{"ip":"45.188.76.92","total_events":531,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"531 events across 1 port(s)","confidence":"medium","network_type":null,"why":["531 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"112,306 bytes sent","bytes_sent":112306,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T00:24:29","last_seen":"2026-08-15T12:12:17","events_24h":0,"events_7d":531,"geo":{"country_code":"MX","country_name":"Mexico","region":"Tabasco","city":"Jalpa de Méndez","lat":18.1287,"lon":-93.1678,"asn":265608,"org":"ONT NETWORKS SA de CV"},"source_domain":"COMAL-CGNAT-BLOQ6-9.fast-net.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":531}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":531}],"recent_events":[{"timestamp":"2026-08-15T12:12:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001e�K�#�\u0003\u001d��!��\u0016�Fwr�1�&\b��i\r��%$Z\u0003G@Uڭ���:r�\t�<r��!y�o��n���\u001f��[�Ï��a\b\t[ҍ��uOQ����X��L�\u0004�\tl���\u0007r&z^�\u0010\u0018\rs�ᔌ~�\u001c","payload_hex":"1e894bec23b1031d88ec21b2f816ec467772e131b3260896ff690dddc125245a03474055daadeae3c63a72fb09de3c72f2952179a76fe3c86e839f9e1fa1f25b89c38f99a96108095bd28d918b754f51ee939bf7a7a2e558acd94cae04d6096c80eaad0772267a5efc10180d7381e1948c7ef21c","method":"","user_agent":"","ja3":"","session":"fec488f5-7860-4ac1-92ca-62532a55cde4","seq":1,"duration_ms":101,"bytes_in":116,"bytes_out":12,"enriched":{"digest":"2154d0e82f12fb61","strings":["r&z^"]}},{"timestamp":"2026-08-15T12:10:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-.IABFS.bd9cR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d2e49414246532e6264396352","method":"","user_agent":"","ja3":"","session":"1adc8938-9562-48fd-937f-28d085f4f395","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"345617fca459f567","strings":["BitTorrent protocol","<-UW1609-.IABFS.bd9cR"]}},{"timestamp":"2026-08-15T12:09:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"~�<O�ݍG:�p}f�Zj\u0019YѴ�~����kX���p\u000b��Ec�L\u001c�aT��\f{\u0017J�`�aʋ\t�\fL�Z\u000eR>���}\u0011�\"4���I؛c@c�\u0002<�^��д�5&�\u0000�","payload_hex":"7ee93c4f80dd8d473ad8707d66f55a6a1959d1b4b87ea4d7ffd76b58f4e6a1700bea9245639e4c1cff61549bf80c7b174aed60ad61ca8b09a10c4cd05a0e523e88e5917d11e522349d83a949d89b634063dc023cd75eb085d0b49935268300be","method":"","user_agent":"","ja3":"","session":"81416ee5-3546-481b-bd61-c45c9def8932","seq":1,"duration_ms":100,"bytes_in":96,"bytes_out":12},{"timestamp":"2026-08-15T12:08:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609--kp8zlzaHYK(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d2d6b70387a6c7a6148594b28","method":"","user_agent":"","ja3":"","session":"5a2bce59-8761-4bf7-bf75-2c9b0351df0f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"97ca897a51a6fc04","strings":["BitTorrent protocol","<-UW1609--kp8zlzaHYK("]}},{"timestamp":"2026-08-15T12:06:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��j\u0003��y􏦫v2_\nV�������X��m�\u000e~G��5z����8v\u0013c�s���\u0010�<i��\u0007\u0013\u0013H\u0001�~l��;(k�ǡ��ʚn\u001c�\u000e��zw�1�r���\u0007\u0002>�P�\"L�l��-�\u0006��fs;t���\u0001O�;Eb�Y4G��%��UL���A:\"��F/9�[�P|�\f\u0015���JL��@\u0019~�5\u000b#v\u001ch���$\u001b�*��=���Y�����2�GwP�����‡fK\u001d���C%=�\b����O���G(����Y��\u0016�\u0006��A����[�UC��J�1���e��ȭ6\u0005���0/(�}݅�\u001f�rE�{B�\u0006�5O2գ�K\nTN��\u001d�\u001dd\u0001'�\f�p\u001dv�L�;��B��v��\u0004\u001e�KDAD���{ޯ�0����E0x\u0003=�X���\u0013uo\u0019���z���<��;","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