{"ip":"186.1.64.88","total_events":230,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["230 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 49,716 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"49,716 bytes sent","bytes_sent":49716,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T23:17:12","last_seen":"2026-08-16T04:14:17","events_24h":0,"events_7d":230,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":230}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":35},{"date":"2026-08-16","count":195}],"recent_events":[{"timestamp":"2026-08-16T04:14:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":��A6��߻\\\u001f�(�'�&��:�������')��7�7:N�Ֆ7�<.�p� ˘�����;��]���N@�:֪1��\u0013Ͽ�QRRW\u0002��\u0019���qȈ���y\u0000>�׺�\t���=\u0000�s\u0015�uN�o���R��d��\u0015K���\u0017��[F�Pc���@V�\\\fy,\u001eWk\u0006\u0003r\u0016�\u0018|!�u\u000btFR��\u000f�R�O�i�!R���\r�k�Ѽ!�b�n���!�\u001aNY�����PQ��P�����׃gq�-j��E��\na\u0018�s\u0019!!Y\u0017\u001c.��\u0006��\u000f�=#�\u0005N4�\u0012\u0017*)C�Ʋ�c���\u0003\\��\u0002�fY�8�\u0019\u0001\u001f�0ֺ�\u001d���k�t&�(vך�J���C�$wv���\u0014��[=PƗ�d_6\u0017c�\u0007Q�ذ\u0001�17�@�\u0005^� ��۲�J]O�]�~9��e�zh�!�N\u0000?̈����S8-d�\u000b����T�\u00120�S�ɵ4�8:w��8vB��\u0003��{�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"91999e36-b25b-42c4-849b-63b13b53fd2f","seq":1,"duration_ms":100,"bytes_in":404,"bytes_out":11,"enriched":{"digest":"a1b3d0fe0cf6d9df","strings":["QRRW","S8-d"]}},{"timestamp":"2026-08-16T04:14:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":��A6��߻\\\u001f�(�'�&��:�������')��7�7:N�Ֆ7�<.�p� ˘�����;��]���N@�:֪1��\u0013Ͽ�QRRW\u0002��\u0019���qȈ���y\u0000>�׺�\t���=\u0000�s\u0015�uN�o���R��d��\u0015K���\u0017��[F�Pc���@V�\\\fy,\u001eWk\u0006\u0003r\u0016�\u0018|!�u\u000btFR��\u000f�R�O�i�!R���\r�k�Ѽ!�b�n���!�\u001aNY�����PQ��P�����׃gq�-j��E��\na\u0018�s\u0019!!Y\u0017\u001c.��\u0006��\u000f�=#�\u0005N4�\u0012\u0017*)C�Ʋ�c���\u0003\\��\u0002�fY�8�\u0019\u0001\u001f�0ֺ�\u001d���k�t&�(vך�J���C�$wv���\u0014��[=PƗ�d_6\u0017c�\u0007Q�ذ\u0001�17�@�\u0005^� ��۲�J]O�]�~9��e�zh�!�N\u0000?̈����S8-d�\u000b����T�\u00120�S�ɵ4�8:w��8vB��\u0003��{�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"91999e36-b25b-42c4-849b-63b13b53fd2f","seq":1,"duration_ms":100,"bytes_in":404,"bytes_out":11,"enriched":{"digest":"a1b3d0fe0cf6d9df","strings":["QRRW","S8-d"]}},{"timestamp":"2026-08-16T04:14:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":��A6��߻\\\u001f�(�'�&��:�������')��7�7:N�Ֆ7�<.�p� ˘�����;��]���N@�:֪1��\u0013Ͽ�QRRW\u0002��\u0019���qȈ���y\u0000>�׺�\t���=\u0000�s\u0015�uN�o���R��d��\u0015K���\u0017��[F�Pc���@V�\\\fy,\u001eWk\u0006\u0003r\u0016�\u0018|!�u\u000btFR��\u000f�R�O�i�!R���\r�k�Ѽ!�b�n���!�\u001aNY�����PQ��P�����׃gq�-j��E��\na\u0018�s\u0019!!Y\u0017\u001c.��\u0006��\u000f�=#�\u0005N4�\u0012\u0017*)C�Ʋ�c���\u0003\\��\u0002�fY�8�\u0019\u0001\u001f�0ֺ�\u001d���k�t&�(vך�J���C�$wv���\u0014��[=PƗ�d_6\u0017c�\u0007Q�ذ\u0001�17�@�\u0005^� ��۲�J]O�]�~9��e�zh�!�N\u0000?