{"ip":"181.42.140.22","total_events":515,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"515 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["515 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"35,020 bytes sent","bytes_sent":35020,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-21T18:45:50","last_seen":"2026-09-05T20:52:28","events_24h":0,"events_7d":76,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":27651,"org":"ENTEL CHILE S.A."},"source_domain":"client-181-42-140-22.imovil.entelpcs.cl","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27651","label":"entel MPLS","category":"isp","url":"https://www.peeringdb.com/asn/27651"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":515}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-21","count":38},{"date":"2026-08-22","count":45},{"date":"2026-08-24","count":29},{"date":"2026-08-25","count":37},{"date":"2026-08-26","count":1},{"date":"2026-08-27","count":107},{"date":"2026-08-28","count":22},{"date":"2026-08-29","count":32},{"date":"2026-08-30","count":46},{"date":"2026-08-31","count":47},{"date":"2026-09-01","count":8},{"date":"2026-09-02","count":9},{"date":"2026-09-03","count":18},{"date":"2026-09-05","count":76}],"recent_events":[{"timestamp":"2026-09-05T20:52:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��I�����Η\u0004�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b849bce5b4ea98ce97049b","method":"","user_agent":"","ja3":"","session":"8979e4be-8c1c-46e0-86f0-f08f404e1242","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"66781ccc798bc6a0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:46:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��e,\u001f�H���'�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8652c1fe548be83a427f9","method":"","user_agent":"","ja3":"","session":"dc2a7853-bc5b-4b78-84c7-98afdcd2373c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"22a29c0646c5fc09","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:41:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���Z�\u001f\u0004����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e35aa81f0498b8e27fe7","method":"","user_agent":"","ja3":"","session":"6f605810-7482-475b-9388-af772e92682a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4c968a541a7c7796","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:38:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��$,��]�\n�0�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8242ccbf95dfa0a9e30fd","method":"","user_agent":"","ja3":"","session":"e80591e4-6b9b-496e-873c-6be380291ef0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"91cd0e55dae4453c","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:36:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u001d�Ƿ)��\r��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81dacc7b729fffb0db2ff","method":"","user_agent":"","ja3":"","session":"d5f6a919-66c5-44d3-86ea-06c309ed0c0e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0dcd52111d949dad","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:34:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-������\u0011/�\u000f�X","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b894fc84e1112fc20f8a58","method":"","user_agent":"","ja3":"","session":"0cc8d21c-e8e9-4ee6-80cb-af15e772bce0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"452286b0f6e18217","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:32:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\b`\u0014I\u0013��ܛr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b80860144913bd9fdc9b72","method":"","user_agent":"","ja3":"","session":"c017fd17-eade-40ff-830c-20614da988ed","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6caf4d841337a3dc","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:31:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Lf�m�׏��]","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84c66d36d92d78f93e45d","method":"","user_agent":"","ja3":"","session":"efee7bad-c50d-4749-884a-7d8c2d71a44e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7dec6bbdc9ecd5c7","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:29:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���Kњ�$���\u0003","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8c74bd19a8024bebdb903","method":"","user_agent":"","ja3":"","session":"4ffc1e93-de43-4dfd-9918-4e4c92d6c34f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e5345c197932acc9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-05T20:27:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��'H��Y/�[5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82748e5b5592f7fe05b35","method":"","user_agent":"","ja3":"","session":"94009d78-00aa-4e24-9649-baad33809883","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c55258eaf5e395c3","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:42.737824+00:00"}