{"ip":"190.43.92.242","total_events":2739,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"2,739 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["2,739 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"579,724 bytes sent","bytes_sent":579724,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-05T00:42:15","last_seen":"2026-08-19T03:48:12","events_24h":0,"events_7d":1277,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":6147,"org":"INTEGRATEL PERU S.A.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6147","label":"Telefonica Del Perú","category":"isp","url":"https://www.peeringdb.com/asn/6147"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":2739}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-05","count":178},{"date":"2026-08-10","count":507},{"date":"2026-08-11","count":146},{"date":"2026-08-12","count":448},{"date":"2026-08-13","count":183},{"date":"2026-08-15","count":152},{"date":"2026-08-16","count":183},{"date":"2026-08-17","count":522},{"date":"2026-08-18","count":244},{"date":"2026-08-19","count":176}],"recent_events":[{"timestamp":"2026-08-19T03:48:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��qyI�z�Ke���r����\u0012Bh \u0001u�jg��,q/��ʚ7�῅<�:���\u0017+�&T��{ߓ��\u0003dYH������Ʉ��/���%���1=j��bQ-�B\u0016\u000b�)ܕ�![���yz\r��s�\u000e�ײ�]���\u0012:���3��K�,F���'k�A��ޤ���4>�j��3h\\���Cs�fGK���\u0015J?W8\u0018���B�\u0018�D","payload_hex":"92c4717949957ae94b65bdc5e472f5fea9bd124268200175f76a67958e2c712ff4c9ca9a37e5e1bf853ca63ae584db172b9026549f947bdf93f48403645948f5bf92949af2c98488b22f83f8e92580eab4313d6ab59162512d9b42160ba529dc95c9215bb79a95797a0dbdc173e60ebfd7b2cb5def9fc3123a85a0b3338d864bcd2c46a4e1a1276bfd418386dea4c0b79f343ec16aafca33685cf29fec4373f866474b88eea7154a3f573818afead3429b18fc44","method":"","user_agent":"","ja3":"","session":"26c7e862-643d-4628-a0e2-0d19165a9220","seq":1,"duration_ms":101,"bytes_in":180,"bytes_out":13,"enriched":{"digest":"e61faadc41f8e5fc","strings":["J?W8"]}},{"timestamp":"2026-08-19T03:46:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-9ZOR3Xd3Jjb1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d395a4f52335864334a6a6231","method":"","user_agent":"","ja3":"","session":"d195049d-1661-4ead-a24a-5a46eac0b262","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ca1d1e76919fe5d9","strings":["BitTorrent protocol","<-UW1609-9ZOR3Xd3Jjb1"]}},{"timestamp":"2026-08-19T03:45:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012���K\u001cx QŶ�f��&lL�\u0010h����}\u0004MQ�b\u0015;�\u0012a�\u0002��3\u001d�b�5\u0011s\u001aQ�%Z��\u0011���v9ebj\u001f3����$G���!ѐ\u00032�l�P�Y[m�}��@�{c~��H�\u0007��L��L#H\u0011��\"��\u0015��\u0019\u0002�\u001e(�|���\u001e��=�Q�y��\u001e\u0006к=;Ҝ���x(�������D������i._i�\u000f�ld��Z!k^d��\u0011��yK`�J���\u0019w��H�?7\u0003�`�@\u000b\u001bW|ew��#!��}M̼#k=,�ȃF\u0018\u000b^�^��Ջ �\u0017��^?��?C��","payload_hex":"12a18fda4b1c782051c5b6a066b389266c4c941068ed9ce8b57d044d51c362153bb41261b00290e4331da762813511731a51cf255a8ff811adabf4763965626a1f33889b86922447efe7a921d1900332ce6cb05082595b6df57ddcd240f67b637e93a2489b0793ea4c8dae4c23481197f52297ac15f7d61902fe1e28927c9999871ee1b93ddd51e87998bf1e06d0ba3d3bd29cf893f87828d5f78fe1e2e4d344feb9fd87ebb9692e5f69df0fb36c6491a95a216b5e64cee511dec3794b60c34aa299fa197783d248ea3f3703a660ba400b1b577c65778bf72321a6f67d4dccbc236b3d2c95c88346180b5e855ee5f7d58b209917eee85e3ff3ab3f43a0ed","method":"","user_agent":"","ja3":"","session":"c00bfba4-78b5-4de2-9d6f-26fb6bfb44dc","seq":1,"duration_ms":101,"bytes_in":254,"bytes_out":13,"enriched":{"digest":"2b006b084a24db5a","strings":["v9ebj","i._i","Z!k^d","W|ew","#k=,"]}},{"timestamp":"2026-08-19T03:44:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-r-TFuCVmA9*l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d722d54467543566d41392a6c","method":"","user_agent":"","ja3":"","session":"b143a727-f0ca-4030-a7d8-eca9045f585c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0d172750e11cbd5e","strings":["BitTorrent protocol","<-UW1609-r-TFuCVmA9*l"]}},{"timestamp":"2026-08-19T03:42:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���4(-\u00019�ܯ�O���΀��C�U�\u0011��4��J\u000f��=C�;\u001eX t�˒W��\u0012�6�OY@^��E}�\u00178���/\u0000��f䀦�z3�\\��A��\r��|�/!