{"ip":"179.6.46.31","total_events":774,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"774 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["774 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"160,050 bytes sent","bytes_sent":160050,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T12:50:45","last_seen":"2026-10-02T02:00:44","events_24h":0,"events_7d":774,"geo":{"country_code":"PE","country_name":"Peru","region":"Lambayeque","city":"Chiclayo","lat":-6.7711,"lon":-79.8431,"asn":12252,"org":"America Movil Peru S.A.C."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12252","label":"CLARO PERU","category":"isp","url":"https://www.peeringdb.com/asn/12252"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":774}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-30","count":271},{"date":"2026-10-01","count":415},{"date":"2026-10-02","count":88}],"recent_events":[{"timestamp":"2026-10-02T02:00:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nTmGx_FVvnoh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e546d47785f4656766e6f68","method":"","user_agent":"","ja3":"","session":"f79b0cb2-3c32-4e84-b0cd-41167a1013e9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"a2cd3081b8b857eb","strings":["BitTorrent protocol","<-UW160N-nTmGx_FVvnoh"]}},{"timestamp":"2026-10-02T01:59:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000e*\u0012j�\u001c���2Ş�p���ܒ\u000ff�\u0010����\\u\u0017:��&o�b�}��:fxǴ�yF`�\u001c���\u0003�\u001f���Zݤ��\b��#�6�Zoˡ�\u0018����\u0017�2\u0017\u0017x\u0005Wt��\u0005?>�Ad��0Q��(�c\u0003<�\u0019�Rv.����ܡ\n\n�F\u0003���x����V�=\u0017aw�@��΀�\u001a\u000b�_ŵ�@�!ސ�\u0019{�b\\ՠ�H\u001f�gg�L�jx�/5\u0019��\bsR�\u0007}m�%E��tX5tkg�j���\u000f�\n)k\\\u001bN�N��\u000bb��'E�\u001c\u0007�\u0011[r�\u000b�Q1[���u�0X$�\u001f�K��&�\u0019���F�\u0013�<���a��L;���l\u0002��V�t�\u001eS���8'��\u00022�\u00180\u0001�d0wqy�\n�o�\u0011�\u0004j2AG\u0014��kQf#S\u000e1��̘\u001b-�~�`\u001fVv�0�%w�<�Si=�Ip���\u001b��&W����ȳN�","payload_hex":"0e2a126ad01ce5cae032c59eee70e3b2c5dc920f66c010ddf6fc935c75173ad2f5266fe962e87dfdaa3a6678c7b4af794660e91cf1bdbf03cb1fa187be5adda4acf308b39123a636925a6fcba1c8189d8eddc017de32171778055774a4fb053f3ed74164e0af30519db3288063033cc819e552762eaaaebe87dca10a0aec4603a3b5fa78fe3c787c05dc3fb2d701f02d9edbde4d6e645a593b8a25760dea16ce278b3cb981479a00999ac4a61666f9f4dd46e25b4381d2c88c663f42be8c451dca5e56e5979adc151272159dd07fc185380ee15fd2c6eb2570aacc5f60f6b85ef4079f22ece31131853f05871c470e71502809ea0f76ad69eb353eb5f5f956d03d176177aa409df1ce80f01a0b855fc5b5f040d021de90fe197bf6625cd5a0f8481ffd6767cf4caa6a789d2f3519a79908735284077d6d872545a9ec745835746b67cb6a879ca70fd60a296b5c1b4ecc4eedca0b62f7e12745c01c07b4115b72bb0b8251315bbd888075e2305824841fa14bb58b26e319f783b946f813873c829cb361dcfa4c3bffe2e46c02999756e574aa1e539f96d9382795b60232b3183001a56430777179b80ac86fff1195046a32414714b2ab6b516623530e31a3becc981b2d947eee601f5676ff308a2577c13c8f53693da04970fa998e1be2d22657b8e084c1c8b34eb2","method":"","user