{"ip":"190.100.16.184","total_events":3429,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"3,429 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["3,429 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"727,617 bytes sent","bytes_sent":727617,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-13T18:27:40","last_seen":"2026-10-09T20:59:10","events_24h":0,"events_7d":657,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":22047,"org":"VTR BANDA ANCHA S.A."},"source_domain":"pc-184-16-100-190.cm.vtr.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22047","label":"VTR Global COM S.A.","category":"isp","url":"https://www.peeringdb.com/asn/22047"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":4,"protocols":[{"protocol":"udp","events":4}],"ports":[{"port":39131,"events":4}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T22:21:15","last_seen":"2026-10-09T15:08:36","recent":[{"timestamp":"2026-10-09T15:08:36","port":39131,"src_port":58425,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000s��\f#�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000Օ\u0000\u0000","payload_hex":"410073a8b80c23eb0000000000000000d5950000","sni":"","session":"98f9ec9a-92f8-44e8-962e-0c2a38f22f60","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-08T01:07:14","port":39131,"src_port":52199,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�Z�0>�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\t�\u0000\u0000","payload_hex":"4100da5ad9303ee5000000000000000009aa0000","sni":"","session":"e17595cb-6816-4354-ad85-4cc194055d93","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-06T23:44:45","port":39131,"src_port":61987,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000N0�A�\u0018\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"41004e30944182180000000000000000ae860000","sni":"","session":"a727d968-5196-4b02-8b4d-2271457e2afa","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-05T22:21:15","port":39131,"src_port":56138,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�%K���\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�[\u0000\u0000","payload_hex":"4100c9254baa959e00000000000000008d5b0000","sni":"","session":"a222d2a9-02aa-4f25-80b6-1a1ecf7b406f","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":3429}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-13","count":25},{"date":"2026-09-16","count":74},{"date":"2026-09-17","count":186},{"date":"2026-09-18","count":60},{"date":"2026-09-19","count":242},{"date":"2026-09-20","count":646},{"date":"2026-09-21","count":155},{"date":"2026-09-22","count":79},{"date":"2026-09-23","count":167},{"date":"2026-09-26","count":312},{"date":"2026-09-27","count":201},{"date":"2026-09-28","count":201},{"date":"2026-09-29","count":159},{"date":"2026-09-30","count":88},{"date":"2026-10-03","count":5},{"date":"2026-10-04","count":172},{"date":"2026-10-05","count":141},{"date":"2026-10-06","count":150},{"date":"2026-10-07","count":56},{"date":"2026-10-08","count":51},{"date":"2026-10-09","count":259}],"recent_events":[{"timestamp":"2026-10-09T20:59:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��z��C[�OD3�&O�YbucG\u000ec�\\�;R6�@\u0017/���\u0010<@�2�X�.+4��G��K.Dcg�}S�sH�g��\u0011*��\u000ee�j�͔�n2?�#]\u000eE����>!?l\u001f�","payload_hex":"e1fa7acced435ba94f443395264ffd59627563470e63a35ce03b5236a940172f81f79e103c40c9329758822e2b34f0d647a9d24b2e446367c37d53bf73488d6795db112aef9f0e658f6aafcd94bc6e323fbd235d0e45aaffdcfb3e217f3f6c1f9f","method":"","user_agent":"","ja3":"","session":"64c20f20-d594-4681-bfd7-61402b9705fd","seq":1,"duration_ms":100,"bytes_in":97,"bytes_out":14,"enriched":{"digest":"7d859ef5f5230685","strings":["YbucG","K.Dcg"],"iocs":{"domains":["k.dcg"]}}},{"timestamp":"2026-10-09T20:57:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-GXDLIAw95PUr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4758444c4941773935505572","method":"","user_agent":"","ja3":"","session":"7cb6179c-1a38-472e-a186-0f13be43c2ff","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1952d9926f88ba04","strings":["BitTorrent protocol","<-UW160N-GXDLIAw95PUr"]}},{"timestamp":"2026-10-09T20:56:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001fO\u0006\u001eoN|�&�Ѡ�i\u001c����rz�2���\b/�\u0007�����H��\u0012F����\u0010��G�M%�J�zL`^f����\u0017�\t��0���7�JH�S�ył\u0003\u0000�\"��^�e�>\u001c\u0017��@��u��B�jVߐk%aSb�ë�\u0015��\u0005=9\u0011V��@��!��Y-\u000bR��D���}2:�\u0016�el��ȜCVS����?