{"ip":"179.12.76.188","total_events":539,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"539 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["539 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"36,652 bytes sent","bytes_sent":36652,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-28T03:53:08","last_seen":"2026-09-05T05:48:56","events_24h":0,"events_7d":371,"geo":{"country_code":"CO","country_name":"Colombia","region":"Antioquia","city":"Medellín","lat":6.2529,"lon":-75.5646,"asn":13489,"org":"UNE EPM TELECOMUNICACIONES S.A."},"source_domain":"BA-RES-179-12-76-188.tigoune.com.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13489","label":"TigoUne","category":"isp","url":"https://www.peeringdb.com/asn/13489"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":539}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-28","count":23},{"date":"2026-08-30","count":17},{"date":"2026-08-31","count":20},{"date":"2026-09-01","count":67},{"date":"2026-09-02","count":41},{"date":"2026-09-03","count":81},{"date":"2026-09-04","count":137},{"date":"2026-09-05","count":153}],"recent_events":[{"timestamp":"2026-09-05T05:48:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001e��G�_}��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d11eb5d047e15f7dbda3","method":"","user_agent":"","ja3":"","session":"521481f5-a6d6-438f-bf34-ff820a583f47","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0aa2c7c422a60562","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:42:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Q���;��\u001f\u0018\u001a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b851e5d4da3bc1ad1f181a","method":"","user_agent":"","ja3":"","session":"a79dfeb5-f6e8-498d-9ad8-04f1788588fe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2bc19c087e13d3bc","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:17:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����W\u000bV��T�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b882fbba570b5692a65490","method":"","user_agent":"","ja3":"","session":"db58ada5-e228-4112-af21-7a507ebb0ab9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"51120dacf0bdd6ba","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:13:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0018\u001d7٪\u001c��o$","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8181d37d9aa1c89ca6f24","method":"","user_agent":"","ja3":"","session":"867a3b75-da7f-49af-9a8a-69d3098a48e4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9a03fcb241f69c60","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:10:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��ZӲ\u00170g�\\�^","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85ad3b2173067a85ccc5e","method":"","user_agent":"","ja3":"","session":"583d1e47-3baf-411b-9996-52547beb6edd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6b5c332ae9bbcf50","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:07:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���;-�\"�)\u0014��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8af3b2da922962914ea9d","method":"","user_agent":"","ja3":"","session":"d6623bea-808c-4641-9062-0d706bc9ed1c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"aed79d7885266acd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:05:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����Q�栰�\u000eY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8a7c351abe6a0b0a20e59","method":"","user_agent":"","ja3":"","session":"40bc504d-c381-4f61-8890-21bbaf4fb5d8","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9597ff25d3387a10","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:03:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0003\u0006�z%+�\tE ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b80306ff7a252bb6094520","method":"","user_agent":"","ja3":"","session":"74e42c30-a91f-4e74-b2c6-5bd892bfa9f1","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bfc40a6e7be3b719","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T05:02:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0007�8���7 bQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b807ed38f6eaf937206251","method":"","user_agent":"","ja3":"","session":"a34a46e7-9053-45eb-9144-15fe0bec4e91","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e3556fe471eab128","strings":["BitTorrent protocol","<-UT360W-","7 bQ"]}},{"timestamp":"2026-09-05T04:57:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���'��Je��\u0001�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b727a2814a659e8e019e","method":"","user_agent":"","ja3":"","session":"d28e7356-4f2b-4969-8242-52a836d17588","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b92d22c2d18a4a4c","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-09T06:45:08.715955+00:00"}