{"ip":"152.0.188.36","total_events":529,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"529 events across 1 port(s)","confidence":"medium","network_type":null,"why":["529 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"108,875 bytes sent","bytes_sent":108875,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-19T16:50:20","last_seen":"2026-08-20T04:18:15","events_24h":172,"events_7d":529,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4829,"lon":-69.8964,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"36.188.0.152.d.dyn.claro.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":529}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-19","count":334},{"date":"2026-08-20","count":195}],"recent_events":[{"timestamp":"2026-08-20T04:18:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0016<�g�\"�b�\u0014\u0015f�\u0015]M\u000f!��\u001c7�\u001dO,gS\u0015��J��L%RA����h��{��.�\u0017G��\f,\u0004\u001e��t�&\"�?(?M\u001c\u001d��~K�\u0006�~7B�ǩs��i\u0000��U~�j","payload_hex":"b7ee163c8f67b222846289141566c3155d4d0f21add51c37831d4f2c675315a0a24ab4ba4c255241d4f8a2b968ebfb7bb1e22eb71747bba80c2c041ef3e674f82622823f283f4d1c1dede87e4b8706e97e3742afc7a973adcb6900c085557ef76a","method":"","user_agent":"","ja3":"","session":"8a8fee47-f6a7-4be6-b06a-6676536b0c93","seq":1,"duration_ms":100,"bytes_in":97,"bytes_out":12,"enriched":{"digest":"9d6083a429fe9088","strings":["O,gS","L%RA","?(?M"]}},{"timestamp":"2026-08-20T04:16:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-B1MIaD0R7bW8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d42314d496144305237625738","method":"","user_agent":"","ja3":"","session":"f4bfc230-f55a-482b-8065-1c9db617dba8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"9f7d2367832f0b56","strings":["BitTorrent protocol","<-UW1605-B1MIaD0R7bW8"]}},{"timestamp":"2026-08-20T04:15:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u001b��)\t�աe���Z��½\u0011�S�fȏ�\u001bfݱq���dW^\u0003�{���ߗF�ί�X�A\u0017�ńNș�cE\u0018\u0016��)�Jeb��й��~M'�1���\u001f9._qb+��]�}�x\u000b��a��\u001a�w\u0003+�r�:l(\u0004��o�GxX\u001esְ���eY�T","payload_hex":"8ac7f81bf8cb2909ffd5a16584acdc5aa1ffc2bd118353cd66c88fea1b66ddb171a593a164575e039d7bab9980df974686ceafbd58d3411796c5844ec899d163451816f48f299b4a6562be88d0b9bfa87e4d2783318090937f1f397f2e5f71622b94a95d927de1780bb5e16181da1ae677032bb572953a6c2804ffdc6fff4778581e73d6b0a7fb8a6559b354","method":"","user_agent":"","ja3":"","session":"942f3c78-073e-4b76-a6ab-741c99334daf","seq":1,"duration_ms":101,"bytes_in":140,"bytes_out":12,"enriched":{"digest":"8806e30eb9c23fbd","strings":["._qb+"]}},{"timestamp":"2026-08-20T04:14:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-VI-7fKmBpCLS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d56492d37664b6d4270434c53","method":"","user_agent":"","ja3":"","session":"3872f9bf-6696-4e99-b8de-796b9deec317","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0a4e7c913ae3ae5e","strings":["BitTorrent protocol","<-UW1605-VI-7fKmBpCLS"]}},{"timestamp":"2026-08-20T04:14:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-VI-7fKmBpCLS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d56492d37664b6d4270434c53","method":"","user_agent":"","ja3":"","session":"3872f9bf-6696-4e99-b8de-796b9deec317","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0a4e7c913ae3ae5e","strings":["BitTorrent