{"ip":"79.116.216.234","total_events":7911,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"7,911 events across 1 port(s)","confidence":"high","network_type":"residential ISP","why":["7,911 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,661,143 bytes sent","bytes_sent":1661143,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T20:41:48","last_seen":"2026-10-05T20:17:30","events_24h":300,"events_7d":1867,"geo":{"country_code":"ES","country_name":"Spain","region":"Catalonia","city":"Sabadell","lat":41.519,"lon":2.1297,"asn":57269,"org":"Digi Spain Telecom S.A"},"source_domain":"79-116-216-234.digimobil.es","known_scanners":[],"scanner_tag":{"key":"peeringdb:as57269","label":"DIGI ES","category":"isp","url":"https://www.peeringdb.com/asn/57269"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T17:04:21","last_seen":"2026-10-05T17:04:21","recent":[{"timestamp":"2026-10-05T17:04:21","port":39131,"src_port":55809,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000ͺ\u0017i\u0001\u001b\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100cdba1769011b00000000000000009ff80000","sni":"","session":"94445151-025a-41e8-ab89-4626d6e25546","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":7911}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-29","count":146},{"date":"2026-08-30","count":628},{"date":"2026-08-31","count":98},{"date":"2026-09-01","count":186},{"date":"2026-09-02","count":213},{"date":"2026-09-03","count":193},{"date":"2026-09-04","count":184},{"date":"2026-09-05","count":247},{"date":"2026-09-06","count":434},{"date":"2026-09-07","count":499},{"date":"2026-09-09","count":70},{"date":"2026-09-10","count":192},{"date":"2026-09-11","count":294},{"date":"2026-09-12","count":84},{"date":"2026-09-13","count":46},{"date":"2026-09-14","count":192},{"date":"2026-09-15","count":46},{"date":"2026-09-16","count":105},{"date":"2026-09-17","count":361},{"date":"2026-09-18","count":465},{"date":"2026-09-19","count":171},{"date":"2026-09-20","count":141},{"date":"2026-09-21","count":218},{"date":"2026-09-26","count":531},{"date":"2026-09-28","count":382},{"date":"2026-09-29","count":199},{"date":"2026-09-30","count":146},{"date":"2026-10-01","count":267},{"date":"2026-10-02","count":452},{"date":"2026-10-03","count":298},{"date":"2026-10-04","count":279},{"date":"2026-10-05","count":144}],"recent_events":[{"timestamp":"2026-10-05T20:17:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�6�\\�B\u0010A���R\u0010Y\u0001����>�4\u0003�D��d�\u0005�\u0018�%w�.�Ag�HM��ҩ˩���\u0001ޱ\u0013�\u001e�jd�{�aT��Z���\u0001\u0012m`����e\u000b_E(�\\\\��\u0002ǟ��z�F��!W-1�\t`O��]Y�Z���\u0005\u001d$�U�&�,\u001e+\u0000$\u000fs�\u0016\u001f�\u0017+GR��;�\f���\u001b]�}c��\t��:�\u0018iVK�\rD�q�3<\u000f��\\\u0003`��%�\u0013-��#a7�S\b��J�o�\u000e'��MRr�+?k�&2D��/�R2Hs��<\u0007Ps�\u0014�h�\u0007:\u0003���\u0003\"�W�\u001a��l٤N��(s\f��\u000e,�:�b������O�i��b[�_����������\u0018���<\u0016r�k�\\-T���'��\t\u0007@�\u001a��!0\bP���%�*��w��\u0013�\u0006\n�oj��m�x��\u0003�7*�ٿ���;G3\u001d�\\ރ\u0015Xch{�,\u000e]\u001d�\u0011�ۧ�w�f\"\nx 8o�\u000e���~\u0013��G�a��(���\u0007��}9�^","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9dc8cde7-884b-4a02-bbf4-e28c101a7ee1","seq":1,"duration_ms":100,"bytes_in":444,"bytes_out":14,"enriched":{"digest":"e06d915d60fca22c","strings":["!W-1","iVK","R2Hs","Xch{","x 8o"]}},{"timestamp":"2026-10-05T20:15:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-jI~GbrbXA2Kq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6a497e476272625841324b71","method":"","user_agent":"","ja3":"","session":"ffce3278-dd98-473b-97b1-8aa53f63ce51","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8d1b43849892c2e6","strings":["BitTorrent protocol","<-UW160N-jI~GbrbXA2Kq"]}},{"timestamp":"2026-10-05T20:14:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\f��5y\r\u001b��\u0014\t˔�M���Gu�Q\t+��=��^�A\u0014�\u001a�c��VD�\u0003\u0018���\u0001)�\u0019g4��O'��\u0000I�a�\u001a\b�a�\u0004�4�H\u0017�������\u0013�9\u0004�T��\u0006�\u001b��\u0002<Ø\u0015Ѥ�'��g��e܌�\u0015Y3^x7\u001b\u001fp4�>����Xb�\u0001�\u001cC'\u0012�\u0019�����\u001c�Ͻ7~��P���*®9�픯�\u000f�\u001a�\u000e���j�])*W�]7\u0002��\u001a\u0002B����\rm�>�T.]H�\u0006_���%�\u0001C�k�D�Z�!��\u0013j\r?�\u000e�\u000b3�K�&[\u0007V�]�B��2���^�\u0011ϓ\u000e�}0D�\u0012.