�\u0013\u000ej��H\u000b�\u0018,\u001f\"�\u0004�l�Pˋ��U�k{��C)�\u0015E�\u0002\fm\t/�\u0000�z1\u0007\u0010d�&�\u000e4\\\u00020\u001d:p�\u0000�GfH�R5�%�\u000b}l��3��\t����\u0012樖�\u0011NB8\u0018���Q\u001e5����8���H�AV�7\u0019G\u0012�v\u0001�S-�\u0013�Ӕa(��I�bf�\b\tVh����;�P�>]u�q\u000f�����\u0005t'n\b\u0003�DŠX1\n�Ӻ�Μ;t�W1�\u0015����iʎ8\"\\\u0017�5��x8s����\u0016Ry���\bh����f�\u0000�$z�\u0010W","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f2ba8ad0-dc82-4ae2-ac67-064eb441e96e","seq":1,"duration_ms":101,"bytes_in":397,"bytes_out":14,"enriched":{"digest":"2b3200aa69f96ee9","strings":["zL`^f","k%aSb"]}},{"timestamp":"2026-10-09T20:54:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-oteztsdKh639","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f74657a7473644b68363339","method":"","user_agent":"","ja3":"","session":"3ecf4e0c-54ce-4947-b627-b5e956dd5fad","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b87bb61cd0d9df1e","strings":["BitTorrent protocol","<-UW160N-oteztsdKh639"]}},{"timestamp":"2026-10-09T20:53:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001d���Z�_Z�;]KL�(�'/Ƞp�\u000e���]���5{\u0013\"��\u001b_jZ�%)��ӂ�,�����s5��_�v��ύ�,�d@2��%�3\u001c<8skmaz�<E�٫�`�ݟ�$CJ����\u001e�O�Rj'�E��]\u001dw��;�E1�\u000b\u00114Yix\u0013a�f�\f��3�����67Ǫ!Z�/����2*����Y","payload_hex":"811dabe3f05aa55f5a933b5d4b4c8a28ed272fc8a070ea0ec2fcf95df087e0357b1322c9ce1b5f6a5ab325298ec7d382de2c8f9a8cf3b97335f97f9b5f9876e4b8cf8de22c89644032addb25d1331c3c38736b6d617ace3c45bfd9abfc60eadd9fe724434aebfe929d1ee14fd6526a27d945aeb25d1d77f4b33bef4531f50b11345969781361a266860c9c8b33fadee288da3637c7aa215acc2fe9f0fded322aff8dd0f959","method":"","user_agent":"","ja3":"","session":"9bc17f1b-ff10-483c-b4a1-6cbe8f4534dc","seq":1,"duration_ms":101,"bytes_in":165,"bytes_out":14,"enriched":{"digest":"e870c8a1a68a75d9","strings":[";]KL","<8skmaz","4Yix"]}},{"timestamp":"2026-10-09T20:52:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-OunChuC6lgYY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4f756e43687543366c675959","method":"","user_agent":"","ja3":"","session":"fb0c14c7-0bd6-4cd0-9c71-f359765beecf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c3ebd96c35d91b49","strings":["BitTorrent protocol","<-UW160N-OunChuC6lgYY"]}},{"timestamp":"2026-10-09T20:50:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E��ۮ\u0001\u0001\u0015���\u0002-����^T\t\f�\u00017\u0013��\u0017'R��\"O�\u0019�L�ȣ�\b�`�NJo�~�yT\u000e\u0003�э�E�bӤ�9����F\u0010ø�\u0007<��\u0000�ã2�gI��ITh\u000f�z�X�l�C�����V7Z=�#��'�G�}N4\u0010D����w\u000e�\n�V�_g\u0003�\u000e3\u0007<��\u001b��r�\u0001�VT��z�\u0001","payload_hex":"45a7cfdbae010115c0d6f9022da9848b9f5e54090c990137138cb11727529e9f224ffe198e4cb7c8a3cf089c60f3c78a6fb87eb879540e037fd5d18dbf45f662d3a48d39cde3beed4610c3b888073c878900cfc3a332e86749c2d24954680feb7ac658a36cc143898183d1d656375a3d8023eaa5279f47987d4e3410448a969280770efe0aff56ad5f6703860e33073ca78b1bbea872bc01d35654b7827ab801","method":"","user_agent":"","ja3":"","session":"a9883f03-a53b-4d85-a6af-1f875a9430be","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":14,"enriched":{"digest":"5d94bc221bfda4f2","strings":["V7Z="]}},{"timestamp":"2026-10-09T20:49:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-(EamN4gEVdJ!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2845616d4e34674556644a21","method":"","user_agent":"","ja3":"","session":"8a2cb1b4-73a7-4cef-b9c5-5aea9b3f7a7e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6b18b6c7fac151ed","strings":["BitTorrent protocol","<-UW160N-(EamN4gEVdJ!"]}},{"timestamp":"2026-10-09T20:48:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��99O\u001dk�+�Q\u0016\nE��D-]�,�&���\u0014�KX\u000b�7��\u0010pQ�.&��rbo�RSZ��\"7\u0004��\u001d�ҷ��������J��\u001f��0���_x>7���\\Y$&�%\u0001p�s>)\f����FBQ�1�\u0005=v?�K���\u0016x�5���洩�Ld-w1���j��z�$)#����\nEnFw��/\u001d�y.�~�p䫩f*j\u001fX\u00134���\nL�\f\u001e��kv���J��8\\�+۫/\u0006G��?�\u0018����O$�d�h6%���J�\u001d\"J��Z��D\"�*��\u0013�����u\u0011_�ȗl��Q�1��\u0003\fmc�gR�̇�K�M��\u0007�����\t�;0�9��e�}�_ױ@�=8��Y��E4�R\u0001\u000e�ʴVK��mP||�|�v�\u000f��\b����#jzV�\u0016\u0017 �^�^#2�3�?q���T�(�ddC�,\u00030\u0003x\u0017�\u0010\u000fJ��#��S\u0018���Jd\u001c��%��aM\u001c)]-���\f��K�bG��\u0014L4iX� �:�\u001c�ѐ���3I<�,D˪�\u001e�ň�����\f\u0001�\u00129�ļ�'��M�\u001f������A��\u0019b8�\u0000$a�LJ��G��\u0002�,=�Jg�a�\u0012�P[<Y��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"44a7cd7a-0282-458b-8f5a-73afd76abe7a","seq":1,"duration_ms":100,"bytes_in":507,"bytes_out":14,"enriched":{"digest":"d11cd4ad5f7aa276","strings":["_x>7","\\Y$&","Ld-w1","EnFw","mP||","#jzV","L4iX","P[<Y"]}},{"timestamp":"2026-10-09T20:46:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-cSwNmFn(urHh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6353774e6d466e2875724868","method":"","user_agent":"","ja3":"","session":"62770522-9dbd-4ea3-8df6-6cc023c8ee67","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f32744156e3b2974","strings":["BitTorrent protocol","<-UW160N-cSwNmFn(urHh"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-11T13:35:43.704082+00:00"}