{"ip":"77.110.106.52","total_events":804,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"804 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["804 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"166,392 bytes sent","bytes_sent":166392,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T17:27:26","last_seen":"2026-08-16T12:48:19","events_24h":804,"events_7d":804,"geo":{"country_code":"FR","country_name":"France","region":"Île-de-France","city":"Paris","lat":48.8558,"lon":2.3494,"asn":210644,"org":"Aeza Group LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as210644","label":"Aéza","category":"isp","url":"https://www.peeringdb.com/asn/210644"},"cve_matches":[],"malware":[],"top_ports":[{"port":16663,"proto":"tcp","label":"","count":804}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":321},{"date":"2026-08-16","count":483}],"recent_events":[{"timestamp":"2026-08-16T12:48:19","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\n;��[S�]7f2�5�_=�쪼-qB5230-)9F5GVYHhnNq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800050a3b8ad75b53d85d376632d935e95f3da7ecaabc2d7142353233302d2939463547565948686e4e71","method":"","user_agent":"","ja3":"","session":"f687c959-fa79-4635-b3cc-cb7582b0fe9d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1bdd7d251e402175","strings":["BitTorrent protocol","]7f2","-qB5230-)9F5GVYHhnNq"]}},{"timestamp":"2026-08-16T12:45:56","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%\u0019w�|�\u001f�S��@�K��gXj[1�\u0012�C��enXW\u001b�\u000bܮ\u0002yJ�������c�\u0012�U@@gh�\n;M�F�Mv��5���4�y\u001c�q����\u000e��(٬!�\u0004�j$_���f���.H�!J\u0000�&+F�n�\u001d�\u0010�u&5}�\u001e~�~e�ږ\u0007�\u0015hES��\u0019f(�p��Z�u�&����C�(\u001e\u0006��*�}�q�����WC%�\u0014z$d�\u0015�c#��N%o`��?\\��b�\u0002g<�N��}R_�\u0014�:B�2�\nB�r\u001d6�aҜ��\u001c�4�\u0017\u000b�HW��\u0018���\tK��<�\f\u000b�\u0002���nX׌�!��P�(��xY�v�\nv���q�/A���\u0019\u0017\u0018\u0015\u0018�p!69���՝*�\u0004/�3d�Z�t�(g\u001f�$\u00135vx�9�\u0000��nm%4\u0001\"#T��%Y�\u0013�@��lN1=\n�5xF��� \u0015 ����9��M��a�\u0002��9i�]T���+��<��N�r�~S�H��)��u���\u001f�4>�g��\u001e�K�L�V�C�����","payload_hex":"251977ca7cb41ff95386d940da4befaa67586a5b31f412ca438bf9656e58571bf90bdcae02794aa8f3f5b7a68bc263c612fc5540406768bb0a3b4db2468d4d76e9ba3599a5de34b6791c8e71abd2f5a00e88f028d9ac21f104b76a245fb4d4f766acb1fb2e48f0214a7f00c2262b46bd6ea91dec10be7526357db91e7eb67e65acda9607d415684553bdfe1966288770a0e95ac1753c640c3db041efbfdd6158f95c5576c52792932e55ee7383cb2c5ed6fbcfabbec0b041371ac89d5868d8e014546e240f11868a585bdd073d3031c32bbdcbaa559647109f50454099b3d2cb2871fd05d1fb14edf184c30d4d060a31dc6741830037b79e088699aa55e55a241ba8b8e1f8b960fd9724ff522dff0bf941a962bb305a3684863ba7c63cb6e65535227d39cc33e9b376783d1bb7a8916be8b41d857e82f2ca87e15765000604d363025e3e8026ede39ce8439c281e06a9b12aac7d9071fbb8e5bcdb574325b0147a2464c6159f632385e04e256f60e5ae3f5ce9e862f902673c864eebd37d525f94147faa3a42d5328c0a4295721d36a461d29c9bc91cfd3488170bc84857c2c91886c19e094b89b33c890c0bca0282d2ce6e58d78c8e21a58050ad28e09a7859c376f10a76b6dad771d62f41d0e3911917181518d470213639e3b1ced59d2a8a042fcc3364865a94748428671f962413357678ff39e500f3ee6e6d253401222354f6fd2559ea13fa40f0856