{"ip":"179.109.154.26","total_events":550,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"550 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["550 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"119,343 bytes sent","bytes_sent":119343,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-12T01:21:22","last_seen":"2026-09-14T10:15:58","events_24h":0,"events_7d":550,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Natividade","lat":-21.0334,"lon":-41.9396,"asn":263585,"org":"DIGITAL NET RJ TELECOM EIRELI"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as263585","label":"DigitalNet","category":"isp","url":"https://www.peeringdb.com/asn/263585"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":550}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-12","count":29},{"date":"2026-09-13","count":345},{"date":"2026-09-14","count":176}],"recent_events":[{"timestamp":"2026-09-14T10:15:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-RVCuvFK*xzl2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5256437576464b2a787a6c32","method":"","user_agent":"","ja3":"","session":"baa1be84-60fa-4365-9c0d-6afd82aff227","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"16de84dff4786627","strings":["BitTorrent protocol","<-UW160N-RVCuvFK*xzl2"]}},{"timestamp":"2026-09-14T10:14:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"]�U��[����-\u0005�g�.��\"#�(�a\u001b�׮�\tGư������_q�\\L�\u001a�A����D��hc\f��)��\u0006�\u0001��\u0018�@������1Z\f_�a�4�5�H��B���,5'ٔ�5[�\u000f0�jp�\u0018=D�X����h�Y�S�Ǿ�O�Y}\u0017������.b\rA1��O\u0017\t�5k��8��\b!\u001d�z�:�^\u0002��","payload_hex":"5dae55958d5b9eb9f1982d05e667c82eaeaf2223d428ef611bbcd7aecf0947c6b0aaa48e93bad45f71965c4cbb1acd41f0f1acf44484bd68630cc1e429dac0069401e5c2189e40839a8aeecde5315a0c5fbe618934bd35b6488c87429de1b02c3527d994b1355bfa0f30eb6a70c9183d44da58998ea9ac68aa5980539ec7beae4fb2597d17b3b1e8b7c2f62e620d4131fadb4f170983356baedd389cfe08211de67aa13aae5e02a781","method":"","user_agent":"","ja3":"","session":"b3d1720d-d06d-4e9d-9710-0fccd511d591","seq":1,"duration_ms":100,"bytes_in":169,"bytes_out":14},{"timestamp":"2026-09-14T10:12:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-iSv-FOI4(2YZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6953762d464f49342832595a","method":"","user_agent":"","ja3":"","session":"0095cc29-6bfc-4cf6-ada2-dfefbe004d01","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"26193db0edf35168","strings":["BitTorrent protocol","<-UW160N-iSv-FOI4(2YZ"]}},{"timestamp":"2026-09-14T10:11:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\ni\u0004���X\u0016���A2k��\u0004���;��x*\u000b����*��R\u000b���\f�9�9�*@�Ԛy)盘Y��\u0002\u0010�i���Ǿh4>\f��a���HQ\bf�������=\u001a�\u0005����\u0005u{\u0012M�l�GF\u0018�������rW-�\u0004~��A�u\u000e\u001e׆8Z��e\u001d�C�v�w��c0�$h\u0012Z�lk\u0004\u0017�G�\u001f�\u000b\u0014����c���\\\u00105[6ڲ�\t\u001fObu(�mA�i��2tW#�\u000e�a��Rja.\u0013��% 4\u001d��kxm�Ι��N�Gs\u000e�������W|�9��it���.���#�{�\nM�*�'��Q]sZme#�_�aƶ�(�<�����\u000fj�\u000e����ٸu�G|���\r\b�cl]\u0017�p�\u0013FZ��@�l��o9�y�\u0014^}�\u000f\"w\u0006g��y��'��\u000f\u001f����E�7JxSB?�@�\u0019���!i\u0013/��T�)�7On\u0016�W�������v��T\u0000#�U\u0014\"X����H�Τ\u000eU���l�\u0017.\u0014���*L٨�:5�X�K��)e7C|=�^_Z�e��'~�\u001a\u001e\u0006cB�\u0014�\u0002C�%9\u000b�����O\u001b�eE�\t k!kV[y�(�\"4vԓF���NiY\u0019�\u001e\\\u0014���\n��\u00188\n�\u0000ƌ\u00152��}�k�'Ӻ/B��_�6D!�,��\u001d❪���-ݬ;�g3s�l\u0005\u0003�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d98a81ab-b781-49ba-80bc-62caf10ba078","seq":1,"duration_ms":100,"bytes_in":561,"bytes_out":14,"enriched":{"digest":"22da09ebe942082b","strings":["Obu(","2tW#","Rja.","Q]sZme#","7JxSB?",")e7C|=","k!kV[y"]}},{"timestamp":"2026-09-14T10:09:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-qYmmn!b)Xrlu","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d71596d6d6e21622958726c75","method":"","user_agent":"","ja3":"","session":"a5566949-8acd-4bd9-b458-fe5761a88c74","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f98e7e3945374759","strings":["BitTorrent