{"ip":"152.166.220.65","total_events":116,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["116 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 23,272 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"23,272 bytes sent","bytes_sent":23272,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T18:46:46","last_seen":"2026-08-12T21:08:31","events_24h":0,"events_7d":116,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Santiago Province","city":"Santiago de los Caballeros","lat":19.4857,"lon":-70.7362,"asn":28118,"org":"ALTICE DOMINICANA S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as28118","label":"Altice Dominicana","category":"isp","url":"https://www.peeringdb.com/asn/28118"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":116}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":116}],"recent_events":[{"timestamp":"2026-08-12T21:08:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2w0BHy~v**XA","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3277304248797e762a2a5841","method":"","user_agent":"","ja3":"","session":"d3caccce-9a90-47d5-9fe6-7d2104d3dfc3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"71272d6be01db1f3","strings":["BitTorrent protocol","<-UW1605-2w0BHy~v**XA"]}},{"timestamp":"2026-08-12T21:07:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�?\u001dH��\nK��#\u0016����+�4>��5��ޯ֢�\\3�\u0015�b��t7�\u0001��\u0018}!1��v{Y�<>\u001ex�R���zA�s�\u0011�������S\f+T2�z��-\"��®$�ړI$*�����p�A\u0006����[]T�&y|h\u001a��\u0000�e�\u0017\u001f�����\u0000�c�\u0003�U�>��.��a'?��\u000348yU=Z��-5��,��d�\u0010��\u0018d����\\���\u0016IDEg��~��wJ3!�\u0007p��.�;����6\u001a��o\bu^��\u0000�$@h�\u001b�V�h�0����|W�T\u0018�\u001dU�\u001fk����\u000bԕك!��[�}��n��l�/\u0014�������:6�w�t�^�\"1'�`T��A@��X�܏R�\t����IA*�5}s\u0017\u000e�\n\b\u0013ك\u001cҦi\u0005�e�V������\u001e�[��\u0000���\b-�t�gq!m�RDzk���\u0006�\u001a�G�\u000e�Z.�U��` ι\t\u0016���IFQPPY[%���\u000b��wϗ�LӐL����i\u0002zs���6��1��A\u0006�������\u0015�}\u00079","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"af4cc247-71f5-40de-82a9-a8ccf4a8e7f4","seq":1,"duration_ms":100,"bytes_in":444,"bytes_out":14,"enriched":{"digest":"41e716bf741a39e2","strings":["&y|h","yU=Z","IDEg","wJ3!","gq!m","IFQPPY[%"]}},{"timestamp":"2026-08-12T21:05:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-oB!(.ZEg)f1Y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f4221282e5a456729663159","method":"","user_agent":"","ja3":"","session":"ec7e5f5e-10f3-49d3-ba43-5b114598d480","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ad5ced859df86fcc","strings":["BitTorrent protocol","<-UW1605-oB!(.ZEg)f1Y"]}},{"timestamp":"2026-08-12T21:04:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ɉHtÖϯ\u0016����\u001af�$�4\fD�7ҥ\u001e௕Ӿ6\u0010pN�\u00033�l���\u0014\u0018�ݣ��lW���Z\f )\u0013�\u0002���k[��숎\u0011���(�\"؉ĝ\u0016((��+\u0014�3���{1�N�X/�'�`\u0007x�\r�-����-Q|M�8,V�\u0014������3j\u00147�D\r_\u0012��J�A[��d{�~E�\u0018�$U>9{�������Jf���\fQ�\fs�u\u0017�zBr����J��\u001aPnp�=�B#��{���H�8w[�1�[g��es���y��\u0005E% ��{��Ų�+�w�\u0012��\u0000�ݟҝɁ�W���\u0018\u001b��\u001c�^U���zZB`�q�L(��?��e�j,�\u0003`e���f�\u0010�m\u0017\u001b\u001d","payload_hex":"cbc9894874c396cfaf1694b79da31a66ed24eb340c44f137d2a51ee0af95d3be3610704e8e03337fe16ca2b2831418eadda3a1f96c578edfed5a0c20297f13f902f1abc96b5bf3b7ec888e11d4c4db28ec22d889c49d162828e7a52b14e2339edcc97b31e64e9e582fd427aa600778c30db22d9dfdae7fc52d517c4de3382c56ab149cf58fe5d9c4336a143783440d5f12b39c4afd415b9882647bf47e45e5189e24553e397bbeb0a188a3c9c44a66a1daf80c51e90c739f7517fb7a4272f2f1f1f34aced31a506e70813dfd422392847bfd8398489e38775bcc31845b67c7ce6573b6dcf179bb9e0545252094817be7f4c5b2972bbf77b512fbee00c1dd9fd29dc981ff5789a884181bb7cf1ca85e558eaf9c7a5a4260aa71c54c28bbf33fc9d065bf6a2c8d03606599fff0669c10c16d171b1d","method":"","user_agent":"","ja3":"","session":"3ee9cc8f-cdbd-4442-b1a4-a52493eed57f","seq":1,"duration_ms":100,"bytes_in":308,"bytes_out":14,"enriched":{"digest":"a6f81b36072a613e","strings":["-Q|M","$U>9{","zZB`"]}},{"timestamp":"2026-08-12T21:03:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-BiBobMPc)kuw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4269426f624d5063296b7577","method":"","user_agent":"","ja3":"","session":"8fbc86fd-b677-439d-ad96-4d33da570705","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e885b24c972719d6","strings":["BitTorrent