protocol","<-UW1605-VI-7fKmBpCLS"]}},{"timestamp":"2026-08-20T04:14:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-VI-7fKmBpCLS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d56492d37664b6d4270434c53","method":"","user_agent":"","ja3":"","session":"3872f9bf-6696-4e99-b8de-796b9deec317","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0a4e7c913ae3ae5e","strings":["BitTorrent protocol","<-UW1605-VI-7fKmBpCLS"]}},{"timestamp":"2026-08-20T04:12:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"=R\u001d�Z'�Nʠ\u0018\u001fW.q>G�Ql\u0004c�5v��\u001a*H�ް��[\u0007�Sv\b�5)�\f��è \u001c���+���H^A!q��}�dY��i�D��\\�j8��c0���u�&��&9��\u001b��[��\u0011�O�A��ځ%��\r��(/@2N��F��/�\u0013\u0015\u0014������K\u0006��x~/�o�ԛ�K���=ꤜ����@�c���$��<&�v\u0010C�፛�Ӊ㻇E�c*�7�1��/ea��\u0010�8\u001c\u0018r0\\��^��\u0003�3��f�]Ƈ`M�\u001d�6�\u0018��yj��\u0018+R�a�I�\u001d\r�m�֖\\F��\u0002�ے�%ȶ5J��q�\f}۟\u0004������{�<���$�I:\u00142Ӯ��3랦�BeW�,\u001eJ����qBO��9�F���3���}i%�V<��\r��9\u0011�?\u0007��\u0016�\u001e3�\\\u000f+0ԏ�K�xG�^k5h!{\f���݌�K����ںٟ.�a��glX�c>l���!\u0001��Yr��ަ��\u0007|\u0012w��B�\u0006�[�� \u001b9\u001dY\u001f�rA\u0003$'k��\u000e\u0011�@&�8��Yc��a-�\u001e|\n�����~�\u0002-z��N�'�\u0006�8\u0007�\">��L�a�����Q)�\u0014��܊O>�����\u001f��\u001auK\u0000�3�'O\u001f\u0012","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4401f179-e449-443e-be4d-4f3870927284","seq":1,"duration_ms":100,"bytes_in":527,"bytes_out":12,"enriched":{"digest":"5947ea1f1b176619","strings":["W.q>G","H^A!q","(/@2N","^k5h!{"]}},{"timestamp":"2026-08-20T04:11:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-ej32W(9m-QiI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d656a33325728396d2d516949","method":"","user_agent":"","ja3":"","session":"44bc0508-2185-4f69-bd05-773617f18d16","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"84311cf1fdca0b75","strings":["BitTorrent protocol","<-UW1605-ej32W(9m-QiI"]}},{"timestamp":"2026-08-20T04:10:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0006�z�k�8�\\4��n}a̤vnN�W�\u001a\be�;��[�^:\u0016\n}ZQ:�SA�:\b�[���\n\u0018���|9K\u001d.܆�\u0006B(��a\u000f6\u001cip���f��%�F\";(\u001a0s\u0001��<i#U\tW��9t�&`}\u001a2�I��=\u0007�D�y\u0007���(�\\�K�\u0005��5��z'G2�ھ���rd�O���V�,\u0001U�p�Q��@:$����hg�g?|���\u0017����P��\u0012P�����C�\u0012�C9H��UB�}\u0011=e�\t]LL��G-��Q=��\u001b\b4���t�wy���\u0016���\"\u000b��^z0\u001av��=k�\u000fS�_&���8�=4\u0007����~ݡ�\u0000\u0010��)|�A\u0007Eaq\bh��!�2a��_�\u001br[WmNa0ۣ(���1�Jc�\u0015h��Xq0JL\u0018̑S�\u0002\b�)�䗭��τ=یnB�\u0017>F5�Z�\u0001�܍\b�4�1/;ta��2�\u0001�\u001c\u0014�l�n\u0001�|\u0006\u0000Q�M:\u0005\b�\u0013\nj�\u000e\r���\u0012�c�gA\u000e%\u0016�\u0011�M$/�&�\u0011Q�+�\u001ezȞl���2�Oo��9�=�1k�t{S�W&e���5��䐓ဈsGܬ�4I\\��\u0013�\u0010ǂN�����>4�C��:����\u001d��(=�=@���@���\r�\b�b�4�6�z!6I��c�k�\u0001����+W\u0018��C��^|��\u0002\u001f.(z\u0003SK�\u0007�û\u0018�Y��q��)Vz\u001c֒\fC","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8f8fd7f5-d67d-4ba8-9ab1-8fce5de44f88","seq":1,"duration_ms":100,"bytes_in":586,"bytes_out":12,"enriched":{"digest":"e997beb3640ce2c9","strings":["}ZQ:","F\";(","<i#U","z'G2","r[WmNa0","Xq0JL","1/;ta","z!6I"]}},{"timestamp":"2026-08-20T04:08:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-zx57(u.c7)LM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7a78353728752e6337294c4d","method":"","user_agent":"","ja3":"","session":"cb7ed967-07a8-43ff-b27a-9883ca205157","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"db98b91eb0d3eb33","strings":["BitTorrent protocol","<-UW1605-zx57(u.c7)LM"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:37.170215+00:00"}