{"ip":"179.6.171.210","total_events":714,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"714 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["714 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"149,498 bytes sent","bytes_sent":149498,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T12:53:00","last_seen":"2026-10-05T12:58:09","events_24h":239,"events_7d":714,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":12252,"org":"America Movil Peru S.A.C."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12252","label":"CLARO PERU","category":"isp","url":"https://www.peeringdb.com/asn/12252"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":714}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":477},{"date":"2026-10-05","count":237}],"recent_events":[{"timestamp":"2026-10-05T12:58:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-vHLjxFI29Izh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d76484c6a7846493239497a68","method":"","user_agent":"","ja3":"","session":"46c55628-fa89-404d-abf2-dcd6c5209b9d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e056e2febec377f0","strings":["BitTorrent protocol","<-UW160N-vHLjxFI29Izh"]}},{"timestamp":"2026-10-05T05:23:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-tt7gKC9Xy_U6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d747437674b433958795f5536","method":"","user_agent":"","ja3":"","session":"092c7d4f-12a3-48e6-bfb4-aaf0852761f9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e0f42d27a75225f0","strings":["BitTorrent protocol","<-UW160N-tt7gKC9Xy_U6"]}},{"timestamp":"2026-10-05T05:21:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0019mm�[o�C�/���,p Q�c;Q�͐\u0014}���lO�>l\u001d�\u0005i�n��P8��<Q�\u000eVkd\u0003?���\"h��y��\u0017\u0018�\u0000F�J�4h�Vb�Ԗ&A�\n@\b�\t��\rᘭ.L)�r�@Y�H�WyCϯ�Vg\u0012���o�\u0017�=\u0018V�<S�\u0007\u0014���`��lݓU,���_��ϼv��ʎ�S\u001c&\u001e؎���y�Te��Ѱu�Z\u001d���/��k���FѼ���7�����\f5w7P:}\n|2)�8�;��r1�C\u0006��\r��q��Z�_\u0002��q7�6�k\u000fe ��~ҏ���;ۑ\u001d6A\u000b��A�� �\u0000��W�E�,�u�]���Z��\u001d�ÉqS7\u0018葝\u0004&@\u000f�w��%D\u0014صݻ�G'E7-����!n[�8u�b;aSdG�q�K�{���`\u0007�x�\b7º༼b�\u001c�Q\u001c;>�\u0012Z R��o�O\u001b�Bj�`�M��+�\u0002J���X����\u0015���\u000e�����=}~6��K<","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4d1bb17f-b29e-4c72-abd1-4716eb227fbd","seq":1,"duration_ms":100,"bytes_in":416,"bytes_out":13,"enriched":{"digest":"d8458fcdcb55388d","strings":[",p Q","5w7P:}","G'E7-","b;aSdG","=}~6"]}},{"timestamp":"2026-10-05T05:20:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-g8Yf(yGueXwY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d673859662879477565587759","method":"","user_agent":"","ja3":"","session":"ec885922-d491-4c4f-a4ed-1e7c5415c218","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"16e5f2fa42a43067","strings":["BitTorrent protocol","<-UW160N-g8Yf(yGueXwY"]}},{"timestamp":"2026-10-05T05:19:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R.�\"��\u0016xJ\u001f�O��ʬ͍\u001f_��y< �E޽��DE�&mZt\u0012�\\�\u0016�g�AD!\u0003��3\u00028I\u000fq/t=lBj���e��I�J+���uu�����6�Z�\u0010�\u0015�j^��i.@�N��!