{"ip":"179.7.0.106","total_events":1925,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"1,925 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["1,925 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"399,096 bytes sent","bytes_sent":399096,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T12:52:25","last_seen":"2026-09-18T22:11:48","events_24h":0,"events_7d":550,"geo":{"country_code":"PE","country_name":"Peru","region":"Puno","city":"Juliaca","lat":-15.4991,"lon":-70.1339,"asn":12252,"org":"America Movil Peru S.A.C."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12252","label":"CLARO PERU","category":"isp","url":"https://www.peeringdb.com/asn/12252"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1925}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":250},{"date":"2026-09-01","count":280},{"date":"2026-09-02","count":271},{"date":"2026-09-03","count":183},{"date":"2026-09-04","count":247},{"date":"2026-09-08","count":33},{"date":"2026-09-14","count":111},{"date":"2026-09-15","count":270},{"date":"2026-09-17","count":1},{"date":"2026-09-18","count":279}],"recent_events":[{"timestamp":"2026-09-18T22:11:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�]d�����~>ű��5�#K�^3��}?�}�\u000b)|0�UHt�Ļ_�\u0001����1\u0005����\u00161*�k��\r�3�mCw\u0002g\b���u\n\u0010~�$\u0010j=H{���U>���\f=Y�t�\u00111?<�-��\u001c��+\u001f�������h����\u0017|m�\u001dv/����C��s�+��$k9֦o�V=�NO�%�)]LI���\u0011���\u001b\u0013>K_�{Tp�2�)�w�\\\u0002�ו�o��\n$&�� ���P���zx���x\u000b�AKPoL��\u0003�.�]$��Ĭx����/ϫ_��K�q\u001d�B�\u0004`�j\u000e�@0��.���I$��3І֖3�\b_R�9�\u0016`0+��\u001c�0zS�ȥ�1�n�����C�d���e�E���Y;�\u0016�a\u0016�_]\u0016\n\u0019��B�\u000e~\u001e���y\u0011��\u0018gu\u0019�����s\n\u0013�2��\u0019\u0011*�\u0019�Һ��������\u0012)�Vc�k�\u000b��o۟*ȧ�M�z\u001b\u0013�nC�vmݷ\\�\u0011?��\u001c��'�J���t\u0005R���I�\u0006h�m�\"�H����쉇zh\u0004�<��b�U\u0015C��{�����\u0015PŠ�`�c��\u001f����м\u0019�\n7�,€�\u0019\"\u0018#\u0006x!LmqI��h�����\u001b��\u0019\u0010P���bs�DS��\u001cc\u0012�\u0006]4�\u0007�-g6b�3�\u0007���o�xz��� ����/��jC1��Ukw\u0000\u0012�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4a2ee331-fb47-42b5-aa38-37faeb0e49f2","seq":1,"duration_ms":100,"bytes_in":572,"bytes_out":11,"enriched":{"digest":"5b5e16722b81a678","strings":["j=H{",")]LI","AKPoL","x!LmqI","-g6b"]}},{"timestamp":"2026-09-18T22:10:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-LDls9a3wNC~9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4c446c73396133774e437e39","method":"","user_agent":"","ja3":"","session":"ec0671e0-0b30-4b33-be28-14bda885a976","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"5c762ca9d4291cdc","strings":["BitTorrent protocol","<-UW160N-LDls9a3wNC~9"]}},{"timestamp":"2026-09-18T22:09:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"0�4�\u0012\u0002\u0014�-��h��„��ԃ5Z\u001c\u0004�!��\u0004o��Ǝ�G���［�\u0001l��J��$\u0002b��S\u000fO\u0002K;F��i���HW��h�>B��a\u0011��NF}%'�٬;e��U�1Q�������睮�R5������A\u001el��t�A���\n�}1J8%�(N\u000brܷ�6\u0005-�Q��1�X\u001a���d���\u0014���`\u000b����\\�u\u0005�BnQ&q �I܄\rB�]k˝\u0006�I�!h�0&h\u0005��������z\u0011Ӂ��Q��OT\u001e\t��p��+�1��\u0007Λq猪*��6�ˮd��j��D�\u0012�H\n�����P��\u0010֖\u000e)\u0015v\u0006&�\u00199\u0018'�.����H��\u0002�%�sl6��0A��\u001da%:�\u001f��\u0015&\f\u001c��@vm^|�_$ѭ��\u0003�}��L:QIF���\t+��V1��\\�Yan�ֳ.7&�\u001f��\u0014)��_�2\\���\u0004h����\u0019�f�\\\u0015d�ڇ#�z�\u0004��+�wfM���灸\u001d���탪yLN�Y��s�\f�z�)\u0005�G\u0012*�C����\u0011cJ\\���\u0000��+3ꥆhݚ�\u0011�>�\u001e'����\u0017L>��OB���Ԭq��\u0006����hou�D\u0000�H\\T�~���\u001c���ʫ'uӓh\u001b","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"da1d948d-de89-47d3-80d8-efbfee38f4e5","seq":1,"duration_ms":100,"bytes_in":526,"bytes_out":11,"enriched":{"digest":"bdc81074dabc6bcc","strings":["NF}%'","}1J8%","BnQ&q","@vm^|","L:QIF"]}},{"timestamp":"2026-09-18T22:07:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-*fq!CxCK97u4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2a6671214378434b39377534","method":"","user_agent":"","ja3":"","session":"29e051d7-7afb-45e0-b427-b60f56ed0139","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"135d6f00ebf95d50","strings":["BitTorrent protocol","<-UW160N-*fq!CxCK97u4"]}},{"timestamp":"2026-09-18T22:06:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"9�h� Cڙ���\u0005bFo�\u001cǵ��'=�\u0018!?