c4e313d0a9f3578469df1e5201520c1a4d0cb39b4874d82d161b6028cc13969af5d549a95fc2bf1ef3c96f44ebf72b17e53a948e3ae29adb7758e89e61f8c343ee66781f31ece4b984ce756b2438c89c1a6f1","method":"","user_agent":"","ja3":"","session":"cb18dfc4-60ac-4ef9-bbb6-203d51ad9cbb","seq":1,"duration_ms":100,"bytes_in":606,"bytes_out":13,"enriched":{"digest":"b07637965d6ae21c","strings":["gXj[1","enXW","U@@gh","u&5}","U5\"}9","N%o`","p!69","nm%4","lN1="]}},{"timestamp":"2026-08-16T12:43:42","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\n;��[S�]7f2�5�_=�쪼-qB5230-sBK)3d(jVlw)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800050a3b8ad75b53d85d376632d935e95f3da7ecaabc2d7142353233302d73424b293364286a566c7729","method":"","user_agent":"","ja3":"","session":"16c87cdc-fbe5-46a5-b7d2-eb412cc603d5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c2e8ff6d6eaa2a11","strings":["BitTorrent protocol","]7f2","-qB5230-sBK)3d(jVlw)"]}},{"timestamp":"2026-08-16T12:41:30","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0013'��\"����j��P>p�\u001cPFDJ\u001f)��\u0007\u0003�N�^�qx�ܲ�N\\f�6�N\u001e/�Gϩ\u001f���\u0017�#��L^�5���\u001a0/V.#�\u0006��;�%�Ʊ��\u000e�&Fis\u0017�4�IW��\u0000\\\u000b����x��\u0010YU\r$�X)�����\u0015\u001c#�\u0004�k���A�b��lp�\u001f����g�����o��\u0005��k��\roe�P��\u0006�O���S�O8͠�q�\u0007^B\u00047�\u000e��\"�\b_ŔԲ���%\u001eƆ�4l��>�����j���׮x�\u0012<\u000fY\u0005s�6\u0011�kea��\u000f�\f%\u0012� �P\u0011�\u0015w��Nʥ\r����W��ۦ��P�4�\u00129Y+�T\u0005�>n\u0000(�RF�\t\r�������$ߖf���\u001b:�\u0010n�y�M��\u001dh��ۉ\u0011��\f󾨻tݱvHs.xKK�\u0004\u0007A�c#\u0004\u0012�\u0007�X�����\u0019~cejd���˥��$�I�M�\u0016]�Y�������\u0006)k\u0011{�\rU���f�`���W�ܠ�B�B\u001b\u001d��U\u0013emF�L_�T�/m6�\u001c:����a�\u0000�f�.@-�Wt�]Ju��֡=��\"\u000b��h\u0011�ęzU\u0006ROJ4��x�7��:с޼�1�͙P�#�%��ַ��?%u\u001e�\u001b8J$;)��8\u000fv\t���\u0010We=\"+@c��5!�T\u0018`�`d�pl���ò�kZ�t�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"579b465c-578a-4bbd-8f37-bfa6a2b7531d","seq":1,"duration_ms":100,"bytes_in":564,"bytes_out":13,"enriched":{"digest":"95804b59d6984f31","strings":["PFDJ","0/V.#","&Fis","vHs.xKK","~cejd","ROJ4","8J$;)","We=\"+@c"],"iocs":{"domains":["vhs.xkk"]}}},{"timestamp":"2026-08-16T12:39:16","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\n;��[S�]7f2�5�_=�쪼-qB5230-1165PV(a-6q1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800050a3b8ad75b53d85d376632d935e95f3da7ecaabc2d7142353233302d31313635505628612d367131","method":"","user_agent":"","ja3":"","session":"daf1b805-fdb3-4670-b4f6-01b87eb53a0a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e8309a1ed8f113d8","strings":["BitTorrent protocol","]7f2","-qB5230-1165PV(a-6q1"]}},{"timestamp":"2026-08-16T12:37:02","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":".�\t=>+�f�!\u0011�\u0000�\u0017ϙ\u001d>k\u000f\u000e�W\u0004��QW&K\r�\\#-\u001c(�0\u0016�F\u001c� �B��Z���֘*��*>�\u0014��`��F�S\u0011\t�CZ�.�S��IE���\u0007�pb�v\u001b|~����\u001d��x��]7��!���&�7v�ˣ�\u0010�\u0014۩�܇!