\n���\u000fk��.�e�\u0007�fl*�|v��ֹ\u0016�\u0010%\u001di\u000b�\u0001��:���m�1�\b~\u001e����\u0010\u001f�uz =\u0013�{adM\u0004\b��Hh\u001e�9\u001e���j\r�b��\b�3�J\u001b^�����M߱\u0002���ՠ�G��\u0011$6\n!S�E�\u0002\u0004��]��JÅ����\u0002h�(ʥ�u.���\r�\u0017�4�,\u001c�F��`*T�\f\u0007u0\tj�\u001f\u0019�jOƇ�8�q�C�\u0006i��b�@C\t�\"��e\u0016\u0000e<Ԟx��C\u0005�2_\u001c\u0018�7�S\u0002-���d���2w%Pd&\u001aV'.��y��\u001a�!���^\t\u0001m\u001b^","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"def260bb-4a19-457e-97b2-6e1bd98a040f","seq":1,"duration_ms":100,"bytes_in":513,"bytes_out":14,"enriched":{"digest":"fb0c9bc1c49aeffc","strings":["Y3^x7","])*W","T.]H","uz =","{adM","2w%Pd&"]}},{"timestamp":"2026-10-05T20:13:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-OMP(Pcem!KOQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4f4d50285063656d214b4f51","method":"","user_agent":"","ja3":"","session":"54486171-ea47-4ed2-8732-3dd7b2a53817","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"160ed7a820981adb","strings":["BitTorrent protocol","<-UW160N-OMP(Pcem!KOQ"]}},{"timestamp":"2026-10-05T20:12:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R`O�3�2)��H�\u000e*�@�Qw�� ���\u0014q\u0017gƐ��WCG�3�p��\u0015�Q�q�\r��E\u000b��%�Q��B�Eo�4�\u0015�V�O\u0012p���\u0018�����\n�Î7�\u0012�8\u0013FQT�G.v^�u\r��_�Hh�1�^��x���9۹:��\u0003��\u0014m��b\r3I(�j���V�����8���q������\u0014����q�l˸�\u0014�/'������˜�LKy\u000e\u0016\u00114\u0013�\u001f��\u000f4�9���C�\u0018�6���\u0015>�v3\u001a�Z�.3gf\u001e��ǻ�T\u0012\u0013���$đ\u0019Wv\rP�\u0007�U��\u000ef�\u0006�d\u001e��\u001a\rP�\u0015��O�d;K7��G�'�\u001c����i\u001d��\u001c��\u0002a-�O\u0015~�wο�\u0007�ge���y�[��RWs@;L�Ї\u0010�j^�n\u0016�u�x\u0018nPD(U\b��v�b���|[\f��2\u0006(�L��9��}M5�����~�<\u001ek���LFO}|����","payload_hex":"4d4318d752e3b0748ad5487c76f3e3d465d20df79a1a603ae36418314602a31eab8f0729508f5133e919a0dbabe921f9ac426a006dca14677f893f6cae7e7652c2041800966fc295292a953b83a5570acca135bf640a3a2c5ccabb302c761b86a2a670b4c3451fe117368a09041d5cbf6f3794b365d4673e9902612dbe4f157e8f77cebfb807a467658e9d8879f55ba9a0525773403b4cbdd08710d06a5ee46e16c675e278186e5044285508bda8769862a8b69a7c5b0ccbeb3206288e4cae823993cc7d4d35a68ba6ccd67ebd3c1e6befe89d4c464f7d7cb3bff394","method":"","user_agent":"","ja3":"","session":"47d42466-16ee-4445-9185-024db72949ac","seq":1,"duration_ms":100,"bytes_in":220,"bytes_out":14,"enriched":{"digest":"73c394c00f9b58c0","strings":["RWs@;L","nPD(U","LFO}|"]}},{"timestamp":"2026-10-05T20:07:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-H)p0VuVWrTt3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d482970305675565772547433","method":"","user_agent":"","ja3":"","session":"6486522c-90c9-452e-9ed0-6e3646f74f82","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9713912fa3f9e42f","strings":["BitTorrent protocol","<-UW160N-H)p0VuVWrTt3"]}},{"timestamp":"2026-10-05T20:06:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���]�\u0015BVm\u0005%�u\u001a-)G,[.�1�)G����}��5��9��}��lD}��=��M�\u0004�f�ll?��֨�\u0010���p�!\u001b��<�Ĝ�@/\u000en\u0002kw��\u001b\\�&ɵ\u0011��\t���?\u0014\bĎRnQ��N��x��吘c5�yf\u0016����\u0004�H���H+5f?8&q�+��R{l3l���X;���1�\u0001�%\u001f����^MH\r���CWT0G\u0016҂��WQHѬ�\u0004��ñ��\u001c���J;\u0006�Hg���oԳ���1�\u001a|W�_��L,\n�M�X�\u0018ڧ�\u001c���!$\u0019M;=�@����m;��\u0011��sEYǺ���˝��J%�5\bGx�AǷF�^�y��W�\u0003�٤���\u0013bǫ\u0010a>����ȸڏ�W.�^�os\u0003\u0006�k�������o�M\u0013\u001c�)�X�1\u0011\u0015.h\b_�fvH�V�y6�>�PV��*\b�Q��ɽs�n�a�7�\bOW\"hjx�iD��lǟ�'n�/b�b\u0007bz:�ϊ��,�17��8v(ݵ�$���kH�75�X\u0015v","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a90e83f7-f372-4116-9eb5-32fe32750fe2","seq":1,"duration_ms":100,"bytes_in":444,"bytes_out":14,"enriched":{"digest":"6ec61a2d6c676dcf","strings":["-)G,[.","H+5f?8&q","R{l3l","CWT0G","OW\"hjx"]}},{"timestamp":"2026-10-05T20:05:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yrH)EeqsSwxI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d797248294565717353777849","method":"","user_agent":"","ja3":"","session":"d435a5cf-3a7e-4623-bbaa-206073491068","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5235ada0551fb3a6","strings":["BitTorrent protocol","<-UW160N-yrH)EeqsSwxI"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:18:19.113937+00:00"}