{"ip":"179.2.127.43","total_events":2169,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"2,169 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["2,169 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"460,970 bytes sent","bytes_sent":460970,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-16T06:38:32","last_seen":"2026-08-25T00:02:12","events_24h":0,"events_7d":1859,"geo":{"country_code":"CL","country_name":"Chile","region":"Biobio","city":"Concepción","lat":-36.8335,"lon":-73.0487,"asn":22047,"org":"VTR BANDA ANCHA S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as22047","label":"VTR Global COM S.A.","category":"isp","url":"https://www.peeringdb.com/asn/22047"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":2169}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":72},{"date":"2026-08-20","count":238},{"date":"2026-08-23","count":782},{"date":"2026-08-24","count":1075},{"date":"2026-08-25","count":2}],"recent_events":[{"timestamp":"2026-08-25T00:02:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-52Be5OxeqJRd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d35324265354f7865714a5264","method":"","user_agent":"","ja3":"","session":"6b3314ad-c7c3-4537-b456-40cc5174a971","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2d683bfeb5e926a8","strings":["BitTorrent protocol","<-UW1609-52Be5OxeqJRd"]}},{"timestamp":"2026-08-25T00:01:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":" D�'\u0010\\X&\u001c�?�\fZ[�\u0004X��5�X\u0016A\u0006��}�kT-�\u0012f���,ԑ\u0003l��c�\u0000�w��5�г��Z�0�\u0000suڠz ��\u0018�R^�Qp\\�\n\u001e�OBJ:W[���+��U;h\u0019?�A^\u0018~qs����\"��\u0017�2@:>_��!�U|ܲ�^\u000f���\u000f�o?\u0015JT\u0002��>M=f��L�\u0017h\t�\u0005E+k�ރأH�\u00194!����Ĵr��\u0011\u001a~@w\u0014n���\u00039(�J�7�/�'�㑏��̉u�Z","payload_hex":"20448e27105c58261c983fb00c5a5b91045880aa3590581641068aca7d826b542d8912668aabf12cd491036cef8563d200a477b5de35fbd0b39fdc5aec3096007375daa07a20acc318df525ed551705cac0a1edb4f424a3a575bcde7842bbfb2553b68193fe5415e187e717395839ee922a5e4178832403a3e5fb38a21dd557cdcb2985e0f80a8d20fb76f3f154a5402f1833e4d3d669fc64ce0176809d805452b6babde83d8a348f11934218387a7dfc4b472d5d4111a7e4077146e9ffb8a033928c64a8737ee2f8c27cde3918fe0e7cc8975a65a","method":"","user_agent":"","ja3":"","session":"9356968b-119f-4f3e-bcba-7294dc89561b","seq":1,"duration_ms":100,"bytes_in":213,"bytes_out":12,"enriched":{"digest":"a60307bc5c9d010b","strings":["OBJ:W[","2@:>_",">M=f"]}},{"timestamp":"2026-08-24T23:59:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ymKwtO1oOo1x","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d796d4b77744f316f4f6f3178","method":"","user_agent":"","ja3":"","session":"aa5c01bf-e93e-4856-a82e-5a0d8f35e152","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a2d3193bd50b5384","strings":["BitTorrent protocol","<-UW1609-ymKwtO1oOo1x"]}},{"timestamp":"2026-08-24T23:58:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�B�\"�T%�`��+G\u0005\\�����ۄ���O�2:b�_���\u000b�����\u000b۷��\u0012�����>\u001e\u000e�س=�[s��T�ȁ��о�V_ף\u000b\u0003�߽�!�k�P�G�\u0015�\u000b���I2`[(�%��\u001f\\\u001b��[)\r�Y�Y�\u0013�\u0000�#�\u0002h�M6d\u000b�5\u00153_F���NϾ�~{�u�\u0017=.�hB����=ǰ�C�#\u0004���\u001f�F\u0019\u001e���P����Ll�x�$����H��\u000f��W�u��F�\u001dCW���ty���\n\r$OB�Q���\u000e#͢\t5����\u000b��\u0019H�v2��<�@\u0016��\u0010Y'#��\u000e� 0�<���\u0011�i�V\u0015A�]�� Y\u000f�\u001f�\u0011�\u000f�gZ�\nI���X��\u0014�","payload_hex":"f26c75d2226c5d28c9323f96b2870496e57eb599283ef224dce8d3d348e9eb0f87ba57bf75dffe46dc1d4357c4f4ca7479d6e1ed0a0d244f42925189f9df0e23cda209358dacff9e0be5dc194898763282d13caa4016a3b410592723eb950eb120308f3c8cf8d011a36987561541af5dbe8420590ffd1fd011dc0f95675abe0a49abc4e958b098149d","method":"","user_agent":"","ja3":"","session":"d98788ce-e3e0-4219-8fa8-416aa02ea9cf","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":12,"enriched":{"digest":"18a444d92f9a4293","strings":["\"l]("]}},{"timestamp":"2026-08-24T23:51:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-S4Q.JmFkjAJ0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5334512e4a6d466b6a414a30","method":"","user_agent":"","ja3":"","session":"acb729d2-fc38-4f5c-87fd-d7cf13c6a2b2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"20a932a29728ebc5","strings":["BitTorrent protocol","<-UW1609-S4Q.JmFkjAJ0"]}},{"timestamp":"2026-08-24T23:50:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u000bK��S�c{�\u0017�i@��|\u000b6t�ٌŪ��k,���F��\n�Mp�.���{�]z]f�\u000f������<�k�Mb1�r�\u0003k���0�����<\u001d�@�\u0000F�6���F��NDifS�OB\u001c�\u000e�ڳ�l-_��R��\u0007P\u0001q���M�>�","payload_hex":"df0b4b9c8753f3637bfb17c5694083c27c0b3674efd98cc5aa9fc86b2cb986a64692bd0a904d709e2efa9fdb7b8c5d7a5d66a80ff2f38ce1e0e43cea6b844d6231ad7282036bf3d7db3094829287e23c1dd340be00468736b1baf64699d54e44696653804f421cdd0ecbdab3ab6c2d5fc3fd52ebab07500171a3dec54db93ecf","method":"","user_agent":"","ja3":"","session":"a74eedfe-7be9-4451-a923-96f8934ee882","seq":1,"duration_ms":100,"bytes_in":128,"bytes_out":12,"enriched":{"digest":"575a94faa91efedb","strings":["]z]f","NDifS"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T10:51:56.814189+00:00"}