{"ip":"45.238.12.39","total_events":3823,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"3,823 events across 1 port(s)","confidence":"medium","network_type":null,"why":["3,823 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"809,937 bytes sent","bytes_sent":809937,"session_seconds":24,"persistent":false}},"first_seen":"2026-08-02T14:51:05","last_seen":"2026-10-05T20:48:20","events_24h":296,"events_7d":1219,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"","lat":-36.0,"lon":-59.9964,"asn":266837,"org":"COOPERATIVA LTDA. DE ELECTRICIDAD Y SERVICIOS ANEXOS DE JEPPENNER"},"source_domain":"static.coopjeppener.com.ar","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T18:06:10","last_seen":"2026-10-05T18:06:10","recent":[{"timestamp":"2026-10-05T18:06:10","port":39131,"src_port":54266,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\u0002\ra\u0001<\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�)\u0000\u0000","payload_hex":"4100e4020d61013c0000000000000000a1290000","sni":"","session":"70510ec2-172c-415f-b62b-1f811704a656","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":3823}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-02","count":326},{"date":"2026-08-03","count":24},{"date":"2026-08-12","count":124},{"date":"2026-08-13","count":172},{"date":"2026-08-14","count":226},{"date":"2026-08-15","count":609},{"date":"2026-08-16","count":578},{"date":"2026-08-17","count":189},{"date":"2026-08-25","count":74},{"date":"2026-08-26","count":10},{"date":"2026-08-28","count":171},{"date":"2026-08-29","count":101},{"date":"2026-10-01","count":92},{"date":"2026-10-02","count":216},{"date":"2026-10-03","count":100},{"date":"2026-10-04","count":653},{"date":"2026-10-05","count":158}],"recent_events":[{"timestamp":"2026-10-05T20:48:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-EYoS)H.TFN1L","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d45596f5329482e54464e314c","method":"","user_agent":"","ja3":"","session":"44220ae2-cec4-43e3-b08f-9de333f8a8b5","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2189cf723c788422","strings":["BitTorrent protocol","<-UW160N-EYoS)H.TFN1L"]}},{"timestamp":"2026-10-05T20:47:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ʎ8�>b�\u0015E��Sz<o?&cFA\u0019Q�D2��������F@�\u0016��of����!�i�H\\����q��O�����w�(�\u0015�\u0005a�\u0004�W'�^o_c\u001cV\u001fe3l͂�\u0017yn�G��A\u001aR\u0006�a$?q=��4��\u001e�K�X�Tj��ݒ\u00130U\u0002","payload_hex":"ca8e38fe3e62b3154594c4537a3c6f3f266346411951f14432f7a9cddcfc9a948c4640f216c08b6f66a2ecccf921fc69e2485ca78de5dd71819f4fccfce2827f9a77ba28e815a20561e404be5727d95e6f5f631c561f65336ccd82d017796e9d478888411a5206ba61243f713deedb3494bd1e814bd858cd546a90f0dd9213305502","method":"","user_agent":"","ja3":"","session":"b3c73c71-84ff-466c-a0ad-af5c7b1b562b","seq":1,"duration_ms":101,"bytes_in":130,"bytes_out":12,"enriched":{"digest":"82014ddca68fa3fc","strings":["Sz<o?&cFA","^o_c","a$?q="]}},{"timestamp":"2026-10-05T20:45:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-QHY6x0(ICw8B","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d514859367830284943773842","method":"","user_agent":"","ja3":"","session":"2cd12a26-d1f7-47f8-acdd-7b1c94dc3c96","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"6e163eaaa7e2e1e7","strings":["BitTorrent protocol","<-UW160N-QHY6x0(ICw8B"]}},{"timestamp":"2026-10-05T20:44:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"O/��������JB~�����\u0002��䄾����\u0001��\u0013f��o���Eq%e/>����\u0003Dp'����Oc�~n��fB�&�\u0006��7��A�\u0015�o��>b���j=��z�ΪxL\u001b+S�A�!��U��\u001f���<����\u0014��{��\u0010�4��;2͖kIkO�C�ԝ�3��x2\u0006�\u000e@�9�{�44_��.��?��ۃ�;���@�߁B\u001d\t��=c\u000f�KM��\\&[��q�=����î\u001e3��\u0013�5�a!���\u0013�y���z\u0013_\u000b�ѯ�\u0019w8#�\"G\bf��)y�F�ݙ�X|���P|N�&$zV�\u001c�9\u0007�٘^y��� �!�\u0017Mw���\u0018\u001b�{�Bڨ�N\u0004.F����Hq[�\u0017LG<>gA���dM6`��AHw^��%10���.�\u0013�\u001f%�G�ʾ�\u0010�\u001c?\u0017N�\u0012ۿڮϠ�\bY��'g'ݼ1�\u001d��\u001d\u0018\u0016�rNG�N\u0000��̱�B��\n0/W>4,z8̙�oK�9�HX��9(���ҝ��6�ׁ�e��\u0000V�\u00056a\u0013�^��|�@�k�k��)ۥ�\\�7���\u0015.