{"ip":"45.181.44.134","total_events":2328,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"2,328 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["2,328 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"491,399 bytes sent","bytes_sent":491399,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T16:36:19","last_seen":"2026-10-04T20:06:15","events_24h":265,"events_7d":1525,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Necochea","lat":-38.5467,"lon":-58.7528,"asn":267798,"org":"GENERACION WI-FI SA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as267798","label":"GENERACION WI-FI","category":"isp","url":"https://www.peeringdb.com/asn/267798"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":2328}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-19","count":75},{"date":"2026-09-20","count":490},{"date":"2026-09-21","count":238},{"date":"2026-09-28","count":87},{"date":"2026-09-30","count":289},{"date":"2026-10-01","count":84},{"date":"2026-10-02","count":638},{"date":"2026-10-03","count":162},{"date":"2026-10-04","count":265}],"recent_events":[{"timestamp":"2026-10-04T20:06:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-~iPFLq~hu4vW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7e6950464c717e6875347657","method":"","user_agent":"","ja3":"","session":"d4b67846-5492-4276-9c25-f8b3fa291ca6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b3a54464ba27771a","strings":["BitTorrent protocol","<-UW160N-~iPFLq~hu4vW"]}},{"timestamp":"2026-10-04T20:05:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�0R�W/\u0004΅Hdtz��3�ٱ\u0010�\u0013�\u0006���_\u001av�ΥzK˼B�'Sp$&� ��z�\u001d�g�@̒R1\u000e\u001e�Ѭ���\u00022��آ��Z\u0002����\"@8h�\t�,qY���\u0017�l�31\n\u0016�Z�\u000fa","payload_hex":"8f3052a4572f04ce854864747a7febed33a9d9b1108313b406d6daf75f1a76efcea57a4bcbbc42b52753702426ec20ded77afe1ddf678f40cc9252310e1ef4d1acd2e4de0232bde5d8a28d8d5a02f8b4fdd322403868ea09bd2c7159b19cc31791eea8a26c8e33310a16dd5afc0f61","method":"","user_agent":"","ja3":"","session":"60236460-b81e-4474-9294-210745961aa6","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":13,"enriched":{"digest":"c023b165c7c1de1c","strings":["Hdtz","'Sp$&","\"@8h"]}},{"timestamp":"2026-10-04T20:03:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-oO.dDzcTZoDy","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f4f2e64447a63545a6f4479","method":"","user_agent":"","ja3":"","session":"20f2af5a-79da-4721-9965-6cf44b52eee8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"589c7293c8a0e8c0","strings":["BitTorrent protocol","<-UW160N-oO.dDzcTZoDy"],"iocs":{"domains":["uw160n-oo.ddzctzody"]}}},{"timestamp":"2026-10-04T20:02:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�{P�L��i]^ٞ\u000bPڽ��p�tMByUr����t\u0002�3RW\u001a��\u001d@�\u0004\u0007�,O��<�\u0004�\nM����N\u001c�+�k��4�1j���񂰦���'!S\u0019�����UmM��p��m�j-��z��{|��7;��j\u001fn��,L�џ��\u001e:��*lN4��O\\>�JDDU\u0003i'_{����{]\n\r\u001ec˨)�L�b��p\u0006���\u0004\u0001^���B\u0013;i-R��ۊ��L-iT\u00176�E\u0010�qڎ#�ēW\r]�v��Ph;a�\u0014���\u0016���P��뢽�ͩU��)\u0006�\r3K��T�#����o�g?����G�\u0012�IlYt\u0015â\u000f\t�\u0014�?�ƒ��EJ�\u0007�9�\u001dfS+Ka\u0005~<��@^\r\u0000a9?��~\u0012o�F��-�Q\riQ�N�Aj.