̈����S8-d�\u000b����T�\u00120�S�ɵ4�8:w��8vB��\u0003��{�","payload_hex":"3aef844136aaa3dfbb5c1ff028ba27cc26e4ab3abfece9d5f8b9d32729f9b237e0373a4e8ad59637f43c2ee070cd20cb989998b48fd23be88e5dadeee44e40f63ad6aa31a59613cfbf9b5152525702bdcd19e7dbdd71c888b4dae579003ebcd7bac1098dade13d00db7315fa754edb6fb8fdc652fa8564d8c6154b94f6eb17fabf5b46ce506395f0b84056eb5c0c792c1e576b06037216c8187c21be750b744652f7f50fc652f84fb869af2152f1fbe20d8d6bbcd1bc21a062906eddfddd21ab1a4e59d9f6f99a8b5051c2d550d2cae197f0d7836771b32d6a8eb745c5fd0a6118b17319212159171c2eaed006f2800fe83d239c054e34b112172a294388c6b28263bb8eb3035ca0bd02c96659dd38bf19011fa630d6baba1dc8f3976b887426d02876d79aca4abef9974398247776eca8c114bbf25b3d50c697cc645f361763f50751b4d8b001963137de40a6055ed720c0b2dbb29a4a5d4feb5dc27e39f3d265bd7a688f21b04e003fcc88b8dec8e253382d64890ba2fabcf554fb1230e753e0c9b534a1383a77b3f6387642b4890395917be9","method":"","user_agent":"","ja3":"","session":"91999e36-b25b-42c4-849b-63b13b53fd2f","seq":1,"duration_ms":100,"bytes_in":404,"bytes_out":11,"enriched":{"digest":"a1b3d0fe0cf6d9df","strings":["QRRW","S8-d"]}},{"timestamp":"2026-08-16T04:12:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3UCsf)UI5nfI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3355437366295549356e6649","method":"","user_agent":"","ja3":"","session":"3c824b36-a172-4766-8586-b77e172b8165","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"e1ffcdab6c0e7919","strings":["BitTorrent protocol","<-UW1605-3UCsf)UI5nfI"]}},{"timestamp":"2026-08-16T04:11:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0016\u0005�\t���c;)\u0018E\u0003@\u000b�?q�1���\u0007~���s\u0013�%Rɡ�?�V��E�?��3~�A!+�\u001a5��\u0012*�(�������\\����I Bi\u00177\rx6G{��ċC�`��0Bi\u001f\u0001���h\u0000�`\u0006�#Ol����S:3A����;1�ѐ�j,\u0015c����w\b��\u0005j\u001e~\u001b3\u0001&9\u001a","payload_hex":"faf41605a8099198d6633b29184503400b893f718531b58793077ec4e8eb7313be2552c9a18f3fcf56ba8c45a13fbfc2337e9d41212bf31a358def122ac828b69b8bb79d95835cb2819e944920426917370d7836477bfc89c48b43d66086823042691f01fedbcb6800c36006c3234f6cc8f2edd1533a3341a096e7b23b31a6d190b36a2c156386f4e8fc770883f6056a1e7e1b330126391a","method":"","user_agent":"","ja3":"","session":"4ee7367b-2260-4a44-b7b1-215ed7e12e24","seq":1,"duration_ms":100,"bytes_in":152,"bytes_out":11,"enriched":{"digest":"d46d1c28c8e32111","strings":["I Bi","x6G{","S:3A"]}},{"timestamp":"2026-08-16T04:10:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-o4WIFuCEWe.h","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f3457494675434557652e68","method":"","user_agent":"","ja3":"","session":"0afaa8c9-af93-42a9-b6b6-951d1f224298","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"22af5023ef1fdf89","strings":["BitTorrent protocol","<-UW1605-o4WIFuCEWe.h"]}},{"timestamp":"2026-08-16T04:08:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ފ8\\�>�\u0014U��-�������!