�v+�y_ɦ}�S~�\u0019�G�;�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"367c9fc8-79fa-4cbf-8b7e-16067b315665","seq":1,"duration_ms":100,"bytes_in":488,"bytes_out":12,"enriched":{"digest":"94c139199696beca","strings":["Eq%e/>","kIkO","&$zV","LG<>gA","dM6`","AHw^","0/W>4,z8"]}},{"timestamp":"2026-10-05T20:42:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-H2Ol8rYu~C4M","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d48324f6c387259757e43344d","method":"","user_agent":"","ja3":"","session":"1895d095-bb12-4608-864d-701e592ad165","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b9e9af6494748c54","strings":["BitTorrent protocol","<-UW160N-H2Ol8rYu~C4M"]}},{"timestamp":"2026-10-05T20:41:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Ő�K\u0013\u0019�t��5fJ1�\u0010Y\u0006�\u0010J���\u0015Եh\u0019��\u000b!�&Zk�u\u0018\u000e-\u0018��\u0019���GLj���Eg\u0013�z��I.�\u0013;��\u000f��\u0013\u000e#c������\u0002P���\u0016�h�Ԕ|n���o\u000b�Jg���fU~. \u0015\u001aq\u001f���=�:I}\u0006V�p$\u000bӿ ���_��\u0003�7<�.\t�\u000e=\u001d\t�\u0013�<��\u0015�I�3;���#۟�4c�+�n��f\u0005���ǂ�ͺH\u0007�i�_Ժ�3l\u0013��\u0002\u0018o2\u0017�>d1������[e��N�<C����5iٓ�LD(:\u001d\u0017�8I�?\f߶\u0002�)�v0p⨘","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"052eed01-dbee-4184-b1ce-75d2c6b8c298","seq":1,"duration_ms":100,"bytes_in":259,"bytes_out":12,"enriched":{"digest":"ae865858f22ba861","strings":["5fJ1","fU~.","LD(:"]}},{"timestamp":"2026-10-05T20:40:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-h4EvUy)4DuXT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d683445765579293444755854","method":"","user_agent":"","ja3":"","session":"c731250d-f48f-4db0-b50f-97f836a8e783","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f4f9ee349eb4b745","strings":["BitTorrent protocol","<-UW160N-h4EvUy)4DuXT"]}},{"timestamp":"2026-10-05T20:38:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\\F\u000e�\u0014��J�����\u0014N!%����BE��T:\u0006�\u0016q�M\u0005ڹ�/\u0012[�8*Lj[�:ycQ��\u001f\u001eI�_�=D��*�a\\s�?�3}OV\u001dL��YW��A�V�\u0003\\�7�l�/\u000e��?�5�ÎA���a��2�N�I>G4�\u001cb�k\u001e�\f��UE6ۂ\u0013\u00182\u0002/s�]۶�����]F\fB�\u00124������\u0010\u0017\u0014\u0013���\u001dU��","payload_hex":"c75c460e8014fe834acbc9eaf99c144e2125a1f9b3ef4245bffe543a069f1671e64d05dab9b22f125b9c382a4c6a5bfa3a796351f5ab1f1e49d65f803d44b4b12aaa615c73d63fb4337d4f561d4ce3af5957d1f341b756aa035c8d37c56c932f0ef7e73fb935fac38e41dee8a461e5b832924e94493e4734bf1c62ff6b1e8e0cfbea554536db82131832022f73b55ddbb6bdd7f2bdaf5d460c428312349afa8aeda7ea10171413bce4cf1d55a4a3","method":"","user_agent":"","ja3":"","session":"826db280-5942-411d-99ef-ae07b0cea692","seq":1,"duration_ms":100,"bytes_in":174,"bytes_out":12,"enriched":{"digest":"94a937aa53b6c4c5","strings":["8*Lj[",":ycQ","3}OV","I>G4"]}},{"timestamp":"2026-10-05T20:37:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-s-pHb_!.O0bb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d732d7048625f212e4f306262","method":"","user_agent":"","ja3":"","session":"59244386-9b3e-400b-bd0e-ac11af6f86f9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"8dd170866bb9dca3","strings":["BitTorrent protocol","<-UW160N-s-pHb_!.O0bb"]}},{"timestamp":"2026-10-05T20:36:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001Aǜ�i�)AJ�w@�\u0016<�^z�fS�]Z�8��P\u0003�b�\u0003(�P�bG#\u000b��]�-���19I\u001c^;�r\nBx�F>�x��\n��dy����Aq�|?��\u0007���f��o�z^�/\tC�j\r䃘���x��:��Э�\u00116�WCo>� �\u0014|�.4�F�?��}S�j�1+\u001bl�ס�A\u00113�\u000bO��\u0019lϗ\ns\u0013E��C�\f��rXc\u0018�,\u0012�*Ì�\u000f���E���3mh��Fǵ&�q���\u0006�6��h���w�}\u001b/βZ�MϜ�\u000e��\u001d�m\u0002\n�\u000f�\u0017݂���<�\u0003�\\;\u001e_%�u\u0015��%��m����\t��sK���'`'���\u0005넞��j!���������p]�A����2P{���\u0004;V&�<4��gX*4/X\u0006�\u0014\b����䤃~H�V���*��3s��bH\u001cz�q���'b�\"Y Ut��9��� \t�\u0015��)��ç��A���\u001a�=U�^�Z_y��6���a�0�5F\u001d�n���q-P���2M\u0002��\u0012#e�m�����7(X�3�m&�|\u001a\u0000-��\u000b߼�: S�+��\u001ag{*","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"eb1557a9-22da-4c09-ad08-3351a342f97f","seq":1,"duration_ms":100,"bytes_in":477,"bytes_out":12,"enriched":{"digest":"b21c822d78c0b0f3","strings":["WCo>","gX*4/X","\"Y Ut"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:22.268281+00:00"}