\u0015\b'����_6\u0011�$�\u0017�;��\u0006\u0013ϴ4,����V�wqy�\u0017�S�͸��Ô{\u001d�vٮ]7�X�'r�&K��~�~#$\u0017\\�'\u0004r5�","payload_hex":"ef7b50864cbf9e695d5ed99e0b50dabd91cc70e2744d42795572be8fede674029e3352571a9ebf1d40c30407892c4fcded3ca504e50a4db2c9c1bb4e1c992b986bc8dc34c1316a95e0e2f182b0a68be9de27215319cddaf0a0ed556d4df3f370c8fd6dc36a2d928f7affc27b7c8ca0373bbfe86a1f6e81a12c4ce2d19fea861e3abaa22a6c4e3492be4f5c3eef4a4444550369275f7ba59b95b87b5d0a0d1e63cba829844cf462b3b67006bc83d704015eb0b4a242133b692d52b782db8af1f74c2d69541736ea4510df3c4d26199c5b83931172abca6663e00779d639143fc72c43d7ae0823b3c14f67693e71da8e23eac493570d5deb76c2ea50683b61a814aba2cd16a186bd50a4ffeba2bdd3cda955f8de2906c60d334bcfde54c7239aa48fce6f97673f8b9da4e9479d12c3496c597415c3a20f09ab14bf3fccc692eaf0454a85079a39a31d66532b4b61057e3ce7b5405e0d0061393f95d17e126fb946f9f42dd9510d6951f94ed7416a2e150827c1ea90eb5f3611ac24d6179f3bae9f0613cfb4342c80ee93db5681777179c9179d53b3cdb891b23c4dccc2ae45d93ec3947b1dab76d9ae5d37f858ce2772e3264ba4ca7eca7e2324175c90270472358f","method":"","user_agent":"","ja3":"","session":"1e099648-92ee-4d14-940c-094813f92a28","seq":1,"duration_ms":100,"bytes_in":449,"bytes_out":13,"enriched":{"digest":"777ec4fe9e34de54","strings":["tMByUr","*lN4","JDDU","i'_{",";i-R","L-iT","Ogi>q","Ph;a","IlYt","fS+Ka"]}},{"timestamp":"2026-10-04T20:00:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-7I0s11EDA!0Q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d374930733131454441213051","method":"","user_agent":"","ja3":"","session":"1666480c-f2ca-43bd-a7ec-5ee9bf4ab7ec","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"3a58ba16fa94c6bc","strings":["BitTorrent protocol","<-UW160N-7I0s11EDA!0Q"]}},{"timestamp":"2026-10-04T19:59:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�!�o�*�\u0010U+\u001d��]q\u0003����\u001d\u000fϬ���0�\u00078-��f4�]�@�P\u001f���\u001b��9��\u000e3W� \u0007��n\u0017�-��y��K�4����]�\u0012)�.\u0013�?AF��(v)X\u0015N\u0010]\u001eeg�\t�enD���\\�H6\u0006;�%�ޑ\u0000�fr��7�\t^����Ï�K�؆�����Q���O�5�i\u0016��\u0011\u0005.��Z�\u0003����J.C\u0017E�z����P���}X�<\t�����T�j8�Rg��׮/\nl�$���D�EN\u000fݓ��4y����\u001c�P?mj�l4���}m�#bIL�8�\u0005��\u0018�,�=yН&��܇\u0006\u000em�X��Ji��$���hb\t�!G��\u000b��Y������o��\\NG�\bu���\u000b�\u0018\\G���]�Я��\u0017�\b1{7�w\fć���\u0011�󼠩�\u001e��k�1\u000fT�V/�=Ç\u0017�'���s��Br�\u001b�\u0014���=�\u0019��P\u0002��\u001e�\f�(��㿘r���e\u001e\u0001�ڀA�\u0012�);�{\u0001\u0018���\u0011A�S�ʕ\u0000u���o�ĈEsX<��\u001d��5�*5��'�Ҿ��C�VZ�Q��x��R�|���f���Ư�-^�`�\u0000\u001f#�Fy8i#PD\u0006�'�9\u0006N2","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9798aa82-3600-4157-8e73-db134868fe30","seq":1,"duration_ms":100,"bytes_in":511,"bytes_out":13,"enriched":{"digest":"b8d38d6dc4226ef9","strings":["(v)X","P?mj","#bIL","EsX<","Fy8i#PD"]}},{"timestamp":"2026-10-04T19:58:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Kj(M0egTL~*r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b6a284d306567544c7e2a72","method":"","user_agent":"","ja3":"","session":"68d76d64-2496-4e7b-bf89-95c9fa679bb4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c0e007fc5c94392f","strings":["BitTorrent protocol","<-UW160N-Kj(M0egTL~*r"]}},{"timestamp":"2026-10-04T19:56:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�:��7q#X*��>\u000b���KO5I��z�CN\u0011�_���քP_#v\u001ac�%,XS��?6��.�ʝ{L)x���+.���>�mO�$9\u0017\u0004�A�\u0006�Ⱦ��T'\n\n�xK���us\b��?єI���UF-l���0m��;\u000bݛ��.@\u0010s�\u0013��ݳ'���\u0017�N�oD�\u0019��߈R!3\u001cc�T�\t�$�<>�� \u0018Q�B��\n�;�ĕ-����7ۈ��\u001fF�B��\u001bb�y��!�[�3�eD(��s�\u000b���\u001f�h=���_\u0019bI�\u0016U��\u001d�9�\u000f��2��x��C�\n�zp(�y��NWj�@g5RzP��Icܤ&CI\u0007\u0007�8n�u��p�|