{"ip":"179.6.3.78","total_events":721,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"721 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["721 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"49,028 bytes sent","bytes_sent":49028,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T02:12:54","last_seen":"2026-10-05T05:49:46","events_24h":65,"events_7d":424,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":12252,"org":"America Movil Peru S.A.C."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12252","label":"CLARO PERU","category":"isp","url":"https://www.peeringdb.com/asn/12252"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":721}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":25},{"date":"2026-09-22","count":1},{"date":"2026-09-23","count":59},{"date":"2026-09-24","count":11},{"date":"2026-09-25","count":14},{"date":"2026-09-26","count":95},{"date":"2026-09-27","count":66},{"date":"2026-09-28","count":106},{"date":"2026-09-29","count":34},{"date":"2026-09-30","count":29},{"date":"2026-10-01","count":94},{"date":"2026-10-02","count":28},{"date":"2026-10-03","count":54},{"date":"2026-10-04","count":70},{"date":"2026-10-05","count":35}],"recent_events":[{"timestamp":"2026-10-05T05:49:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�s\u000eF�+\u001f\r\u0014x�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9730e46ad2b1f0d1478c2","method":"","user_agent":"","ja3":"","session":"8f99ff26-8cb8-4bf9-be6e-bc319ceda6f0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"2f82d017b9652a98","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:42:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�.��ݫ\u0016m\u0005\u0019f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb92ec0c5ddab166d051966","method":"","user_agent":"","ja3":"","session":"d2b97503-9df8-461d-9cc5-d0eeed58f0d1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"f1d2d1737c4e5566","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:38:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�J?K�Dt��A�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb94a3f4ba64474d6cc4187","method":"","user_agent":"","ja3":"","session":"b91f6a00-1846-4188-aecb-f7de0a525b0c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"5e4722bef95bca4e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:35:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��1�([��Uq�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb98931ba285b80865571d8","method":"","user_agent":"","ja3":"","session":"1fecae2a-302d-47fb-8491-0c40808abab8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"ca0f8e76a1337c6f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:33:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�l:��4\b+S��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb96c3a87a234082b53e8bb","method":"","user_agent":"","ja3":"","session":"447c2240-f5f9-4981-83bd-10f0482b8bb3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"95e917b6b615ed42","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:31:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���|���00Ѭ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9a38c7c92d2f73030d1ac","method":"","user_agent":"","ja3":"","session":"199f555f-1247-431d-b3ec-3d3e97ce84fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"c0416ab0c8cdf0cb","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:29:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�5u�.:\u0013�W\u0016�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb93575972e3a13915716e9","method":"","user_agent":"","ja3":"","session":"2bc6969f-fdef-440c-a665-5e3679290752","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"0874dd2a73ad05a2","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:28:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���չ�����_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb992d8d5b9eabfdbe49d5f","method":"","user_agent":"","ja3":"","session":"fd4affe9-a28b-4e7e-962b-479ec55d0bf0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"054cfb0badcfdd95","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T05:26:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�8��6? `Ui�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb938a49b363f2060556985","method":"","user_agent":"","ja3":"","session":"421e5a4e-6853-4e5a-a698-9cc248a2f56d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"a1cd0b480fc9ec10","strings":["BitTorrent protocol","<-UT360W-","6? `Ui"]}},{"timestamp":"2026-10-05T05:25:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���\\#)�w���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb99ca05c2329f477938faa","method":"","user_agent":"","ja3":"","session":"e5b764c0-b7b1-498d-83e8-7a5208bfb272","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"061af83d26dd844b","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:20.772858+00:00"}