��=\u0003v�W|d&��+���\n�\u001d��\u001e�IP=\u001c�\u001a��g�U���ɱ��7�F�\u0003�p\u0017�=O�h݂��GX�C5EO}�d#y�F�4�{|$\n{","payload_hex":"522ed122a5cc16784a1fc64fedb2caaccd8d1f5faef5793c7f20c945debd92eb4445c2266d5a7412f05ca616e567db41442103acd4330238490f712f743d6c426a9bd3f665bc9b49f24a2bfe97ff75759f81e8b8fc36b95ae210d815d96a5ebeb0692e40bd4e94f321ffea3d0376e3577c6426d4f42baefaa70abc1d8ffa1ee949503d1cf11af3a567da55aaaacbc9b1e18037e9468a03e77017d73d4f9568dd828cfb4758db4335454f7de8642379f246c534f57b7c240a7b","method":"","user_agent":"","ja3":"","session":"831ab87b-3f55-44e5-a9dd-38e21920ee4a","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":13,"enriched":{"digest":"88b07c63dd2b5df3","strings":["&mZt","q/t=lBj","W|d&","C5EO}"]}},{"timestamp":"2026-10-05T05:17:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-xz3rwQhM!2CR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d787a33727751684d21324352","method":"","user_agent":"","ja3":"","session":"ab7cef38-b21c-4421-b9ac-1c49710b5b02","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"fa107a5effe8ebfd","strings":["BitTorrent protocol","<-UW160N-xz3rwQhM!2CR"]}},{"timestamp":"2026-10-05T05:16:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'�\u0015\u000f�N\u00101w�X��a��ǫ�\u0013�U :�#��\n�V�\u0002\u0011�匼�O�\"�z��\u001a>�n�\u0011\u001a\u000f����\u0017)���;\u0013^���An\u0006�\u0004\u0018���T9�G��R����D\u0015���2����z�L\u0005E�\u0015�*e�2�*=�\u0018�\n���\u000f\u000f�\u0001@\u0002q��ƪJ�N�\u0004��*\"aN\u001e\u00198��}�d�\r\n\u0004��;6@oKh\u0014\u0012�ɠ�fP\u000b\fq\u0011o\t:\u001b����<F\u001a��pc\u0015�ELr}����\u001b\n���6)�]a2)���y��^\u001bK��hR#\u0016�.]���*���L�����\u0018ա�\u000f��R=�\u001f$U�>\u001bK�qc��M��V\u0016���RL�-\u00075\u0013��\"�%�.7b�7�N�\u0014@��+\\","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b02c31b6-200f-43fd-90b9-799b55684091","seq":1,"duration_ms":100,"bytes_in":301,"bytes_out":13,"enriched":{"digest":"31ecba1be1e33495","strings":["*\"aN",";6@oKh","ELr}","]a2)"]}},{"timestamp":"2026-10-05T05:14:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-oxnpuzkC~NT8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f786e70757a6b437e4e5438","method":"","user_agent":"","ja3":"","session":"d97ffcbf-a048-451c-86f9-18a017c1f3bc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c7462008933e3ffb","strings":["BitTorrent protocol","<-UW160N-oxnpuzkC~NT8"]}},{"timestamp":"2026-10-05T05:13:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0004\u0001&��3\u0004���)��^��\u0006-�Jm��?IW{[�'�y\b�\u0000�6\u001a\u0002\u0019\u0011�Xd��'m\u0010x�;�Ԑ0�\u0000o�\r)\u0015�2fyl֜��Mj\u0019&׌�\u0013z�-b�\u001b{�'�gjW`��Gt����ٲw\u0011�\u0005+@���6R\u0013bKA,�����","payload_hex":"d0040126e87feb3304a188a529a9825ebadd062dcb4a6d8aa13f49577b5ba827db7908d000aa361a021911b65864a4c3276d1078f73bc6d490309e006fb60d291595327f66796cd69ccdcf4d6a1926d78c83137af22d62c31b7bcb27e9676a57607fe1e147748eb6eb82d9b277118d052b40baaa81365213624b412ca5ba89c1b0","method":"","user_agent":"","ja3":"","session":"90115561-9b4e-44f3-a28d-bc77baf12964","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":13,"enriched":{"digest":"02cd5bba385f125d","strings":["?IW{[","gjW`","bKA,"]}},{"timestamp":"2026-10-05T05:12:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-C~jZ-x*ZGRzD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d437e6a5a2d782a5a47527a44","method":"","user_agent":"","ja3":"","session":"0ce364b1-5492-4104-8a07-a7bbdd210903","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b1a6e4576b688013","strings":["BitTorrent protocol","<-UW160N-C~jZ-x*ZGRzD"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:58:00.599263+00:00"}