protocol","<-UW160N-qYmmn!b)Xrlu"]}},{"timestamp":"2026-09-14T10:08:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"5�4����[lc�\u0004H�����ڀ޿�k�\\��[��tC�8�\u0017P��\u0013�e䇇\u001f�L��y�<���؋ϊ�f�|oO\u0013\u001fq4��U��n�6��\u0015\u0017Й3�%C\u0003�T,Ԍ�8\u0013y�K�_ƠB;�ұ��cƾ�ʜ� ĤF����F�����wd����M?W\u0012�0�7��(�iu���\u001b\u00183Q@�d��`��\u0012pdV�\u001bS\bS]��0����7��o%��J�`zl\u000f��™\"6\u0007","payload_hex":"358a34aae5a4e05b6c63ae0448dbd5ebf7ddda80debf9a6ba15c80cb5be6d57443b438ee17509ee113d665e487871ff54ca89579ee3ce4ecb0d88bcf8a897f66997c6f4f131f7134c8eb558ddb6ef536b2f21517d09933a4254303f454ee88ae2cd48cbf381379a14b855fc6a0423ba5d2b1edba63c6beddca9ccd20c4a446e38af4ae46ae9edfebd67764acfbc0ef4d3f5712eb309b37bcea288d6975afb2db1b18335140fe64f6c960f28a12706456b61b5308535da7ff309a9dc1bc37c8cb6f25c0e54adf607a6c0f9689c299223607","method":"","user_agent":"","ja3":"","session":"a83058c3-df1c-4d31-9740-31f0766de63c","seq":1,"duration_ms":100,"bytes_in":209,"bytes_out":14},{"timestamp":"2026-09-14T10:06:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-r)NGavjcb**y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d72294e4761766a63622a2a79","method":"","user_agent":"","ja3":"","session":"3b003fb0-822b-48a6-8624-09d2e892df64","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8a855b325292bdf4","strings":["BitTorrent protocol","<-UW160N-r)NGavjcb**y"]}},{"timestamp":"2026-09-14T10:05:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�j��:����R����o���x�2\u00016��\f`\be0!uR!1�EhBd\u0007[Ҳ���\u001a����Q\u0015iI�v\u0012]Ȍ;����\u001b��A5�,\b�&�5z��\u0015��:Rr�����n\u0004h�9g\u0017�lh\u000e\u0005��\u000b��>��\fe�f\u0006`�`᠆e��UM-*'�\u000f�\u0000\u001db�5���\u0004�n�z\b$\u0001�\u001d;��\b\u000f��`�0���t,��\u0000�8\u001a;�9\u0011+\n���R�\u0010�����՛���\u0002����v�t�D$~���_�{� j�>C�jw[p�G\n�\nu�}�\u001a#�\u0004� g�@\u000e�\u0002%\f�E��\u001f\n��{���\u0007D��'�c�|�|�\u0013\f�B���]_\u0002�\u0006RR[n�t]�\u001d�q��\u0015\u000e�<�q��=���ZnP��{�\u0010nz�\u0014'*�}��cy��[\u0018“�*��)�����p�-�G��G��]K�4�hJ��Ύm#^I\u0003�;�oq�𿰡Mށ\u0014�\u000f���\u000f�d�á\u001b\u0018E\u00007\u0003Gi�瑧�3��_\u001f�\u0004�\fg\u0019\u001c�\u0006J/Lӥ.�cc^k\u0003��\u001a���\u0001\u0000r�gY\u001e���ȯ���3\u001f\u0019VY[\u0003�j��`-�\u0002+�\u001bh�\u000e����k6(\u000e;","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6abdb115-9cde-4a3e-bf54-2665fd26a2c4","seq":1,"duration_ms":100,"bytes_in":488,"bytes_out":14,"enriched":{"digest":"a87232bc05cd77ab","strings":["e0!uR!1","EhBd","UM-*'","jw[p","RR[n","m#^I","cc^k"]}},{"timestamp":"2026-09-14T10:03:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-aY-cp!zxL*L(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d61592d6370217a784c2a4c28","method":"","user_agent":"","ja3":"","session":"c1ccf14e-f37b-4554-aa02-b7ebd4a17ee1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3aaaaaa2fe400001","strings":["BitTorrent protocol","<-UW160N-aY-cp!zxL*L("]}},{"timestamp":"2026-09-14T10:02:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0019J�M���M�L�`5�\nÖ�\u000f����<݃���\u0011��\n���n�9�\u001f���.�P�\u001d*\u0007\u0001\u000fY$\u0019ͣ��0C��\u0002�\u0017\u0013\u001cݺ �)eET�����\u0013�'�?�w�&>[������#���\u001ctbdT�b����\u0017��^�X��@��g\u001cw\r1^֕�#oC�{�E���y��\u001e�~���%\u001e,�^{��!��woy�満jL\bơZ�=���0�ۋ0�z\u000e\u001a\u000bQ~\u0016W�\u0004)N9\tLm\u0002��(��\u0017��J�u[��GfR�D���L\u0003�G@ai�u!G%�Mn��ď+�;�h���b�\u0002���f�H���{k�f��\u0005\u0000$�|�#�\u001b��o\u0015om�\\�\u0006e\u001f��RF�)|���\u0015.0�\u001d����^ Q����8�|��m\f�=�q�Wm\u0007��\u0000q�9�(�ѵ��#���M��k\u001f_�}\u0007u7\u0011��_��\u0005\u0019_\u0017����)4��z�)���_�Y\rA+���\u0010\u001f*��:T��� \u001a[S�[\u0003���_\u0017^0�ah\f��\u0010Mߊ,'v7\u0019e�\u000f���ӷDυ���\u000e\u0015��N��݌#?�8�H�ۺ�l2!��9�z\u0012��泃7�T�I\u0015\u001f\u001eU���;ԟ\b�8[Cה����\u0001;����0��_j!��_�@\u0015�Ԯ","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e501fe85-1037-4735-90cf-a23b7a503ca9","seq":1,"duration_ms":100,"bytes_in":529,"bytes_out":14,"enriched":{"digest":"2d3c90be632004a1","strings":[")eET","tbdT","G@ai","u!G%",",'v7"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-17T11:29:30.335805+00:00"}