{"ip":"201.254.1.229","total_events":881,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"881 events across 1 port(s)","confidence":"medium","network_type":"enterprise","why":["881 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"59,908 bytes sent","bytes_sent":59908,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T13:24:47","last_seen":"2026-08-14T23:41:24","events_24h":102,"events_7d":881,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Canuelas","lat":-35.0496,"lon":-58.7467,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"201-254-1-229.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":881}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":120},{"date":"2026-08-12","count":303},{"date":"2026-08-13","count":115},{"date":"2026-08-14","count":343}],"recent_events":[{"timestamp":"2026-08-14T23:41:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����kN���\u001b�\u000e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8a4e66b4ee385c51ba60e","method":"","user_agent":"","ja3":"","session":"8bdc3b26-659a-439c-bebb-adffc98be236","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8f70cf43e010d48a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:38:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����6���<���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b889883687abb23cafffbd","method":"","user_agent":"","ja3":"","session":"b6736263-ff4c-4b45-9a0c-e3a083171437","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e693e42c0ccf2cac","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:36:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����i��c\u0015�\u0016","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b88e89ec69ebac6315bb16","method":"","user_agent":"","ja3":"","session":"5ee5e02c-6819-4103-b2fa-218b508107e4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8301819b0b342805","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:35:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��L�%��\u0015��\u0002�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84cfa2590831581ff02ba","method":"","user_agent":"","ja3":"","session":"873a1aff-15e1-437a-896e-bf1e590e26d0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"099884399ea31922","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:34:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��+�9\u001d\u0001���p�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82b90391d0183c9fe70b5","method":"","user_agent":"","ja3":"","session":"40126178-c34b-41c9-a47d-96af38ce7f68","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4fde9965a07e6292","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:32:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��c�5�,�5�\u000e\n","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b863cf358e2cfe35db0e0a","method":"","user_agent":"","ja3":"","session":"33c358dc-d7a7-4e42-a6cc-51fb2184f4bc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ab71d409ec966c25","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:31:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0003�-u��U�W�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b803812d7591d255f657c7","method":"","user_agent":"","ja3":"","session":"ac7fc8a2-2105-4937-8ca4-21a5aef23830","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ce04837ca5f7d8e8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:29:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��蹐���b���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e8b990eafeea62a7dff7","method":"","user_agent":"","ja3":"","session":"76572fad-c866-4621-ac39-da3b1c320fb5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5968cd85e7c5b856","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:27:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��>�����I�qj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83e87938f92834982716a","method":"","user_agent":"","ja3":"","session":"1ca9858b-cd46-486b-ba35-d5380595a2e6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d41650f414124437","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-14T23:26:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\\4S<�+_��#","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85c34533c952b5f9abd23","method":"","user_agent":"","ja3":"","session":"9166e69a-fd0a-4abc-98ff-da9ccc48597f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"715c8063cbd238f8","strings":["BitTorrent protocol","<-UT360W-","\\4S<"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T16:54:28.360851+00:00"}