�Xa\u0005\f�(�^�4��co�\u0003ڂ\u000ev\u001b\u001ete�p٦�,�>�I�r�p�R\u0003��ξZL\u0016��\u001b?+x����\"��xe\u000f�\u0012K?�d�LF9.\u0010w�'e腼.�qO��Et���\u00163��]�p>�ܻ�4�\u0006V)�YP\u001e�\u001d��p\u0019h\u001e_س\u000ej� (�2�04��bĭ\n\u001e�yM~=,q�N>6�\t��Y��ʵ����Yjj��zh�\t�>\u000e��\u0016;\u001cN�@},�5*�?��\u001dL�/m���-�\u0018?N��GC���U","payload_hex":"c895d21670e03be9368bb7bd26318d8bf1dfc758d27f40c6b062ac9cf75b3d4e00d49b53082e135a1af16d01d74e94c9128d2d8c888db884869dc44784f58f9cfcc29bdad457b0acfe2b81f32a08c80acd9a430b5e8c8d3c58b45d80a63f6775bc588ee7641a7f611eb131e3e745e6c712863ad05b81f6f2703632c2f62b0b16b24b94a1e2631c9ae3388378853c6fec8ff46da2ecb03342431fdb2e5b8ba76de43e2d013983dcafd14fb889a1ce8091cc43f655df119abc34edf24a0f93e73d43cb3b1e58207489cb925783de129536804f59405efdb5457de717388c95dd2f0090b966e480a6c87a33965c8cea41fbd40dbbe67cdd2f21fa5861050ced289a5ee534a989636ffc03da820e761b1e7465f970d9a69b2ccf3edd49b9728b709552039db6cebe5a4c168df11b3f2b78f2f0acf122a98a78650fc4124b3fba64e44c46392e1077812765e885bc2ee0714fd3e04574feb6d11633e8b75de2703e93dcbbdc34f7065629bc59501ee81da0887019681e5fd8b30e6aa22028a432853034faf662c4ad0a1e8b794d7e3d2c71964e3e36a409a7da5996c0cab58fa196d1596a6a989a7a68eb09f73e0e95e2163b1c4eb4407d2cf5352a9f3fbf941d4ca32f6db2afb62ddc183f4ef0ef4743a7fba655","method":"","user_agent":"","ja3":"","session":"d1c0a8ad-3436-401a-85b6-6bf78fdb83a9","seq":1,"duration_ms":101,"bytes_in":466,"bytes_out":13,"enriched":{"digest":"306997f0d9da187c","strings":["OY@^","LF9.","yM~=,q"]}},{"timestamp":"2026-08-19T03:38:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-~)LSGn8CWagu","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7e294c53476e384357616775","method":"","user_agent":"","ja3":"","session":"34cf4938-89c7-4543-bc9f-2ec8869a740e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"14707f44006facf9","strings":["BitTorrent protocol","<-UW1609-~)LSGn8CWagu"]}},{"timestamp":"2026-08-19T03:37:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���H��C��\u0000���&]IFgk����\u0007\u0016�c�WSb\u000bNE)��Mg\u0012�g4w�T\"v!I�\u001d����\u0013M�c\u0005x��m�\u0019pJ�|>RS�\u0004�\t\ra\u001bY���^\u0007\u0005�\u0000\u0019(Uv�\n�T�\u0014�T�Q�/�LAK5i�)Pm����c\"�[�\u0005�lC\u0001%͢\u0003�k�ֈ�}S�\u0000���A~ц\"\u001a�\u0000#��Ҫ�+�L��mt؍h,'�.�%�\u0016ڄ��9���/�\u0003\n\u0004Ū�Ev�d\u00101\u0017��\u001b�� \u0006t\u001foJUj�Е)����뇅�@�ᛢ^���J��2��\u0007�㹡?��9�~6|f\u001fa�J$�\u0010�cC\\��\u001b��z\u001e�lF�Υ��6TT\t�\t�\u0013^*���\"��\u001e��E6>4\u001e�����&҄~��o������\u0012���@��0�t�����\u0004R�G\u0019}8���\u0000X\b׈\u001c�\u0013�Ϣ`�o���7'L�V#Ra��sjq��\\���\u000b�D�!\u0017�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4ea746d4-7247-4f46-90ba-d9329c22814a","seq":1,"duration_ms":101,"bytes_in":398,"bytes_out":13,"enriched":{"digest":"a17db02d93381d8e","strings":["&]IFgk","T\"v!I","|>RS","LAK5i","oJUj","~6|f","E6>4","V#Ra"]}},{"timestamp":"2026-08-19T03:35:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-8HFDkRwAt.zI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d384846446b527741742e7a49","method":"","user_agent":"","ja3":"","session":"5d7a0a8a-7be5-4208-86c5-09dc900b3a8e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c0cb1a3c26ff6db1","strings":["BitTorrent protocol","<-UW1609-8HFDkRwAt.zI"],"iocs":{"domains":["uw1609-8hfdkrwat.zi"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:03.833093+00:00"}