_agent":"","ja3":"","session":"afa90514-49dd-4d78-b986-f59bfd682be6","seq":1,"duration_ms":100,"bytes_in":488,"bytes_out":11,"enriched":{"digest":"26e49f42ad52fc5d","strings":["MndZY;","tX5tkg","d0wqy","j2AG","kQf#S"]}},{"timestamp":"2026-10-02T01:57:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-P6Mi*5ACKsHO","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d50364d692a3541434b73484f","method":"","user_agent":"","ja3":"","session":"41315b86-0b31-45e3-9326-c93377626a38","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"b43e5e7a4f615162","strings":["BitTorrent protocol","<-UW160N-P6Mi*5ACKsHO"]}},{"timestamp":"2026-10-02T01:56:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��b�\b\u0006���\u0011\u0016��u*�p��!�\u0015�R�\u0007j��D0�?/\u000f�e����e��\u0007�������^%#�\u0016�:'\u001e\u0002%�$�u����\u0006'}\u001ac��Zc\u0014��\u0017!�u��No�\u0018�vL!R�O#��٩,��\r�V֓\u0005�5R�\u001d�\u0005Cwa1�pd��͸#�\fv=Sa�\u0004`�D�A��&����4��m�\u0010C_D��Z��\u0014�\u0003�\u0011�� �L�Ev�F��\u0000~\u001eO�.\u0004f\u0013���L�ъ�M;%a51Jh�QT\u0017�B66]\u00109���Q�Lp�yv@=\u0001[O���һI\u001c�d!̻;\u0003\u001dM#\u0003�L\u0015�D�ɳ���w$�ӗx��l^5�������b=R#�\"�Zp�b\r�n\f�3����\u0019\u000b\u000e\b\u0001q\u0013�A���^��v��$�L���~̱\u0016 \"��C6ڀї�A�O\u0015�|\u0003�!�\u0011o","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4c653c53-4ea4-4db1-877b-455027c3dbd2","seq":1,"duration_ms":100,"bytes_in":354,"bytes_out":11,"enriched":{"digest":"cbe5d67801922ff9","strings":["vL!R","Cwa1","v=Sa","M;%a51Jh","B66]","yv@=","b=R#"]}},{"timestamp":"2026-10-02T01:55:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-r7hD8_x3lCIC","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d72376844385f78336c434943","method":"","user_agent":"","ja3":"","session":"d8686720-f171-4fae-88a2-7fad71cfe992","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"26b6b535787ba60b","strings":["BitTorrent protocol","<-UW160N-r7hD8_x3lCIC"]}},{"timestamp":"2026-10-02T01:54:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d(-����\u0004��:Sj�S\u001c\"y\f�b���[*Z�\u0016�a)������\u0006\u001bu3�_�#�\rp���K}�j������U��\u0018�T��ၶ��\u0012���\nfʴ��n �\\l`��@5�[�$n/�uDS!e��w�Z$�\n�\u001ff:+���m06��>\u000eC�\u0011�1��\u001ev:ފ�\u001a\u000f�+��\u0001ފH�\u001c��\u0018�{P����\u0015�z*\u0012D)�zR\r�I5�3����ǣH���+�%pAUpp+�e�\"���\u000f�����\u001a��HK��^\u0006.�p\u0017�^�\u0006�>&��\u000bH;��ޣ\\�{��V5��S�Hx���ii}��l7W�H�D)��1�Ue\u001d���\u0005�+����U������a�>J\u0007��\u0002�U����0����(\u0004�d\u0011�Z��\u0019\r �_c0��\u0006�W�H(?\u0018#�\u0001\u0010m\"ߴ�.\u001e\u0010�%b��9ٚޚ��fSA\u000eæ��\u0000�քC�\u0005l\u0005���L�j����s���\u0015\r\u001eKq\u001dG�P)Gm]�lA���P�\u000f�P�_���1l��ͻ��Xu�AX)_\u0010\u000b*<��\\\u001cX\f�~\"�V~���cL�C�CI��\u0013�Ml��̌ܛ���l�8f��5�(�WTӹ�Of�\u0016�p\u0012��_�\r�\u0016b�}�?