f21658a3-47a1-4363-915f-ba2b6b0f0791","seq":1,"duration_ms":100,"bytes_in":361,"bytes_out":12,"enriched":{"digest":"2b55e3c49bcf4b32","strings":["fs;t","KDAD"]}},{"timestamp":"2026-08-15T12:05:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-aXC0HSMGcJAf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6158433048534d47634a4166","method":"","user_agent":"","ja3":"","session":"c0ad6a8c-a520-4dab-9a34-ca2c8ae63925","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"81b7153370a13edb","strings":["BitTorrent protocol","<-UW1609-aXC0HSMGcJAf"]}},{"timestamp":"2026-08-15T12:04:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*\b?��/)M��\u0012n�0�\u0017�`�X��\u0017\u0015��j��\u001bA�p��I���/Cm���;>�����\\�\u0007�����K���w�\n���\u001b�b�^��6P��A�R�\\�F�\u0017\u0000��a\u001d�e��'m\u001a�}��'��9\u0015�~rqI\u0016�Q77O�}�\u0004���_쫻\u0014��q��\u0013\f�4�]|*6�4�l��\nޠ��=���zj�1�(\u00115�t�\u0014�\u0017/�0��WUΟ��?�ys�@���;�,\u000f\u001e7\u000b\u0014]���BbJ�\u0002�����z����?�@�\u0003�Cx��,�%\u001a\u001c™���m0hZ�8�I�\u001c�H!��z�����yw�x[��\tl\u0004\u0017�Ʃ\bo�\u0000�Ә�O��WfGG�qϯ\u001a���\u000f��%\u0016���I�>���G��\u0000��b�T\\�����\u000f6�o��P�8��,ܾ|�\u0018\u0004T�$]\f6��F��$\u0002�o�um\u0004)��-L�Ĵ�)��z�aCt��p@�X\u0011I\u0007�C4�xZ0�����]W1�\u0005��>ۺ��L\u001b|�<�����F�N�<-��O����⭜`�F�&��?ϟKl`��3��h�O'\u0006�\u0004�\u001fP��P?�+��\u0000\u001b���}\u0011\u0010�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"08349548-544c-438a-93e9-ec28a868a40e","seq":1,"duration_ms":101,"bytes_in":494,"bytes_out":12,"enriched":{"digest":"1274d54bee1d9199","label":"Redis (RESP)","strings":["~rqI","Q77O","]|*6","m0hZ","WfGG"]}},{"timestamp":"2026-08-15T12:02:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-d03jkqy0r0Pn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6430336a6b7179307230506e","method":"","user_agent":"","ja3":"","session":"8947822e-488b-4b64-a6db-edf75cf2222f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"df266d6f54c67e7d","strings":["BitTorrent protocol","<-UW1609-d03jkqy0r0Pn"]}},{"timestamp":"2026-08-15T12:01:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�>C~\u0007a^����q�óL2\u0005��Yd�j{Ќ\fCs�\u001e\u0011N���7\u000f��o\u0016B\u0015p���h�Bc�;\u000b5��²n ����\tT\u0012;\u001e�\u0013�\u001bR��|���x0�u�|&�u5���\u0013̼\u0012d!'ݚ��\u0014�e]LL\u0004�\u001b0\u0016B�\n\u000e��Ubh�՝�X\u000e��)MJ�l\u0015E���yt;��\"T�\"�\u0010.\u0000ge�{\u001dL����sgf�\u0013�\u0001�����UTE��<]��\u001a�v��nZ�-\u0014x��\u000e��\t�3b���M\u0001J��|\u0013�\u0005��Y1]���\u0010`v��V,�e��\u0001\u001a(\u0007t��]�i�\n�\u001e�\u0018�-\u0012.��9(\u0012ކ���T�̵�|�sD:�|�{�'�'�ng\u0004����U��\u0014:�Z�\u0016D�u.��\u0010z�\u0005Ƶ\u0013[\u0004.�j�O*Y�\u000f+���mS�,�#�\u00024[\t��XA,���:P���ن\u0018�[o]@T�\u0003���|���3q���{","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4a89870a-beb8-49cf-9816-19e6b2e80e61","seq":1,"duration_ms":106,"bytes_in":385,"bytes_out":12,"enriched":{"digest":"4792ced9462f7d3f","strings":["e]LL","[o]@T"]}},{"timestamp":"2026-08-15T11:59:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-kLR652b2cF0c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6b4c52363532623263463063","method":"","user_agent":"","ja3":"","session":"c86bb085-1761-4951-9665-d7e6d507ca81","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f747e0cb38e1b3b2","strings":["BitTorrent protocol","<-UW1609-kLR652b2cF0c"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T12:37:07.825129+00:00"}