{"ip":"201.213.31.40","total_events":1081,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,081 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,081 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"221,445 bytes sent","bytes_sent":221445,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T20:35:26","last_seen":"2026-08-14T03:47:52","events_24h":0,"events_7d":1081,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires F.D.","city":"Buenos Aires","lat":-34.6142,"lon":-58.3811,"asn":7303,"org":"Telecom Argentina S.A."},"source_domain":"201.213.31.40.fibercorp.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as7303","label":"TELECOM ARGENTINA","category":"isp","url":"https://www.peeringdb.com/asn/7303"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1081}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":168},{"date":"2026-08-10","count":740},{"date":"2026-08-11","count":81},{"date":"2026-08-12","count":79},{"date":"2026-08-14","count":13}],"recent_events":[{"timestamp":"2026-08-14T03:47:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�jf\u001f�b�TW\u0004z$�\u001e5��z��u#���;�e���B��ސ_;f��q�\\��\u0004o�݅���x�;׶<ɭ��RD�0�3�\u0002Ze��ފ-xz����d_\u0013�� �\u001c�\u0004r>�\u0018~*�O>�`+��\u0013�\u0003�1\u0007ID\u0002q�z���P4\r�������\u0012�����4(5\u0007��\u0007\u0003��C�\u0017\u0010K����i�k�9�m+D�3+DJ\u0007L;}�RxH̓\u0010\u0016�.�oN�\b\b\u0017��g\u001d\u000e\u000f\u0004��{m(�\u0012��\n�ӝ)\u001e~֐�R�\u0007\f\u0017�ƃ\u000f�I\u0002��ȥ�\u0016j^%�\u0001ݹng��\u001a8\u0004\u00140����S�*.�\u0012�\u0016\u00037��ғVn�X�����Wע��D�K�;�\b�Œ�!J.�[�v6\"���:=z�\u0015��\u0018�!������ӥF�s�!�qL�5*�n>��a��0�&�\u000f\u0015�C��\u0006np\u0005��Aл���у������8�\"���tVH\u0012��t�\t����\u001cc\u0007�\u001aS�I�\u001f�GI\u0017jj\u0017","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2f8cdf2c-b6d3-474f-9618-df1c85f4b8da","seq":1,"duration_ms":100,"bytes_in":496,"bytes_out":13,"enriched":{"digest":"5dc2ae053248731a","strings":["T>jf","3+DJ","%+OT>jf"]}},{"timestamp":"2026-08-14T03:45:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O���jq���i6\u0005\u001c-\u0003&@`؂U�\u001ePp�><�\\�� N����\u001f�\\\u0004q��Z�\u0017�\u001a!����c&\t���\u001a\u0018\u0014W��\u0002�J\u0002k@|��\u0015��\u0014\u001f��Z8�����3E\u000b-���\u0006@Y)x�(U�A��x�sT��4f������=�A\u0007�o�T4��F�e��o��V\r~z/�<�c\u000b�&�\u0015\u0006\fG�w�~��\r%\u00074\u0014��d�N\u0019�x�7Hg��bZx��F��H$��0O\u0019\u0004����ί\\��EOӚ1�\\����\u00047��-:\u0013�f����\u0002��>�̄1q\u001a(�����H�ˏ\r��$\u001c{\u0005�_Ots�\f�gȣ$\u001f�R\"\u0003L�����͞���e��I����X-�fjA\u0010�vz\u0016\u0017V\u0002�YE��M�ϖ��d��*F���9�l.�w�\u0001����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5ed59b0a-f42a-4e6e-affd-8f5655eee74e","seq":1,"duration_ms":100,"bytes_in":402,"bytes_out":13,"enriched":{"digest":"5aba50683138fdbb","strings":["@Y)x","_Ots"]}},{"timestamp":"2026-08-14T03:42:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�\\|��l0�.�\u000f��q\n�\u0000�M�i'G�ҭ��ySW\u0002\u0006�XbYi�#\u001a�\u000e�̶=�\u0012\u0000�B�D��+YB\u00114�F��6�����X\u000e�\u0002eܬ\n���\u0015\nBeS���`�A��ro,\u001d\u001dp\u001d\u001f�Nv� Ͼ��b\u0010�","payload_hex":"013828f5abe2b8fa559d26ba6727b8e7265809de3a7f198fac30d7c049c57a991db88a667a26d4095c07d4b6325c933af010c553b4f50dabdde2b49924005e1bc1dbe65ca19a09d5e682a7e143135987ec0c87a05d8ba4e820f6451ad87b93b0051c31459bce25289708748055c293a1de28686c5bc59d4e8ecc937031d86aa4d3b9f7a803bf7857c4bc049eae9d2a34ea448bf97bb327bf9aeec7cbb407c3a3a388c342cc34b83ba7e2c1e498c80ae34a692bf05dc3b6ad4f2c017cd1de3324bcb9929185816d821f8a14405346ce8c64cac8bba23659c9b71d489166a29d9f657a39bc4c7451e937866be78bb8119b90765eab63777b04a41ce0b2c07d68408a59cb694700cbaaa3a0a8c028bdf596453c61914d1f3da8812755df7a4ba531065c219e9d6a27d3fb59f63dc2f044d1d272a88a4ba696a8a57bb6f20f43cd24d5970e83df9e14d296e95da8824d2339d6ed0204aa5083dceb14e01cdc9af0742e7cd506cd8dabdfa5a58b680b386cb65263c427c60ca132a9f434e1e6045ea0ec3e5c7cf2876c30822ed10fb0ea710a88008f4db4692747cbd2add8c27953570206e758625969f3231a900eb9ccb63dc91200ef42e844dceb2b59421134e446d1fb368ff0f8f4ad580ed80265dcac0abc8982150a426553bce6de60ca419ea3726f2c1d1d701d1fab4e769420cfbec9eb62109b","method":"","user_agent":"","ja3":"","session":"441bc05b-794e-48d5-8d64-ff6ed6177441","seq":1,"duration_ms":100,"bytes_in":500,"bytes_out":13,"enriched":{"digest":"28996bbe2ee9c99e","strings":["(hl[","XbYi"]}},{"timestamp":"2026-08-14T03:40:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�\u001dc�X�^�͎\u0015�޻pپ���ؗN福dS�\\4DE��\b�1񅕓C�ľ\u0006\b��k�Jx!�\u0004�:�'$_�\"�r-|[�)���x�B����m�@�\fb(KF;GD�K%@Z","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d620012a-fe51-4edf-83cf-22ecd361783d","seq":1,"duration_ms":100,"bytes_in":508,"bytes_out":13,"enriched":{"digest":"45281aee61f61b6b","strings":[",;Mq'","\"h5O","\\4DE","r-|[","b(KF;GD","K%@Z"]}},{"timestamp":"2026-08-14T03:39:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