{"ip":"190.114.38.200","total_events":550,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"550 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["550 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"110,555 bytes sent","bytes_sent":110555,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-22T16:30:32","last_seen":"2026-08-31T01:15:36","events_24h":86,"events_7d":338,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":27901,"org":"Pacifico Cable SPA."},"source_domain":"host190.114.38.200.dynamic.pacificored.cl","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27901","label":"Pacifico Cable S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27901"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":550}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-22","count":150},{"date":"2026-08-23","count":62},{"date":"2026-08-29","count":183},{"date":"2026-08-30","count":100},{"date":"2026-08-31","count":55}],"recent_events":[{"timestamp":"2026-08-31T01:15:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0014�E���_R�7~r�p�\u001e�@d��3�Ǚ�?dD9���/l�ŷ\u001eRr,0��R�U��1-\u001cb�\u0005D��—����\u0016X \u0013\u0011\u0001\u000e?�G����Fz돞��\u0012>��u�:\u001b�F}7$\u000bU��T\u0019p�PH�(�\u000fcfWemR\u001e��P\f~�\t\u0001�3���>������IL�^Ymf�p�J���\u0018'���|��3$�-��9��������\u001bak��#�C\fk`����A111{h��!���\u0006�","payload_hex":"ca14dd458be9b85f5286377e72cd70f61e954064b3b833abc799c13f64443997e7992f6c86c5b71e52722c30f18452dc558e89312d1c62ab0544b8ebc29799a7c3ee1658201311010e3ffa47b4d67f82b3467aeb8f9ea4a2123eaf9175f33a1b9c467d37240b55969b5419709d5048e9289c0f636657656d521ebcd1500c7ec70901b833acc1d23e8da2fa918894494ccb5e596d66d770904ae2f9911827918da87c919f3324a42db4c639fe9191b0b482b9dc1b616be29e23c5430c6b608498f486413131317b6898d021b8c3d606d1","method":"","user_agent":"","ja3":"","session":"866b2c94-af5f-4d63-853b-8bddf366c4b3","seq":1,"duration_ms":100,"bytes_in":208,"bytes_out":14,"enriched":{"digest":"822bf5f39c732d2f","strings":["?dD9","Rr,0","F}7$","cfWemR","^Ymf","A111{h"]}},{"timestamp":"2026-08-31T01:14:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-JtY__fI-yKXb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4a74595f5f66492d794b5862","method":"","user_agent":"","ja3":"","session":"0d44bda5-a7dc-4030-b4ba-a8850299acb6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"16cf5248366c5519","strings":["BitTorrent protocol","<-UW160N-JtY__fI-yKXb"]}},{"timestamp":"2026-08-31T01:12:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"[�_G,�Bps+W�7���\u001f�[�\u001e��e ]���\u001d\u001c�°Q���)��.�:�F(�\b\t��<��ZSs�}Z��)`\u0014v;��_�Y_��\u0019�\u000f|\t�c�\u0019�'��p�沘�6j�2�n\u001e\u0003���\u001b`̊�\r�ͤ�������ǔ����\u0014���\u0019�����\u0013����m8\u001d\u000e�\u001c�ԥ!���z�\u001c�g�\u0001h;p;}��ε��0j���Z�ML�X�\rj�!\u0005途m@�}\u0015L�\u001d��}�\b�~�Zѱ���'v�:�����6��\u0003�e����\u0019�N��J�Eu���S\u0018\u0002�V{����,\u0001\u0011@�:�0\u0013�u;\u0006M\n)�����>\u0011IF��\u0019��r����\"���%q�tr���\u0010���-����J�5\u001az�]�\\KH��\u0019S��\\�˫","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7eed59e3-1779-496b-9c1b-4ee9e8b3fa68","seq":1,"duration_ms":100,"bytes_in":342,"bytes_out":14,"enriched":{"digest":"037004edeccefa91","strings":["Bps+W","h;p;}"]}},{"timestamp":"2026-08-31T01:11:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-fK4HrtnYER8r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d664b344872746e5945523872","method":"","user_agent":"","ja3":"","session":"cb93ec42-982f-48e2-a6ef-331521608bdf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"23d406c51fff5bd9","strings":["BitTorrent protocol","<-UW160N-fK4HrtnYER8r"]}},{"timestamp":"2026-08-31T01:10:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"&2P�\\���@��p�\\��cc+�l�qi\u0012ҫ4�\rb�o�\u0001:k(]ٱ5�Clj�bp<�\u0012��y�W\u001dGuG�`\u0006\r\u0017��HA'`_�\u0000�\r��9�\u001ap�OQ�D\u0012�\u0006��\u001d�\u0007�\\�\\u\"㱎#d�x��v��Q�\u000e_լJ4D���\u001a�9.]\u0014ݴ!