�XJ�,��<�a���:���\u000b�:Bl��O+��\u001c�E�\u001c�j�6)�5���% %\u0001\b�_y��\u0010\"�~�f:�d?Oi�\u0006�Xj\u0017\u0006\n��)�\f��\\������D�G�{�c\u001dnGt��Q�p�\u0012H{\u001fru&o������<{S��kz�/\u000f�Y{����y�\u0014�o�zT�\u0004�\n����a臖`�\t��ZWA��������}\u0000��(3B9�D��k�$6���\u001c��\u001b�ß�#�e\u0017�\u0010g�g*����\f�\u0002;�2��4�Ŕ��Tl��ʢ\u0018�\u0019����Yrر��:Q#C%$҃��\u0002��K�b��\u0001\f�}b�-�cy��,\u00066\u0010�\u000f4\tVҧ�\u0013�L��BPwS>e���}\u0017�","payload_hex":"de8a385ce43e85145582b62de5d2ddcff8abee21cb584a9b2cd0e03ccb61c8c8c33aefd3e10b863a426c9ce44f2be5e91c9345dd1cc16acf36299c35b3b7bc2520250108925f79f7d41022a67ef6663ae4643f4f69ef06e5586a17060acecf29a40cc28d9ac95ca297ac92f8ff44e447997be4631d6e4774cbf751c770e112487b1f7275266fcecce0ffb28e3c7b538ce66b7a802f0fe8597b8ec18cbb79a214f16fb07a549a04a20ac9f6ac9f61e8879660fb099df35a5741e7bec3cdcdedbe927d00f088283342399644f2cd6bb62436a3b5af1c9fb71be7c39f8e23ed65179710679a672a8e9fb4810cf9023bcf3283e034d5c594fbc7546cb1b2caa218bb19c5f99efc5972d8b1bbee3a5123432524d283bfec02eafa4bf462e7dc010cb47d62af2d866379879c2c0636109d0f340956d2a7eb13917f4c8488425077533e6588d6de7d17ae","method":"","user_agent":"","ja3":"","session":"b56b42c9-7b89-425b-95fc-22e1a0a45d93","seq":1,"duration_ms":101,"bytes_in":327,"bytes_out":11,"enriched":{"digest":"6229e6f02a2ded53","strings":["d?Oi","ru&o","(3B9",":Q#C%$","BPwS>e"]}},{"timestamp":"2026-08-16T04:07:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-dX9kni_LKcuJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6458396b6e695f4c4b63754a","method":"","user_agent":"","ja3":"","session":"8b4d1776-72d1-4ec4-8738-74fe59138f72","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"2a260f055dbe2f11","strings":["BitTorrent protocol","<-UW1605-dX9kni_LKcuJ"]}},{"timestamp":"2026-08-16T04:06:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"-��R��.N\u0000�nFI�eV9��f�F�\u001d��T��\u000b��&Cm�pݭ�%���\u0014A�\u001eH>#����GjHkQ\u0015j[\u0002�\r�p:��6�:\u000fȳ���\u0005�����(\u000eHضNSK���\u001f\r�\u0005�\u0012K��\u001e��u_�������Ѱ���\u0003)gl\u0011(�-�> .�%���B��\u000e,v�\"P�\u001d�f��v\u0010\u001c\t�R��\u0000ʧkQ�\u000b�{a,\u0000�\u0006}.a\u000f~S].��6\u0011ɕ\u0019\u0012c@�\u001b��4�\u0005\u0001\u0000M�\u0013=��\u001f*\u0005�o\u000e\u0000��_q�'+T>\u0006z�Cof��aV�\u0005�\u001e\u0004s\u0019ʈ�In{\u0001T�dp�<����\u0019B��\u001e��N2J(���0XU��i�\u001bmD|�)J3�hg\u0018g?�0�ª\u0018\u0011융�\u000b҂��R\u0017��:\"�\u0014A�\u0005k\u0001h]��m\fc�o���!�|hE����ŐxB�L�6���iUW�(�\t�-\\+�n�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6e8b3e65-07b0-4d97-829e-4ba2780a291d","seq":1,"duration_ms":100,"bytes_in":374,"bytes_out":11,"enriched":{"digest":"00e76d6a4b80fa1b","strings":["GjHkQ","~S].","'+T>","N2J("]}},{"timestamp":"2026-08-16T04:04:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Ez_HQ11aG)Ep","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d457a5f485131316147294570","method":"","user_agent":"","ja3":"","session":"2313a81e-2a7f-481a-9f2f-cefd26f82e0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"ee9548b4847bcaad","strings":["BitTorrent protocol","<-UW1605-Ez_HQ11aG)Ep"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:30:07.548573+00:00"}