�ui��,1��g�ǔx�8Yt��3zM�Q�(�\f+���R���\u0001{r\\����УA4p�Q9=��\u0001ˎ��\u0007�m3k/ �5\u001af\u001c�d�'����_<��\u0016\b����C��ȹ�jT�\u0005����\u001e\u001cI�\u001f�5f\u0014\u0000f\b\u0006..-v9�ms*�E�?�z�+����\f\t���8'���%�^B��{ﱁg\u001f/�e�EI����*E��s�,\u0016��e\"~!��\"I9��}��q��\\B_2��% :DWwqHW9��'�\u0010��/DL","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1ea390c5-e825-433e-b2bf-5ccc434abc06","seq":1,"duration_ms":100,"bytes_in":251,"bytes_out":11,"enriched":{"digest":"a2ba3ef6f20eaa8f","strings":["m3k/","..-v9","e\"~!","\\B_2","% :DWwqHW9"]}},{"timestamp":"2026-09-18T22:04:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-cGD0hYkvtHls","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6347443068596b7674486c73","method":"","user_agent":"","ja3":"","session":"0412a3b2-9e43-4e25-ab4a-a635f85f303b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"2e977004679d0fbd","strings":["BitTorrent protocol","<-UW160N-cGD0hYkvtHls"]}},{"timestamp":"2026-09-18T22:03:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"/ܰ�2\u0015�����(\u0010��\u0007�s'�\u0007�2Y�>�؏��\u001frmeb����RY>슙��b\u0012B�\u001bt6�Iy?\u001c�er]of�ȳ(��7��\u0004=�h/>�얄Ʊ\u0001T]�\b\u0010*&�\u001d�\f���ux���4(�h��x`\u000b\u001c��2�1�\u0017","payload_hex":"2fdcb0a43215a0d4f5b3eb2810f2fb07a57327f207b73259f33eaed88fead81f726d6562c0f9b6ec52593eec8a99ecca621242971b7436be49793f1cda65725d6f66dec8b328ebcb37bebf043dc3682f3ef3ec9684c6b101545dab08102a26f11db80c83dbc67578feb2893428c968adb078600b1cbce1328c318617","method":"","user_agent":"","ja3":"","session":"56eea477-100b-426c-9377-a7322f1c8dc2","seq":1,"duration_ms":100,"bytes_in":124,"bytes_out":11,"enriched":{"digest":"e08b66fea80c2b60","strings":["rmeb","er]of"]}},{"timestamp":"2026-09-18T22:02:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-q5tdn_~Uj65X","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d713574646e5f7e556a363558","method":"","user_agent":"","ja3":"","session":"0b5e28e8-e030-4d7d-bb89-9cb5dc326c41","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"f66f633bc2a35e8e","strings":["BitTorrent protocol","<-UW160N-q5tdn_~Uj65X"]}},{"timestamp":"2026-09-18T22:00:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����\u0005p\u000e��R�\"��1�\u0004�H㇧`\u0003�Pv�ݷ�\"�\u0011ưf^\u0012�\u0002y\u0013�\u0017�vP�*����(�b�<���n� �`�Ҽ��7r�lU\f��^#zɳ�'\t|�;����mr\u0010���\u001be��'7�M~L�kq\f@Qn���Հ��ſ-@ҟ\u001b|\n��JL;nI�-� ɡt��\u001f��~��=L��P6U�%dh�\u001b�.�8�b\u001c�H4���II���*: )�r3I)���\u0014�Np��\u0018t\u0005����\u000eJw�d�H�\"�S�ت\u0016��4�-�\u0018'�Ń�ޅ\u0012��� ��\\�z\u0010�\u0017�\u0018V�%�\u000f�X�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"16f357f7-265e-47e8-a443-6960f1eb4342","seq":1,"duration_ms":100,"bytes_in":264,"bytes_out":11,"enriched":{"digest":"d64cb21588362c94","strings":["JL;nI","r3I)"]}},{"timestamp":"2026-09-18T21:59:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-b8qOqw-nj3tP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6238714f71772d6e6a337450","method":"","user_agent":"","ja3":"","session":"c40e022a-0dc5-4644-a3de-1962e6907802","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"8cb2ffbe7a59dfa9","strings":["BitTorrent protocol","<-UW160N-b8qOqw-nj3tP"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-22T11:34:07.207316+00:00"}