{"ip":"152.0.186.228","total_events":340,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["340 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 68,651 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"68,651 bytes sent","bytes_sent":68651,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T22:24:55","last_seen":"2026-08-18T22:23:44","events_24h":0,"events_7d":340,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4829,"lon":-69.8964,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"228.186.0.152.d.dyn.claro.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":340}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":41},{"date":"2026-08-18","count":299}],"recent_events":[{"timestamp":"2026-08-18T22:23:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-DA(3F3mGzRkX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4441283346336d477a526b58","method":"","user_agent":"","ja3":"","session":"3b141284-e0b2-43d0-b095-e51408de68f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"32e375247810d995","strings":["BitTorrent protocol","<-UW1605-DA(3F3mGzRkX"]}},{"timestamp":"2026-08-18T22:22:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"o��Ѧ\u000fˑ���qˮ��~Y\u0019��\u0011��_��01��\u0016+��?�\u000f�t\u0017�tNEk�AfW�H�\t!����np��\u001a)��=�̰b\ty˸�\u000e0)i�'\u0013��hG:\u0000�Zv���?s7�z�x�\u000f'�\u0017ʧI��\u0018���\"�S�[\u0004�9ق�!DLS��G��?��L\u0004�1���I\u0017��\u001a�̳\u000ehi���Tm8*Ƙ�š��\u0013[�?^\u0003#�\u001b4�0\u0018��\\�����U�w%Z��\r^\u000b�`�����\u0002\u001c\u0010��p�u��\u000f\u001e�WkA.�$�H�$}\b�gf{0���j�\u0015*��?W���3���f}S�\u0012��e�\u0012����1��_\u0013\u0016��4>�\u001d\u0011'\u001e�X�ko�� ��>\u000e=�����H�A��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3a298605-8344-4134-949a-53f03f40327f","seq":1,"duration_ms":100,"bytes_in":313,"bytes_out":13,"enriched":{"digest":"abb0f5cb7405119c","strings":["!DLS","Tm8*","WkA.","gf{0"]}},{"timestamp":"2026-08-18T22:21:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-lO2YD7tj2-kg","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6c4f32594437746a322d6b67","method":"","user_agent":"","ja3":"","session":"4cb5d375-e37c-4d28-939b-1e603e5bcad1","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5e4514741cc8f9ac","strings":["BitTorrent protocol","<-UW1605-lO2YD7tj2-kg"]}},{"timestamp":"2026-08-18T22:19:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"|ʪ���P\u000e\u0004R\u001c�\u0002����/���\t��[�b\u001c�,\u0006�G�a����\"]Ϟ�\u001f77�\n�I��D��:SڽxՑ�B�\u001eo)C\u0007��T �\u000b�C�/\u0019\u0005?��AY�H#\u000f���K�9tt��(\u000f�\u0019��[U��=�\u001f�\u000b�\u0002^Q\u001b�m3��\u0012�`��J�\u0001D\u001a&���g���\u00024��{�Lֻr���z��i�\u001c���\u001a�I���^�{\u0010�}l���c\\+�޳H�\u001d\u001b���^ӆ-�n]��s���6.jlP\u0006`\rh>\u0006�C\u001fR6E)","payload_hex":"7ccaaac1a69e500e04521ca90287859fb22fbf87f509a18b5bf5621cfe2c06fb47db61e094c3d9225dcf9ead1f3737b40ae949cac244daee3a53dabd78d591f042da1e6f29430785b45420ce0be943aa2f19053fb68b417f59b448230f96959e4bb6397474a4e3280ff3198de45b55f6b63d881fb60bac025e511bd56d33f8d912f160c4f94acd01441a2690e2d06787e7c302349fe37bf87f4cd6bb72ddcded7ab8a869b51cff98991ad34998e7b35ee17b10927d6cd9eceb635c2be0deb348921d1bb19bce5ed3862dc76e5dc9c873a79ddf362e6a6c5006600d683e06a9431f52364529","method":"","user_agent":"","ja3":"","session":"6949e9ef-e3be-4556-b9cf-bd1c2c6c1cf6","seq":1,"duration_ms":101,"bytes_in":229,"bytes_out":13,"enriched":{"digest":"4915df69a0f23cb0","strings":["6.jlP","R6E)"],"iocs":{"domains":["6.jlp"]}}},{"timestamp":"2026-08-18T22:18:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3S)UwxfUqk9j","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3353295577786655716b396a","method":"","user_agent":"","ja3":"","session":"e8498ff6-46b1-4ac2-99e2-b7b3f1f05ceb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ecd0b1dd2c4d1437","strings":["BitTorrent protocol","<-UW1605-3S)UwxfUqk9j"]}},{"timestamp":"2026-08-18T22:17:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0002��B����'�KR)�\u0014��\u0015���;mn>Ԍ�Wi�JC��\u0001O˵\t��lv}�Lt��\\�դzr���Z�c�ީe����\u0002![:���6\"ӣ�\b\u001e\u0002�3+|��N\u0013\u0014u\u001d�B�\u0015ˆf�\u0005-m\u0001ѷ�\u0002�=���z�:\u0005F\u00105�vy��T��ē�]vfz\u0003�?