{"ip":"179.56.136.78","total_events":698,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"698 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["698 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"143,920 bytes sent","bytes_sent":143920,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-05T19:06:37","last_seen":"2026-09-10T21:25:27","events_24h":37,"events_7d":698,"geo":{"country_code":"CL","country_name":"Chile","region":"Araucania","city":"Temuco","lat":-38.7315,"lon":-72.5992,"asn":14117,"org":"Telefonica del Sur S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14117","label":"Telefonica del Sur","category":"isp","url":"https://www.peeringdb.com/asn/14117"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":698}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-05","count":169},{"date":"2026-09-06","count":101},{"date":"2026-09-07","count":109},{"date":"2026-09-08","count":174},{"date":"2026-09-09","count":80},{"date":"2026-09-10","count":65}],"recent_events":[{"timestamp":"2026-09-10T21:25:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-NhCBEaU9pIQE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4e6843424561553970495145","method":"","user_agent":"","ja3":"","session":"08b8eec1-c78f-4144-9814-93dd23f03e24","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a9c46ad7b36d134c","strings":["BitTorrent protocol","<-UW160N-NhCBEaU9pIQE"]}},{"timestamp":"2026-09-10T21:24:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�K0lC:���u'Ni����m�s���-�+��R�\b6Έ< �\nȏ�\u0019x���*�᡿Hr\f>?D\u0005V\u001b���sj\u001f~�\u0002��\u0005ƭ�D�b�y��\u000b�_�W����\t&܄H\u0007��p����Ҥ([��9W�%2�7k�X\\�\u001b\u0017)��ܫ��Nw�\u0005\u0005��Q���f\r�dܝ��\u0016��b9�/\u0002\u001d�%���\u0002�=gj�F����\\�\u001a-��9/��f�Ȁ�m��\u0018�¶܋_�c\u0002�1\u0006�{Ȏ�qC\u001eOZ��6�䜀�s�$MA�\u001eT��w(�g{��\"�\u001d���f� V�@\u0019�\u0016z�М>\u0018��r�]�����&��`P:���y�1���/,Uk�\u0013_\u000ecFכ)����_g/��VJ�\u001c�*Wr\u0012��R�������&Ad�\r>�'c07\u0007)/�CFk\u0014�ؠ�w��U�|1�\u0003{&]G�-��\u001b[�넋q\u0001��M�{�%\u0006�pL\u001b��\u001fw8uk��O���JB�qP>��\\�N���L���V��\u0019眠���6\u0006�C��?+ß��\u0004��hS�~9�,��<*��i�7�\u0019;{7��=�\u0011�\r\u0000I��B���n�Ż�~.\u0004\u0004�\u0016M8k�J��\"\u0007,��<�SX�>v��z&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1e0b8cab-b457-4650-880b-f387781a58e5","seq":1,"duration_ms":100,"bytes_in":576,"bytes_out":13,"enriched":{"digest":"79ba9627117f4758","strings":["K0lC:","u'Ni","/,Uk","'c07","{&]G","w8uk"]}},{"timestamp":"2026-09-10T21:22:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-BGv5hJaMD-Bh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d42477635684a614d442d4268","method":"","user_agent":"","ja3":"","session":"06ea7cb7-987b-44d4-956c-fbe6dcb27b9e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d3c171d05aedcdee","strings":["BitTorrent protocol","<-UW160N-BGv5hJaMD-Bh"]}},{"timestamp":"2026-09-10T21:21:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�d\\(�J�fB��ttin���\u0013�\u0003\u0006�jc�׀��ut\u0012�3T\u0018j\"lk݋)%��\u0002��4N\tֈH!2��B4��������V����\u0010kN�Z\u0003Y�n$,f�k3�hڦ��͌\u001d�$�.�t� �\u001b\u001d�I��\u000eX��\u001e0K��\u0016fD��P���<��o�\u001d�FœЍ�0\rTwA�r�l1\\I~�a�\u001dJN���M��7\u000f\"�e��AQEpտ�\u0011����H���.!