{"ip":"176.86.3.6","total_events":982,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"982 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["982 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"200,544 bytes sent","bytes_sent":200544,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T22:22:24","last_seen":"2026-08-15T00:39:39","events_24h":0,"events_7d":910,"geo":{"country_code":"ES","country_name":"Spain","region":"Valencia","city":"L'Alcúdia","lat":39.1667,"lon":-0.515,"asn":3352,"org":"Telefonica De Espana S.a.u."},"source_domain":"6.red-176-86-3.dynamicip.rima-tde.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as3352","label":"Telefonica de España","category":"isp","url":"https://www.peeringdb.com/asn/3352"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":982}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":36},{"date":"2026-08-13","count":413},{"date":"2026-08-14","count":516},{"date":"2026-08-15","count":17}],"recent_events":[{"timestamp":"2026-08-15T00:39:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-*eT1lD)oBKrZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2a6554316c44296f424b725a","method":"","user_agent":"","ja3":"","session":"8f509b1b-dfa3-49f3-ab66-75deb5a7306e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"d0cf47d87d86d67c","strings":["BitTorrent protocol","<-UW1605-*eT1lD)oBKrZ"]}},{"timestamp":"2026-08-15T00:37:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":">F�*�\u0006K?EKB��f��\r�u��\u0012l\u0001q\u0013����^(��B��vΤ\u0018��\u0018���\b� u�7�\u001b�\u000eT4\u000fЅ&\u0005���\u0011����'\t\u0013}\u001e��l�\u0012\r�v��1�\u000f���W��qRJ��ԤDT�\u001am��ym�jb1)�r{��^y\u0001\u0016Ջ)�ȿ�zMn��D��\f� m�$հ�(�N\u0006�Qp*\u0014K�(�^��.9U�7\u001c���JH\u0004d�������DYZ�s-Pt��F�d�yA�vwLW\n;��i�<\u0001�W\u0012�.�'%��-�6c�߳�,€�չ<����ܛ��6��B�� [\u0014�\u0003�x��\u0006D)9��K&��oF��ɣ�\u001fM\u0015JH(R�3��X�3?�D&���.Y\u0012\u000f3R��\u0011Dp\rp0\u000b7�\u001f�\u0011�H�l\r�f��ĥ��u�� |a�L-����[��|�\u0017��j�\u001dT��\\e��^P!0\u000b�\u0003ꙟ�<8�u�:ڍ�\u000fu�b��\u0002�w(�a!�P���tD���\u0013��)�݊\r�\u0011�5���]�����(b��v��Рf�d�\u000e7�\u0014��7��~V��0\u0001x�A��\u0018���\u0007m","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8e72a3b8-1af6-4d5e-97e4-e607c3af7e8d","seq":1,"duration_ms":100,"bytes_in":474,"bytes_out":10,"enriched":{"digest":"345a02cf1a7ebf4c","strings":["K?EKB","jb1)","s-Pt","vwLW","JH(R","^P!0"]}},{"timestamp":"2026-08-15T00:34:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-oA6jpeaYU42a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f41366a7065615955343261","method":"","user_agent":"","ja3":"","session":"26c4d999-c295-4dd5-bfcf-2060583ba34a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"12f88051bd0a2448","strings":["BitTorrent protocol","<-UW1605-oA6jpeaYU42a"]}},{"timestamp":"2026-08-15T00:32:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001a\u000bY�jPV(\u0010�)��&9��\u0013����yj��fx�K1\u0018����O�\f¾��=�sE��q��<��4��\u0005*Y0C���RCAu�|u\u000e\b/欖1��\u000f)�ԹA5�J���?S�\u0019\u0005C����\u00159�o3c\u0007�\u001e$���\u001e�\u000eI�\u0015h{�_�I�\u0004L9f��mm탤Gz^��J'\u0002a.̰.�Ư\u0012\u001f��11�;�L\u000bӏ3���{1O��,e�m�@�˘ң@L��2����/�a3�1��\u00147�.�\u001f+B*\u0012�krg�\u0003\u0005)F��|\u0003�\u0014�2��*6\u001cΉ�\u0015�\u0018��r��Q���\u001c:����u\u0012BRF��#p\t��%+�aLA�\u001d��:2�*�[��@�&�\u0010uB'�c���\u0011\b�\u0019�MTb\f��\u0005B5���ݥe��+4)�/e'�0s��n�rЏ0Z�R9�\u0019�M*��$��Y{O=�\u0004>M���(|Tީ=�o�s�!