��.�\u0006;���5\u0011�YO�>4�\u0010�g�`�m7ַ�/(��\u0006N��I��\u0007J-\u001c�\u0004Ъf�J{�)�U\u0002]\u001b��\u0018fz\u0015�\b��\\I\b�n��LV�e,9\u0003R���Ef�a�g���E�k�x���\\f\u001a1/i�\u001b9U�\u0004w>M_Z\b�&�x4(Th�|\u0017\n����ʣ=�(�\u001d.l�K�*�5��J��B�Ǣ����hқM\u0000���P���_\r�l�\u0016j�ۇ�ְ�]?��]M�B%�j�i��ݲ\u001e��f]y\t�pF9D)�\u0005�\u001c�Ȃ��t\u0014Ws��ƾ�[�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9e7091e1-24e4-4c23-9582-ce0db69c8d34","seq":1,"duration_ms":100,"bytes_in":391,"bytes_out":13,"enriched":{"digest":"de6c0171be731ac6","strings":[";mn>","]vfz","x4(Th","pF9D)"]}},{"timestamp":"2026-08-18T22:15:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-S2J8MVvR(y3P","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d53324a384d56765228793350","method":"","user_agent":"","ja3":"","session":"a6b7939d-a684-4903-8319-f01d878577b3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ab4bf64f2896092e","strings":["BitTorrent protocol","<-UW1605-S2J8MVvR(y3P"]}},{"timestamp":"2026-08-18T22:14:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"9So\u001dH�\r�U���\u0010w��\u0014��2K$�̆f\b��Zޱ�\t�q\u001a��)�����\u0010���w�U�\u0004\u000f�\u0014��\u0011��\u000e��nߗ��:\u0012�a���%���y��\t��Z\u0019*��fb��D8>�`aY��2�\u0004��Zf[ҭ\u0000�4T)\u0002��Xp>�V�= �\u0005hTW\f�����:��π�M���\u001f�:\u0006Z�o�au^�4�����,���\u0018G��_","payload_hex":"39536f1d48e90d965587939c1077a4ac14889f324b24ebcc866608ee8a5adeb1ae09ef711ae0b929857f9bfeea8310b9f2dc77e655ee040fc7148b8e1188d50eb0bf6edf97f9cf3a12f261ff94fe25e395d879fef509cbd25a192aad87666294d944383eeb6061599f8632f704adc55a665bd2ad00dd3454290289da58703edc56a53d20be056854570cc1febde3df3ae3b9cf80ab4dbbb8951faf3a065aca6fbb61755ed234bea0f3d5d62c8fb7ab1847e9a05f","method":"","user_agent":"","ja3":"","session":"a8d86572-c7e5-4699-9b9f-60698e308d2a","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":13},{"timestamp":"2026-08-18T22:12:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-cVXE-synER.c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d635658452d73796e45522e63","method":"","user_agent":"","ja3":"","session":"aa15da55-0719-4799-bbc2-77021da0fb1b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2b06a950be2c62d7","strings":["BitTorrent protocol","<-UW1605-cVXE-synER.c"]}},{"timestamp":"2026-08-18T22:11:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001a!��x�\t\u000b22H�\u0006`�d��eNO�\u001c\u001d<-�}ܯ��Z�\u0001��𐔲-����\u001aW�]�\rG���3�\nZ%A>=˴�����,~���˹��|m��]\u0015�:s�s�\u0006�\r`�ü[}����\"���:\u0013\u000b�\u0017\u001dX\u001b�Z�h�\r�3W�/��\u001d!\u000b#vco^r|��\\6K\u001d|�`��\u000b{lt׈�3\fKq��\u0005@Y\u0018d����\u0003Rv���S8���d��wX�J6ìz�:��z\\��������^����\u0000�ى�)\u001c�e\u0010\u00078^�\u001d�&` :��.F�\u0006���Ð�)�wA\u001c)���\u001b���2K)\u0007G���\u0014k�\t�N�\"Q�O��q�\u000f�ߎ\u001b ��\f�������\u0018�=��\u0002U\u001em��K��S\r;�YyR\u001d�xr�\\*�^\u0014.���4�yx�\u0004\u0002�۝��gJ��??��I�\u001fnY\u0018ք�J�g�\u0012uh���E�-��,F\u0001H�ڪ�2k�ɹQ�d�\t�'1G�F}�f�:�[C�\b�)��\u001a�PO\nN���d�\u0012\u001b�֍��]&\tLo\u0013�\u0017��?�9 L�J���čH~�f��ci�e��Ʊ\u001f�T\\��>q��U|iӀ\u0000�\\�P\u0017�\u0018�I�,���P%��5����=��\bS���s\u0005\u001d\u001bk�\u0014���.�\u001c׺��\b��R��\u0007l\u0006��H��\u0006h*㾋�Y=\u0011RD/\u0011̱|ƺ_5\u0010rN","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f2b51e42-8809-4316-aa0e-768e96f14dd4","seq":1,"duration_ms":100,"bytes_in":580,"bytes_out":13,"enriched":{"digest":"410719639ebc5b8f","strings":["Z%A>=","#vco^r|"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:27.362820+00:00"}