�d�D~=0\u0007�\u0013@\u000f�*و�˺8��k*F�d�_'Ö�<;p�޲完_��\u0012��\u001bT��a{b�|}ja\u0012�!([�]x����u","payload_hex":"263250de5c969bff40eed970ec5cd9c163632b9b6caa716912d2ab34bc0d62dc6fcd013a6b285dd9b1358843c789a262703c9912f4a479a8571d477547b460060d17ac85484127605f8000a50d9be039e41a70894f51a74412ea06b19a1da607d45cdf5c7522e3b18e2364ac78d4cf768dad519b0e5fd5ac4a3444ba80a91a81392e5d14ddb4218364be447e3d3007f813400fa02ad988d5cbba3890e36b2a46cd64ad5f27c396d83c3b70e5deb2e5ae8c5fcdc1129b8d1b5488ef617b62ec7c7d6a61128721285bdb5d78c6cdd3fc75","method":"","user_agent":"","ja3":"","session":"f0cb75e6-4b49-46a5-b08a-67e67326b0a4","seq":1,"duration_ms":100,"bytes_in":208,"bytes_out":14,"enriched":{"digest":"5aeae3b4f8f10e56","strings":[":k(]","HA'`_","D~=0","|}ja"]}},{"timestamp":"2026-08-31T01:08:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-AYi!(PiEcDR9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d415969212850694563445239","method":"","user_agent":"","ja3":"","session":"948ea852-cc42-4a70-8950-7deaf0653213","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e583ec1135628ce6","strings":["BitTorrent protocol","<-UW160N-AYi!(PiEcDR9"]}},{"timestamp":"2026-08-31T01:07:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"}�\r�\\�\u0013�n��0�å�0f�(��&*��>�cZ��bi\u0014��k*:�������\u0014�֝�\u0010k��m�\u0003�Ҩ\u0003F�\u0018t m�1�s�\u0000\u0011�׾����\u0006��T\u0010\"�U�ۨW�J�Ջg͏B�\u0014�6�<�^\u001a��Z�|�1\r[��K���\t\u0002̍TR왊��N8�g;\u0000��~�nz��{1\u001f\u0003��\u0011V��\r_��P��2��/e�\u0016/��M\u000e�;��%J��q��L5���\u0007\u0016E��E<�����=�\u0006�\t�ߣ�����s�:d����O3��\u0002\f���Y,��c\u001f���r��h;�7�$舷X���\u001d�ƶ*|��\u0010w�ܶ#���d�{8�_��\u000e9K��OK���l��\f�{x��\u0003h�B�\u000f�Y�\u0016̻�\n��������!\u0018�x��6-b?�S�\u0012\u0007��-ˉ����\u0016F�\u001b�P?Y�-\u001d`P2��\u0000m��e-�-�@X�\u0011R�\u0019\u0006�U�ӎESr���e9�7��?8{�\t&{���b7�b\u0007]r\u001e\u00178���\r�|)�T���~~��Zn��\u0000�\\C�s�̫���\u000eK�(#�a�-��Z+*BΧ�\u0013#@�D�_V1��\u000e߁#1.h<�ᷯ]�\u0010�4\b�$wD�\u0003F�Ǩ*#���/Y��������\u001fn�\u0014Y�P��]�.lhZ\u001bQ\\��x7\u001d�[��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8013345e-0383-42a9-872a-090496e40d71","seq":1,"duration_ms":100,"bytes_in":559,"bytes_out":14,"enriched":{"digest":"c06e808c93c8806b","strings":["6-b?","Z+*B","#1.h<",".lhZ"]}},{"timestamp":"2026-08-31T01:05:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Qv-NsZLXV7z7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d51762d4e735a4c5856377a37","method":"","user_agent":"","ja3":"","session":"e9ec6db8-451b-48e2-b69b-da9dade80ad3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"576a6b736231ffd3","strings":["BitTorrent protocol","<-UW160N-Qv-NsZLXV7z7"]}},{"timestamp":"2026-08-31T01:04:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n\u0005b:ynK�N��� ���#,TN\u0005��<�����\u001c���\u000b\u0015Q�� �]����\u000f!��M���R��K;�?$7��\u0019ȧ9\f��0&���g�s\r����n�\u001bK�\u0017$i꯼�z���F��Ұ~D���vd���t��ɛg�)�B~-�\u000e@���lA\u0019\u0017��J8\u0003�6�\u0000X\u0016���vz�\u001b�\t\u0018\u0005���\u0000��\b�vD�_G3W�u\u0010�,\u0007a�I\u0010��p=�\u0017�78��Y�g|�\u0006���\u000f���X\u0015�\u001b\u0002�EےT,�\u001b\b���ц�<3��׼\u00042�\u001ctl���=���\u001f���H̀Aj\u0000>ܽpG~V","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"27b88389-2963-401a-8669-71060650bcb5","seq":1,"duration_ms":100,"bytes_in":267,"bytes_out":14,"enriched":{"digest":"9a1bdc88164e61fe","strings":["b:ynK","#,TN","_G3W","pG~V"]}},{"timestamp":"2026-08-31T01:03:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-v.NoAmnZ-yB~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d762e4e6f416d6e5a2d79427e","method":"","user_agent":"","ja3":"","session":"670cbf4e-935b-41c7-925b-04c8e070d50b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a185ef1e1e548373","strings":["BitTorrent protocol","<-UW160N-v.NoAmnZ-yB~"],"iocs":{"domains":["uw160n-v.noamnz"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:47.968441+00:00"}