�\u0003\u0018�yF&eN\n���\u0013�V��P��nvw$Z\u0015����*ل��a,�ð\u0000�j\u001d�\u000eĥ�Q\t\u0011��5ሳ\u0012�\u0003Gx�\u000e\u0010\fV��\"�a�Ec\u000b\b��GB-5Iv�N�>�o�����\u0003���\u0005�o\\�F5��\u001a<�\u0011�\u001fm��=\tX9�euW��\u0006\u001f׮Q�\u001f�`T\u0005\u0001�����\u001a(����\u0011��y\u0016�m���sY`�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"daab2c40-e9b4-4823-8ef0-62df8a4de632","seq":1,"duration_ms":101,"bytes_in":551,"bytes_out":10,"enriched":{"digest":"2411dd4597d4d921","strings":["jPV(","*Y0C","RCAu","Y{O=","yF&eN","nvw$Z","GB-5Iv"]}},{"timestamp":"2026-08-15T00:30:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-piy2Jdr3ShH1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d706979324a64723353684831","method":"","user_agent":"","ja3":"","session":"61a0eae8-2d97-4689-9e0e-c350b56d141a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"b22caf5882d0d879","strings":["BitTorrent protocol","<-UW1605-piy2Jdr3ShH1"]}},{"timestamp":"2026-08-15T00:28:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�os�c��\u001a51�8��\u001b͑>!^/l�j\u0017\u0018\u0018���\u0014?��@3;��/Q�7��>%橥]\u0000E�Io��#I\u001b�i.]�%:��\u001dt��\u0007SO�S58�\\�k����_2�X��,�H��b�\u0005]0�%\u0001���-k��72�T\u001b��\u0007v�L�g\u0017\u0019�ס�������\u0016\u0005��\u000e!�i\u0007\u0015\u0017��R|t\u001f�\u001d9�㚰^NWq$�Q�)8����0�\u0000�\u001f���\u0005\fzS�]����,��\u0012W��6c�\rf\bƁ�>d\u000f�wl�\u0012\b\u000fkiW$\u0010K0\u001f%\u0014�ȭ\u0012\f{�4\u0001h\n��\u0011?E��d\u0000�\u0004P�3{�+�\f?�K2~\u001d��\u0001��\u0006]�q�a\u0014Z�Q;'�x\u0013A�3u�%e\u0015�\u001d6�M�;/��NJ1�\"�M6\u0015k2\naժhH\u001e���\u0013Զ\u0011\nj����-��)��\u0010��%%\u0001HJ\u0001{���9aّ�n=��\u0017� �\t�E�\t\u0001�g�K��ծtJz�+'�P%k��V��v��_�4����Dž(ϵ\u0019�D?\u0010�\u0010W���\u0002J0F�]+y���\u0000\u0013/\u0016�R","payload_hex":"d16f738a63ccdd1a3531d938b9f81bcd913e215e2f6cd36a171818c3e0dc143f8fa540333b90d22f51c437c6df3e25e6a9a55d004589496f97ea23491bad692e5d9b253ae6eb1d74abe407534f9e533538d05c8f6bb5948cdd5f32c858aa922cb948d5fd62d2055d309e2501fcbba32d6b91fa3732da541ba7db0776974c98671719a7d7a197a2e186fc90aa1605dbce0e21f769071517f8cf527c741fb91d39f8e39ab05e4e577124a351c8293890c9c6c030ee00811ffef9fe050c7a53db5dc4fbc3e52ca9ac125791a43663fd0d6608c681b33e640fd57f776c9e12080f6b695724104b301f2514dfc8ad120c7b9b3401680a92fe113f45c0c964008d04508d337b942bd60c3fd14b327e1dc7cd01b6db065d9171d961145a95513b27e8781341a53375b1256515e91d368b4d8d3b2f99a4c78a31d022c24d36156b320a61d5aa68481ef983ad13d4b6110a6a8bbafe812d89de29a3e710c0f6252501484a017bb5c9dc3961d9918c6e3df6b5179320c7098145ce0901ac67d84bf6afd5ae744a7ab62b278150256bb3a556f8d276918f5ff2349dc2d4d1c78528cfb5198d443f10c51057a486df024a3046ce5d2b79cceca000132f169c52","method":"","user_agent":"","ja3":"","session":"ccf50f40-0609-4653-bdad-7fe078501cbb","seq":1,"duration_ms":100,"bytes_in":442,"bytes_out":10,"enriched":{"digest":"c6f2f1d29efb93d9","strings":[">!^/l","^NWq$","kiW$"]}},{"timestamp":"2026-08-15T00:25:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-tWtjqlgVNCcj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7457746a716c67564e43636a","method":"","user_agent":"","ja3":"","session":"56787e92-10b0-4ba5-8901-3e418a943d56","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"9510444886319752","strings":["BitTorrent protocol","<-UW1605-tWtjqlgVNCcj"]}},{"timestamp":"2026-08-15T00:23:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"(��)=��\u001b��='u��ef\u0005a{;\u000e���3��G��(Ъ�\u0016�G.���S��K�C�n�M\u0019�峋\u001b����/>3��%g�/� ��U�<�D��:C�'�ٲ\u0005)���\u000b2�#Q�^\u001c��P�N�Ί�j|��x���\u0000�%�\u001e�\u0014ٳ\u000bث��a-h�b$!\u001f�?����\u0016","payload_hex":"c6291976542a6a993d5eff086db661fc73e4858ad80b6a7356afb060cafc450248f6661ac8e6c8c50416890ef1122f0d4a7865483fc53c2450d97e910dfacf9143ac6b76017cd8d7cf987a6d3917f2444ac2ed56f2544df42d142d3a351e1bd716871a48e6ddbe0be57f9e85f8bfcce86bcd7ec3f9acab3fe952b13ef084d52f3e33d6fc2567fb2fe020d3eb55a33ccf44fab63a43c327e8d9b205298b99970b32dd23519e5e1c99d150ed4ea6ce8ae26a7ca6ac78f7a0aa00f525841edc14d9b30bd8aba8d5612d68c86224211fa03f9ed3e5be16","method":"","user_agent":"","ja3":"","session":"7e67a4d7-c4c3-4f34-972e-45d62e977193","seq":1,"duration_ms":101,"bytes_in":213,"bytes_out":10,"enriched":{"digest":"ead03a007457d044","strings":["vT*j","JxeH?"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T15:22:03.865679+00:00"}