�g�Xf'\u0017XczG4�K�=��\"��n�","payload_hex":"f7645c28d44aa16642e8c57474696ee2e58713b70306f66a63bfd78084a4757412993354186a226c6bdd8b29258dfb02efaa344e09d688482132f99d4234d3e6d7fee6e8e9ae568df7959e106b4eb15a0359f06e242c66956b33a03c47342f3e68daa6ea82cd8c1df424cc2ea074e220b21b1dd649cbc30e58efff1e304bacbb166644dee750b7b6d33cb1986f851dfc46c29cd08ddb300d547741a372dd6c315c497e9e61fe1d4a4e93948a4d92c0370f22aa65aad441514570d5bf8911d1f0f2a248d3f9882e219a67fc5866271758637a4734d24bc43d9eca228e8d6eb6","method":"","user_agent":"","ja3":"","session":"cd395d2c-531c-4eb4-9d00-bd8fda311dcd","seq":1,"duration_ms":100,"bytes_in":223,"bytes_out":13,"enriched":{"digest":"d86dd427a49b8d1c","strings":["ttin","j\"lk","n$,f","h","l1\\I~","AQEp","XczG4"]}},{"timestamp":"2026-09-10T21:20:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-hHEug8.Zl*31","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6848457567382e5a6c2a3331","method":"","user_agent":"","ja3":"","session":"cd045696-41e7-4aee-81fd-e26b6d887972","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b1e04baf0743813a","strings":["BitTorrent protocol","<-UW160N-hHEug8.Zl*31"],"iocs":{"domains":["uw160n-hheug8.zl"]}}},{"timestamp":"2026-09-10T21:18:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����[a\u0002�}���E��ޙ��/�`J{\u000e\"zWS*��U\u001ekP€)�R}\u001f�������Ѷ�x4߅,y\b\u0019Щ�mܟ���\t\u001fҎ[�o��L����I�.���H'��G\u0002-���>\u001aL\bĉ\u0002M�\u001b��]�uz�٪�q�J����9b��u��\\Z�\u0011>VY~���\u000b�\u0003\u0014����m\u000b�\u0015�f�>VY~"]}},{"timestamp":"2026-09-10T21:17:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-dsFkOM43ia5)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6473466b4f4d343369613529","method":"","user_agent":"","ja3":"","session":"806f973e-aaa9-46ab-8690-17a7357a7a97","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"946b2b43e3ae6cc5","strings":["BitTorrent protocol","<-UW160N-dsFkOM43ia5)"]}},{"timestamp":"2026-09-10T21:16:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"g\u0011W�I\u0011��KO��7��*\u0019����wF��\t�1�\u0001�Tb%�x�\u0018�G�=��w���\u000fQ�i��\u001c�\u0012\t����v�fuv=\u001b�=�;\u001e\u0001o�\u0017\u001e��\u0016ŵV���1�����r`��H�>x\u0002���9��\f8T�j��d��","payload_hex":"671157c34911b4e04b4ff4f837bbb12a1989b189ce7746e3850994319f01b854622582788f18be47b53df7877798cbcd0f519369a6811cbd1209d2f4e9d076ca6675763d1bcd3d933b1e016ff1171ebdf116c5b556c3d0fe31c9e6c08bba7260ebc748863e7802a7dcf03992900c3854916aafc464feca","method":"","user_agent":"","ja3":"","session":"9ce20992-f99d-46ab-9632-50b81c23bcc1","seq":1,"duration_ms":101,"bytes_in":119,"bytes_out":13,"enriched":{"digest":"f8f621f8344b78d7","strings":["fuv="]}},{"timestamp":"2026-09-10T21:14:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-)I6S(Er-jY7N","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d294936532845722d6a59374e","method":"","user_agent":"","ja3":"","session":"64bad1da-4dd4-44bb-bc71-39b7581f9b35","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"fd4422c33598b789","strings":["BitTorrent protocol","<-UW160N-)I6S(Er-jY7N"]}},{"timestamp":"2026-09-10T21:13:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���N�\f�\n*8\u0012�x�!i\u0011X��\b�C\\z�\rG\"\u001f�\u0007U�\u00031��d��Rx��|�R\u0014bND��{�LʞI�ݢ���i�\u0010&j.�t\u00022B���L�����oj:���~�n7���I��IA0�li���9�-?\u0001%;����6�$��y[�8��߿͵o��\\�\\=�Y�x��Q�\r�!W@/��d݆\u0012\u000f�0b2\u0012!�7�^�\u0014\u0013�\u000f��H �w\f\u0013�i,s��%�\u0006��.�~\b��$N�ᾕ�oP,q'\u001bL޷n�p_�B��~���]\u0015���EJ\u0018\u0001�\"Z\u001c��5�Q�Ó�yv\u000b��G�`_=\b�d�u�[��*!�)F\u0015�L��N)3\u0005&W\u001e��$�륹X�Q@�\u000ez�դ�\u0011&\u001f��\u0010\u0019�!�\n�P�s%Eh�i\u0018΋�&v��|*�zL\u0001�zgl�;","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cc9c3d17-7dda-4c5f-a54a-cfad19fc1a07","seq":1,"duration_ms":101,"bytes_in":350,"bytes_out":13,"enriched":{"digest":"003284ad03fa0298","strings":["!W@/","oP,q'","s%Eh"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T10:28:06.238979+00:00"}