{"ip":"45.176.94.42","total_events":1492,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,492 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["1,492 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"305,488 bytes sent","bytes_sent":305488,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T16:56:15","last_seen":"2026-09-04T03:35:26","events_24h":70,"events_7d":1492,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.5041,"lon":-69.9236,"asn":267845,"org":"Exito Vision Cable S.A.S"},"source_domain":"ipv4-94-42.exito-vision.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as267845","label":"Exito Vision Cable","category":"isp","url":"https://www.peeringdb.com/asn/267845"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1492}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":225},{"date":"2026-09-01","count":45},{"date":"2026-09-02","count":843},{"date":"2026-09-03","count":309},{"date":"2026-09-04","count":70}],"recent_events":[{"timestamp":"2026-09-04T03:35:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230--L!~*q-*nrWd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d2d4c217e2a712d2a6e725764","method":"","user_agent":"","ja3":"","session":"36d4149b-4c73-4770-b576-9b1cd4934e6d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2aece89d36675480","strings":["BitTorrent protocol","<-qB5230--L!~*q-*nrWd"]}},{"timestamp":"2026-09-04T03:34:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\r��Q�¨n��,+��O\u0007rA��}�hي]V��HY��p�]Rx\u0010�a\u0001��n�/�R�{2��\u0005©~���m�6���D<�-\u0018�Y6�\u0011E��&ܪWS��nu��\u001e�<��\t8o�2�|���5Ɩ�,�k�ڶ���U r��=\u001f۲\u0018\u0007�����MO`{�\u0005� \f^J%�\u0017\u0006��~ayV��bm2ڭ\u0012\u0017qOT#\\� �x\"��9\u0014�g�.RYx�[l���$�%���WK\u0006��LڎF�1��]Óm8Z2i��F\u000e�\u0012���.��B�C�v^��\fAe\r���;'E�=9�܆\u0000��&�ŵ�\u001c��ߓ\\\u0018E���&\"3���fO\tN�\u0006�\u000b\u0015N-�%.`>6�\u0004�\"D(\u0017���0T�n��^�G�\u0004��7\f!:�w*./�\u0005Sy�ߴ\u00127\"�S?����V�����+r\f+Dv�c�p�7����j�l�`�_\u0004n��۲^��m/��%���P�N����,gD\u0013�:�\u0013\u00181��=�PcI߻X���\u0016w�@�7W\u000b�t�S","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2a1984f8-5248-459a-8902-d20ee2a3f030","seq":1,"duration_ms":100,"bytes_in":437,"bytes_out":12,"enriched":{"digest":"63feed1ec51eb21b","strings":["MO`{","~ayV","qOT#\\",".RYx","m8Z2i","%.`>6","w*./"]}},{"timestamp":"2026-09-04T03:33:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-4V8sHERltX--","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d345638734845526c74582d2d","method":"","user_agent":"","ja3":"","session":"bd7836ec-c4a1-48b2-a67f-445784966e9e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"699aada81653da0c","strings":["BitTorrent protocol","<-qB5230-4V8sHERltX--"]}},{"timestamp":"2026-09-04T03:31:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t\u0016\u0014�\r�fƹG!\u001e, (\u0015�fm-��{@f�>a�kJq�DG\n)\"1П\u0016/�l\u0006o���ͣ�.K\u0011R�ڜo��\\�\u0004&����j�f�d�^����\u0012*?D��w\u001a�Ŷ��\u0006�or���\b�`\u000f���IP�\u0007��\r'�OI�V","payload_hex":"0916149f0de966c6b947211e2c202815b3666d2d88c87b4066a33e61866b4a71f144470a292231d09f162f826c066fcec5eecda3e52e4b115280da9c6fd6c35cc404263c457c1f5c98d20d11ca713d2c0ac96e7d51de5ceb780a3c15fa237cd34feba9e0884cf3ecdc81b89592b4f8610e0f17e679c3067559920e16097aa5483916fcf9c8c78747e257dffc2e4bc23161142c0462534eca1b718518d5d692a1f893e1bc8b961dee4d55767d5a45df63338b2be62145945080596231b2ff3ebfe4dbdd6a9366f564d15eac9881b9122a3f44afc7771accc5b6a8c006f36f72e1eaea08a9600fc4ffcb4950e507eda40d27cf4f49fe56","method":"","user_agent":"","ja3":"","session":"0ffd2037-b7ac-4ee2-95b6-f60bcfe1f3b2","seq":1,"duration_ms":100,"bytes_in":246,"bytes_out":12,"enriched":{"digest":"92dc9104e11902f2","strings":["&ݫ���/J*\u0017��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"799b209a-1bca-4ad2-8111-64668c6e1107","seq":1,"duration_ms":100,"bytes_in":386,"bytes_out":12,"enriched":{"digest":"2833aba43ce23964","strings":["S6;k","3~,B","X S&"]}},{"timestamp":"2026-09-04T03:25:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-BBanHH9aCIU0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4242616e4848396143495530","method":"","user_agent":"","ja3":"","session":"e45baf14-7546-4ece-85b4-bafa74b22b22","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"97684fa80c2d0b97","strings":["BitTorrent protocol","<-qB5230-BBanHH9aCIU0"]}},{"timestamp":"2026-09-04T03:24:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"c���+\u0019��X��eJ��݋P���|�v�5��� \u0012��Z{�ōy3�\u0011B�@�)|����0�\u0017 ��tRǀ�g��\u0000n��:g�E��H�p�\u0007�`y�V�nj��Cɨ*\u0017�V\n6�4b\\�v����#�@�g,e�X�ik��0����\u0015�>��aֿP\u0016r\u001f�\u000fV�\u0005))�v\"\u0002�w����\u0019O��]6Ā��\u0010op�aM@/��r�\u000fЀ\u0003�\t��\u0007〃�\u0007&�գ�o%\u001e\u0001\u0003��\u001bG\u001a��ӿ����\u001eu%T�ܡH�{�J$���‡\u0011G��)\u001c\u0002*��z��","payload_hex":"63d5e0d22b19ccd758eaf8654af5b9dd8b50d8c2d57ced76ad35c8ded52012efee5a7bfac58d7933f8117f42bb40e6297c97b4b3fe30831720efae7452c780fe67838a006ea2d43a67ea45aefa48df708b07a260799556fa6e6af7aa43c9a82a17af560a36f034625cbf76f1e3d7c523a040cd672c659c58cc696baaab30edb3f6d815ee3e889061d6bf5016721f950f56b8052929d1762202df77dffe8fe6194feaf35d36c480fa93106f7093614d402fb5e472960fd08003fd09aab607e380839f0726c4d5a39c6f251e010397891b471aae8ad3bf83f0aec51e752554a3dca148fb7ba14a249bf99ac2871147ada2291c022ac8c17a97a8","method":"","user_agent":"","ja3":"","session":"e687b58e-4949-44f8-a77b-2637bc7ffb5f","seq":1,"duration_ms":100,"bytes_in":249,"bytes_out":12,"enriched":{"digest":"6364f5ce8488cf4f","strings":["aM@/"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T20:57:09.782409+00:00"}