{"ip":"179.124.247.88","total_events":638,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"638 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["638 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"135,670 bytes sent","bytes_sent":135670,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T22:37:12","last_seen":"2026-09-09T00:07:08","events_24h":0,"events_7d":508,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio Grande do Sul","city":"Caçapava do Sul","lat":-30.61,"lon":-53.4723,"asn":28343,"org":"UNIFIQUE TELECOMUNICACOES S/A"},"source_domain":"179-124-247-88.unifique.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28343","label":"Unifique Telecomunicações","category":"isp","url":"https://www.peeringdb.com/asn/28343"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":638}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":63},{"date":"2026-09-02","count":42},{"date":"2026-09-03","count":23},{"date":"2026-09-04","count":68},{"date":"2026-09-05","count":82},{"date":"2026-09-06","count":155},{"date":"2026-09-07","count":103},{"date":"2026-09-08","count":96},{"date":"2026-09-09","count":6}],"recent_events":[{"timestamp":"2026-09-09T00:07:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\f����Ĺp\u0000\u0015��\u0000_E\u000f+��H��\u0012����1|w-%\fz��UN�4�(�\u0000���\u000b\u0002@��`\u0019f\u001bkU\u001c�O\u0015�nv\n��B�\u0013\u001a��O\rhT7\r�~��\u0004�뽻�%A�\u0018hz��٦�0=*��-u�\nS\\F���pf\u0016���㢨䬞s�o��\b�\u0015�?��r\t��\u001fO��\u0010�%�\u001b�\u0001]0E�>\\�\u0000��2�\f�\u0000�VW�\u000b�5\"J��f��d�$6n\u0001��p�g-\u0003>�12<8�i���n�S���/�\"`�\u001f71�i�RxY\u001b�fR�?m��v\"�@Wth�AG^��%V,D���p�\u001c�\n��[���=��0f���B�u�(�A�쒽U ����\u000e쌶\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"493b69e5-6752-42e4-b98c-03d215f4d406","seq":1,"duration_ms":101,"bytes_in":410,"bytes_out":14,"enriched":{"digest":"4a128d2a259ded2e","strings":["1|w-%","12<8","@Wth","%V,D","cU~u151>"]}},{"timestamp":"2026-09-09T00:05:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!88P(K5Oln.9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d21383850284b354f6c6e2e39","method":"","user_agent":"","ja3":"","session":"b9d0ec2c-a684-4a2a-8bf8-f3385260d16b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"aad7a8dccc19fe24","strings":["BitTorrent protocol","<-UW160N-!88P(K5Oln.9"]}},{"timestamp":"2026-09-09T00:04:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Ԅ\u0013�1^F����t����\u0002v;�\u0011sJFz���u��1���ߔٵ��F9�6�3�|�\u001aJ\u0017aS\u001c�[��\u001fs\u0013�O�� \u0013'Q\ba�F����\f\u001f.Ap�|3�3V�v�����e{��?��\\�\u0013}�L�Xn0\rB>���\u0004X��\u001fD�\u0015\"��-&�f|AWԆ��\u0000���\f�E�r?�č]�7S\u0006��Z���xtJ�\u0018\u001d�\u0006�96��\\�d\u0011?����S��/[\u0005���[���\u0006*rw�Xe�\u001de�ȱ!��A�clZ�^ŷ\"�f�����C.m˯V\u0010�T�\u0003o���Io�e�\u0019hE_�r���#u�Y��@ADר���\u0012���uP�/L;Im�d>�ҝb�\b���V+W�\u001d\u001b�F�\u0006��hK��[����~����M�s鳯�6��j�\u001a`\u0000���\u001b�I�ăE��e�f�a\u0003�\u001a �ᮘk���C=��W]- �~\u001e�\u0018bC��,��CY�W����J��\u0013\u0005�q\u0000P�C�cE,�\u0013VW","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"614ce7bd-deed-4e04-a031-4de91ab1d8ab","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":14,"enriched":{"digest":"89cde46a172d22fe","strings":["sJFz","f|AW","/L;Im"]}},{"timestamp":"2026-09-09T00:02:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-L*QHnR!2GDH4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4c2a51486e52213247444834","method":"","user_agent":"","ja3":"","session":"4820ba06-34cc-47f5-8049-d64aea0cb961","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ad64c8a7b99f8d8e","strings":["BitTorrent protocol","<-UW160N-L*QHnR!2GDH4"]}},{"timestamp":"2026-09-09T00:01:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��~6B9��\u0016��\u001f[�����&�\u0000\u0000�����^nF)�y�{�2U���4��7���J�����\u0015A8���d\\����N2�2\u0014��f�{���RɌ竳���C��\u00079@��\u0016Yϲ?��F�Q�&ڙ\u0004v�\u000fy��,�f�\t���\u0006��<\u000f\u0007���/�:j~����o�!����#�i\u0014O��O�\r?�5� 3~\u0016\u0001)�~���mO�nT�!A�9�\u0018\r�J9��l#�#�N�\u0016������.�]�P�S��&\u001a����aAI��&�\b\u0018�D�l\u0019\b3�#�va�Y�A;�7<\u0016�W�k","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5bbb00b7-73e8-4055-b7da-6d21693da92d","seq":1,"duration_ms":101,"bytes_in":330,"bytes_out":14,"enriched":{"digest":"937a336f73680821","strings":["~6B9","^nF)"]}},{"timestamp":"2026-09-09T00:00:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Xp~j4d-cC-7U","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d58707e6a34642d63432d3755","method":"","user_agent":"","ja3":"","session":"d56c8a1a-cfde-4e00-b20a-6556d576f6c4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3661cfddf2fd4ad5","strings":["BitTorrent protocol","<-UW160N-Xp~j4d-cC-7U"]}},{"timestamp":"2026-09-08T23:58:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��xH��\u000b=\b��ّ�\u0014�A�i��)߿�]��N=�\\\u001b�G9��Q|J�\\S#�}\u0017�1�g�mU\u0011��T�*G���>��P��!�%��6��\u0013\b�T��N��\u001f\u000e�\fU���^*�>\u001f���,[N�~`\b\u000b\t��,\rvX\u0018\u0004-\u0019Д���|\u000fe\u0012��-*�������_]A�c1��\u0003��j�#�R+ˆb\n4�\u001d�;�\u0007�����L�(�/�\u0017\u0018�\f4�?/&\u001a�з��\u000bTО����9z/��\u001a\u000e\u001b����iG�iiX��\u001b�\u0004v\u0005V��\u0000l�E�֧+?�9QQ����V�\u0018\u0013����\u0019����K","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b3c33bc8-d112-4e40-a4a2-94a4b8638fbc","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":14},{"timestamp":"2026-09-08T23:57:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-V!azF!(jWBhD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5621617a4621286a57426844","method":"","user_agent":"","ja3":"","session":"d9b9a567-f3c8-475e-8aa6-7def3b89c04a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"737f3c6750115445","strings":["BitTorrent protocol","<-UW160N-V!azF!(jWBhD"]}},{"timestamp":"2026-09-08T23:56:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"$⎃��!]pn;1z�V��\u0002����\u0015��J�\u0019�-�\u000f�Y�¿�@\n#�*⹛(͍Xky1�P\u0015����\u0002?s?/Oui7�MKR.4y�S�\u0019 \u001d���vPA\u001c����4a��\u0003�&?�a\u0017y��/��\u0001[w�f���ޮ?�\u0015\bx�r���