c-bf6ea621d10e","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":15,"enriched":{"digest":"4258c5fbd76c2e9c","strings":["^_U8"]}},{"timestamp":"2026-09-27T10:56:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-aAExy-8O~Op7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d61414578792d384f7e4f7037","method":"","user_agent":"","ja3":"","session":"a7c74e13-8f9c-4e77-a338-fc8c3e92bd9b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"580bc13189bb577a","strings":["BitTorrent protocol","<-UW160N-aAExy-8O~Op7"]}},{"timestamp":"2026-09-27T10:53:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ԓ�7\u0011/y0c��5\u0006��PD�TG��ת���@d��\u001aѓ{�g�W�\u0019�\u0002o��C٧aBg,]��\u0013t=��\u0002ar�N\u0013c�\u0013��XM�½��x�\u001a�E�\u0014�o�<�>�*�\u0014��\\��\fU\\����\u001d\u000e��Z\u0001��*u,\r7�#4��V��ɢf\u0016c\tPS���\u0004Q��\"$;0�8��}�\nCȿ\u00019׊��w�^\u0016(��M�\u0016��\u001b,\b�\u0010��<�ܗ�8��B�B涕��+�\u0003\u0006RY(\u001d��RG��\u001a}�I(n�흐\u0001\u001eCe\u0010H���1\u001d�ij\u0007+�6k��*!&0`\u0016DS��ui��R:t���-��\u0001� h�\u0010-�\u0017�\u0003�a�\u0014���J�t��DZ8=�����}2��fX\u0001u�\u0001\u001c\f�\u000b��B�Ȧ�7�\u0014��{�\u0015*�#� |)�~�\u0014\u0005�����\u001b�\t�^�Ozc���\u0007\\�iY\u0001\u001c��Y�,筈}����CW\n��x\u0002�5�X{F$HXS�f5�\u0012A��Q�N��Z�4vٰ�qփ\u001a��o�\u000eJTJ�h�R#�‚Q#\u0011΋)�'��P�\u0016c","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6ac15299-a9f3-4b0a-92ee-f04127b0dd6d","seq":1,"duration_ms":100,"bytes_in":449,"bytes_out":15,"enriched":{"digest":"e4aedb6299318b9b","strings":["/y0c","aBg,]","\"$;0","*!&0`","DZ8=","X{F$HXS"]}},{"timestamp":"2026-09-27T10:51:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6TV*CyuoEH~K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3654562a4379756f45487e4b","method":"","user_agent":"","ja3":"","session":"7cf37de4-d798-400d-9860-126087627738","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"af0663e0b05dce3b","strings":["BitTorrent protocol","<-UW160N-6TV*CyuoEH~K"]}},{"timestamp":"2026-09-27T10:49:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"#Ш�A�Ӟ'��9�^���1g\u0006���U\u0012\u001a\nbϿM~\f�B���H���w�\u0017\f�\u0016ug�#N\t*⹊e��G�F��\u0012��\u0019ۅ\u001fS͝ն†\f\u00180�V���P�-o�h��\u001a\n��R_b�\u0007o'�d\u0005%��U��T�O�_�Ur逶\u0018�qڎ�VW�\u0007\fc�:�2���\u0006�\u001b�۶\u001e�mI�����m���Y��\b�`��\u001a�.H�3{↿��O2\u000f���+����ލ��>��xtYE\u0010�q\u0002��c3[���k��\u0004\u0015Hne��\"�d\u0003��d*����\u0017�\t��H}}����\u0005�r��R/�=/\u0004���M�G\u001f?h�\tp�\u001f�|aQ��!:ޤ\\Q3�\u001b�@��%��\u0006\u001b�*|Yw�\u0012����\u001a�\u001eM���:t^8�M)7��4�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8de424a1-0ddb-45da-a9ee-1c32daf06f2f","seq":1,"duration_ms":100,"bytes_in":333,"bytes_out":15,"enriched":{"digest":"e5f791dfeec322cf","strings":["xtYE","*|Yw",":t^8"]}},{"timestamp":"2026-09-27T10:46:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-C1phCiCMg8*Z","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d433170684369434d67382a5a","method":"","user_agent":"","ja3":"","session":"a0be7b6b-be6f-4741-b9f3-9a9cc720db29","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"cf1f62e143768938","strings":["BitTorrent protocol","<-UW160N-C1phCiCMg8*Z"]}},{"timestamp":"2026-09-27T10:44:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"踖�7�\u0019|�<.��\u0014$�Q\u001bP�C|��p2��p҃j��C�#rh��`��}�\u0004Դ/���}\u0016��o��[f�\u001a���(�rݑ�_I6��F��:E�6�5P�\fw��\u0010޿\u001bj��-ag9Mdg�QLCiTۤH\f��;f_�P,�Q��\f���zу�оR\\�߷���9}˃�Q��^\u0017+w�̴��t=<��\u0005D���C{1��Qm�늃AK\u001c��\\\u001bጧz-ZC���","payload_hex":"e8b896823794197cf83c2e82e01424bc511b50ee437c9ad17032b2b770d2836aeee043bb237268fac860eabf7dcf04d4b42fb9abbc7d16feae6f86d85b66881ae9dad928d872dd91915f4936be894680b43a45b0368e3550850c77b39810debf1b6afad92d6167394d64678b514c436954dba4480cf0ab3b665ff0502ce55183f80ca0e9de7ad183f0d0be525c90dfb7fef2b9397dcb83c851a6cf5e172b77f6ccb49592743d3c97a505448fa3f5437b3185ea516d8ceb8a83414b1cefae5c1be18ca77a2d5a43f3fcb5","method":"","user_agent":"","ja3":"","session":"cb2832c9-97d5-4b4d-89cb-7cc1b167ff85","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":15,"enriched":{"digest":"c601dbb775b9711d","strings":["-ag9Mdg","QLCiT","z-ZC"]}},{"timestamp":"2026-09-27T10:41:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-aO*dTVpXNsB4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d614f2a64545670584e734234","method":"","user_agent":"","ja3":"","session":"39f714d7-0862-475a-aa2b-13b3b2d956d0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b54251b21b22ca63","strings":["BitTorrent protocol","<-UW160N-aO*dTVpXNsB4"]}},{"timestamp":"2026-09-27T10:39:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�OA����ư��ϥ���`׾�\u0003�2\u0016��ϩ��\u0018#�N\\z=\u001e�P���Z�.받H\u0010\u0010�p��kR�}����3\u001a�`���ۧ��?������̚ne�����m��Ht��cI��N���%���c�vc���21�G\u0017_e.Bl��`b~|�F���j���/�\u0007\u0011�8`&�y�og��:��+/�$u�.� �5��1;��Ҥ\u0011\u0019$�<R�^���?&K����z|\r�l\u001e#�L��E9��N�H�=���J!\"<�\u0017Ɩ�Н�J�D\"]��\u0018�\u0007-��M�ya����\\����\u0004髦B�d,��\u000b�7���\u0003��b�$","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"99546dfd-db57-40f8-8fb5-508e17875b1c","seq":1,"duration_ms":100,"bytes_in":281,"bytes_out":15,"enriched":{"digest":"d71244e4164e3bd7","strings":["N\\z=","_e.Bl","`b~|","J!\"<"]}},{"timestamp":"2026-09-27T10:37:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-79Q6MVDNkd5W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d373951364d56444e6b643557","method":"","user_agent":"","ja3":"","session":"cfcf478e-1952-4461-aea9-fdac975fd4f0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"66897b21bf7f1707","strings":["BitTorrent protocol","<-UW160N-79Q6MVDNkd5W"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T15:05:00.831389+00:00"}