��ٞv���#�3(\u0003�Wp���\u0006shHS�\u0018�H�\u000f�� nE�*�\u000b\\9M���*\b�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6c872b07-0b19-46da-8001-ac011e920cd2","seq":1,"duration_ms":100,"bytes_in":564,"bytes_out":11,"enriched":{"digest":"710e056b44d402e1","strings":["uDS!e","%pAUpp+","P)Gm]","AX)_","shHS"]}},{"timestamp":"2026-10-02T01:52:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-zhSkP7se~gVq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7a68536b503773657e675671","method":"","user_agent":"","ja3":"","session":"a95d10cd-896a-4c9e-af09-e917bce47de0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"0ca8ecfc98954322","strings":["BitTorrent protocol","<-UW160N-zhSkP7se~gVq"]}},{"timestamp":"2026-10-02T01:51:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���b�\u0002A�;:F�\f���\b���\u0011\u001d\\o/�i��Bq`����>`d\u0007ݟ/W�O#{Q]3/A�\u000f$\u001c\u0005ŭ������.��6pD\u0012*\u0002iF\f��@\u001a����\u0007�x���/t�^\np-z����>�qY���\u000b\u001d\u0012\t��B�K�\u000e�혗�PZ�\u0007_,��{�b���2ڐ�*����J\u001fT\u0016;\u0018b^-�dn�6�8��;��\bO���Cv9����V�1�\tۧ�5N\f�>��V��\u0006#�\r�{���\u0000~�_\\\u0004=\u0001��\u0018��Dc�\u0016K��\\\u000b\f��5/`q�[\fh���ZΈ�M��&�\u0007b�a�+'w�M��J)�\u0005+�dG�U�\u0006���4�-xdS7R�@M���\u0002��E�w���X`��\u001a#�O��\u000e�XJ�8���#\u0001\u001c���h^��V\u0000G�6c�\u001d�)[(�uy��S��\u0004�Oz\u0005�O\\�3�9��q��n?��ԻT","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"076efa21-336a-45e3-87c8-4649099d68d7","seq":1,"duration_ms":100,"bytes_in":427,"bytes_out":11,"enriched":{"digest":"c9a2d35e1619c2b7","strings":["O#{Q]3/A","5/`q","-xdS7R"]}},{"timestamp":"2026-10-02T01:49:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!l8arcuJxGGP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d216c38617263754a78474750","method":"","user_agent":"","ja3":"","session":"f608a56e-444a-4e7d-ab36-6493101749fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"54b68f353a612005","strings":["BitTorrent protocol","<-UW160N-!l8arcuJxGGP"]}},{"timestamp":"2026-10-02T01:48:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�H}C\t{\u001a�8���\u0000E�#l%�8,@n�*�i��\u0001\u001e�F٩\u0019��;u����^G|-��\r\u0016�:�b��b\u0005&�\n\u0000ņ����\u0000��\u001c����U��0S�4�#7�g�X���\u001d��!8��1��\n�\u0019[\\���\u001e���\u0011�c\u0006������\u0007�\"~+�x�S�\u0002\u001b AS�\r?`�Ӗg���f��´�\u001f�\t�Gn�lv�x��,�9#6�$\u0000�>\u0013-;�[�V\u000f�ִ�+�ͺx��\u000b�ں\u000e~�י��x����\r��V���\u0006","payload_hex":"80487d43097b1acd38a0c9e10045f9236c2595382c406ead2af769cec5011e9646d9a919fa903b75e1b1e9b05e477c2dbdb40d16e53ab962f1af620526a40a00c586cef7eded00fb821c8488ee8555cd7f853053d634d723378967d758b9b7dd1db4ab213891aa31b3f20a89195b5ca082d31eee87f911ce6306f2deed9ac9e10785227e2b9978e05398021b2041539d0d3f60ebd39667e8e39f66bb98c2b4901fcc09af476edb6c76ea78e3ef2c9e392336f72400a93e132d3bb05bd7560fabd6b4b32bc3cdba78ffc90b83daba0e7ed2d799bcf778a4bb92e00d82e956f38c9006","method":"","user_agent":"","ja3":"","session":"08ba4b10-ab0c-4b2e-b9f9-a729e35228ce","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":11,"enriched":{"digest":"daebe1a721aa7e16","strings":["8,@n","^G|-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T22:22:57.893807+00:00"}