��\u0005\u0015�`��D���d���ϝ���i�^\f�f��*���`���E\u0013�+�\u0010\u001eT'8WJj>\u0004����\u0015��rg[8�m���MY`Ȣ\rv�VO�9�������k\u0010�R츃�z��\u001d�Ot��$�A��`e���j��9�w\nC\u0012|\u0015�X�z�eo\u001f�%\u001c\u0005�ӳl-CA5\u0013Cg����GJ1��J�IX[�%�\u000e#_�\u0000Q+�K\u001e��`\u001f\u000f�\u001e�\u001f�z(�-�\u0010���J��;�\n �\u001aTt8�>\u001c�����CCT4O4ޕ���I�<'y)�$�\n��n�LS�\n+㌩|���Q��*��6��V$\b6�\u0004��\u001d�`*\u0018>k�%\u0002���.O{��Yəe���\u0012�\u001b��\u0005�\u0005�^�>���\u0011b�,�ek~h�+y�>�����6D","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4935dbc6-5cec-4229-9158-b1911ba803a3","seq":1,"duration_ms":101,"bytes_in":467,"bytes_out":13,"enriched":{"digest":"a9ee3a6f64ffb7d8","strings":["QW&K","T'8WJj>","rg[8","l-CA5","CCT4O4","<'y)","ek~h"]}},{"timestamp":"2026-08-16T12:34:46","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\n;��[S�]7f2�5�_=�쪼-qB5230-yca2jNrC-p.i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800050a3b8ad75b53d85d376632d935e95f3da7ecaabc2d7142353233302d796361326a4e72432d702e69","method":"","user_agent":"","ja3":"","session":"608477d6-8710-4ce3-bd59-75d516c5ab55","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cc9facf05f769bb5","strings":["BitTorrent protocol","]7f2","-qB5230-yca2jNrC-p.i"]}},{"timestamp":"2026-08-16T12:32:33","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"7�J�W�m���\u0000�uf��D�rވЇg�[\u0015!`�����Z�w\u0002เ\b_���_���Mg�\u0017b��\u0005TЎ��uV\u000b�ƿ|U��rr�s �R\u000f᫑\u001a\u0011\u0015m\u0006\u000f��M��f�,�R$�����\u00179���������Ɲ\u0000��[��1�vT'�M�?U�\"�\u0014�\f��0\r6\n\u0013����C� \u0007��","payload_hex":"37ee4a8a57a26dace4c000c47566b1ad44af72de88d08767e55b15216081b9ebb9d25aff7702e0b980085f7fb6f9d95faaf0ce4d67b4176288a60554d08eefa875560bafc6bf7c5591d57272c37320e5520fe1ab911a11156d060ff3854dedb166b72c8452248181c5f3f51739aff5b8bda98ebfe1cdc69d00f1ad5ba2ce31e0765427cc4d9e3f55b422b914a20cf0ba300d360a13f0a1ecf143e32007b1e0","method":"","user_agent":"","ja3":"","session":"a7bab607-d719-4c7a-acc9-51172f77f50a","seq":1,"duration_ms":100,"bytes_in":159,"bytes_out":13},{"timestamp":"2026-08-16T12:30:22","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\n;��[S�]7f2�5�_=�쪼-qB5230-AxxGM)sLq3ui","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800050a3b8ad75b53d85d376632d935e95f3da7ecaabc2d7142353233302d417878474d29734c71337569","method":"","user_agent":"","ja3":"","session":"3a5dc773-c64d-4f16-89da-5cb4d95caab7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a0635c473645bb2c","strings":["BitTorrent protocol","]7f2","-qB5230-AxxGM)sLq3ui"]}},{"timestamp":"2026-08-16T12:28:09","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�wR/P���)�t\u000b)���\"�lar~!\u001f\u0018�4��*NM|�F(���15�\r\n�`\rQ����t!�^��e/\u000eύ\r�������.�\u001b���St��G�Y+GU-Q1Ql�&��y�[��NFe�N�\u0015s���2�\u0013��C\\�Z��H$��d5","payload_hex":"8d77522f508db9cb29d1740b29beb3fc22fd6c61727e211f18fa3486b72a4e4d7c8746288bf7e23135f70d0aa1600d51e7fea8d47421fd5ec1e4652f0ecf8d0ddbfba8bfe9bac42e911b9c97f35374b4d647f0592b47552d5131516c9c26e19c79c65b97e14e4665ea4e88157396a4f632c613fdef435cb25aa1ef4824e8f16435","method":"","user_agent":"","ja3":"","session":"399c9aa5-82cd-4561-87a7-7de8d605a7cd","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":13,"enriched":{"digest":"849dd02dc15af471","strings":["wR/P","lar~!","*NM|","Y+GU-Q1Ql"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T12:50:40.972220+00:00"}