protocol","<-UW1605-BiBobMPc)kuw"]}},{"timestamp":"2026-08-12T21:01:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"l_��C�Nߙ\u001d\u0011�-�`\u0005�{��m\\\u0007�� \t+��^[�L\t�����F#��U\u000ekP\u0018�o�(�\t��ſ+�TQ�\t>���e+$\u00186s��^�ᤔ�c޾��3b��\u0017U�S����\u0000l}���5�k8�<�6\f\u001fV�I�\u0001��\u000b��([��y}��-\u001f\fT��\u0013/�l�jA\nvЂ*~Z\t\"�\u0018>(��|�2CGv/TMk�U�3ٚ�\u001d\u0015.����\t\\Q�\nA,\"\u0017E\u0015[�1u�\u0010\u0004�@��[f#q�wD�\u0007��q���&j�Cl:�gy��\u0016\f3ɌG4\u0011���4VA�c\\��|�7V3u\u000f�\u0012q1��\u0001�׮�ݒ�\\�u6(-��blS9�G�\u0019�ۣ���f=X$���*\u0018��\u001b*����Ό\u0016�잜\"�D�?:�_�\u0000@\u0013���|jI��\u0012J`�b?�&��}��16_z��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c60e40af-e9ef-4ea8-8b0e-b524ae15948a","seq":1,"duration_ms":100,"bytes_in":363,"bytes_out":14,"enriched":{"digest":"96fbc4ddc5647b8d","strings":["2CGv/TM","[f#q","7V3u","u6(-","blS9","f=X$","16_z"]}},{"timestamp":"2026-08-12T21:00:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-8SBqgzNm*PEW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d38534271677a4e6d2a504557","method":"","user_agent":"","ja3":"","session":"d7daf379-b42a-4413-b531-ff9a1aa9dc1d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"50d10aeef9bbc1e0","strings":["BitTorrent protocol","<-UW1605-8SBqgzNm*PEW"]}},{"timestamp":"2026-08-12T20:59:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���Abdn�������uy\n9\r�\u001eq�\u00028\u000f���V�4��'��E����,}��\u0017�Te;/�M�et�\u0006�[M\u001d3=��4@��I5˖\u000e_��j�IY8�o\ng6���U�~|y#\\�����\u0014\u001c�1e�6�\u0018L1zЅ\f\u0017߅c��\u0019`I�Ņז��a������$��\u001e`��a�.��E��ko@�\u0019:!�W\u0003S���,�L���]��.@1�c��2*b\u001e�Oe3\u0007\u0015$\u0011[\u0015�|�\u0007�6�b�\u001bv��П�vy\u0003[(S���/F4\u0010�s雐dυuC\b�ʥѐUY+�\u000b\u0002/�[��\u0015�*�3�D?��,���WoI܏EBdh.�aS|̎4�\n#\u0016�T�bb�\u001b��\\\u0018�\u0000\u0019Z���x3�Yk\u001b�C�\u0004\b_��\u001a/� 9���SGR\u0005�+�`�fE�C~Ǩ\u00117��� \u0014j�D�\u000b5oE�!���:���p8�u�E�sܧi\u0003���\n�\u0003��\b\u0013��/c�\n�\u0015\f�\fTk2���nƊF*��0","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"44d51036-fc71-4d8f-a278-ff0ef5fa3bb9","seq":1,"duration_ms":101,"bytes_in":420,"bytes_out":14,"enriched":{"digest":"c5a81a294f9fb475","strings":["Abdn","Te;/","~|y#\\","EBdh."]}},{"timestamp":"2026-08-12T20:57:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-xI2q6HCkpK.)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d784932713648436b704b2e29","method":"","user_agent":"","ja3":"","session":"3167feaf-99ec-4105-ac14-4c55bbf66ebb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"eb87d2999d84cd34","strings":["BitTorrent protocol","<-UW1605-xI2q6HCkpK.)"]}},{"timestamp":"2026-08-12T20:56:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��HӁ-�6\u00119��y\u001e�\u001e��\u001b\u001c�\"Z��\u0003�ɍ�\u0018]�`�l]���r���S��\u001bH@�\t����\u0017���L�\u0011�/�{m\u0012_&\u001b�M�c�\u0000�\u0016�ε,JP\u001c�u���\u0018�$q��J\u0003�@� m���M�\u0010�S�*~��\fd�\u0004`�\u001d\u000f�\u000b9��u�ey\u0005Ͽ�\u000e>�鍦\u0011�\b%��� ��\u0015�@�T�\u0006ZM�N��1\u0003���\u001c?\u00173�5��&\u0003:�<��z::��Ⱥ�C�\u0007'�.��tS�[�J@\u0016ƛ��`(_3�;�?,\u000f�_\u0001\u0004��@\u001c\u001e�\u0000���;=kxdV1oZ�W0�{̯��VQ�PM\t��Ce\u0010��SS���<'$D#�fBn�d���\u0010V)\u0019VO�\u0002|r�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e509a4e5-572a-458b-85af-28b15b600ed9","seq":1,"duration_ms":100,"bytes_in":301,"bytes_out":14,"enriched":{"digest":"80f5bff1bfe941b1","strings":["`(_3",";=kxdV1oZ","<'$D#"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T12:29:19.901507+00:00"}