{"ip":"186.1.70.170","total_events":555,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"555 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["555 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"114,012 bytes sent","bytes_sent":114012,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T15:57:08","last_seen":"2026-08-15T21:43:35","events_24h":0,"events_7d":555,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":555}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":132},{"date":"2026-08-15","count":423}],"recent_events":[{"timestamp":"2026-08-15T21:43:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-C~s94U7fY4ZV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d437e73393455376659345a56","method":"","user_agent":"","ja3":"","session":"41626647-42cc-42a1-942e-968b929e8d7f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"267dd7dbef753691","strings":["BitTorrent protocol","<-UW1605-C~s94U7fY4ZV"]}},{"timestamp":"2026-08-15T21:42:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�sV\u0013xIg�\u0004ҏ�\u0018\u001c�>\u001b�k`q_\tL٨x%v�\u0007�|�zA�\u001d�C c\u0017A����%��B�*$���!|A�Z�~ݽr��\u0005~�Y��:,\u001d\u001a��/�`C#x1� �\u0010�.+�1��\u0013jp��\u0014��z ̉��\"","payload_hex":"ab7356137849679a04d28f9c181caf3e1bd56b60715f094cd9a8782576ca07e57ca77a41e61d934320631741aa91f5aa25bbdb42cf2a24e5f4cd217c41dc5a867eddbd72c0a3057edf59fda83a2c1d1ab7b22fed6043237831e820af10e62e2ba631b283136a70ec9114ade77a20cc89a0a222","method":"","user_agent":"","ja3":"","session":"6c70563f-3130-435b-83a1-adbd8d05d0a9","seq":1,"duration_ms":100,"bytes_in":115,"bytes_out":12,"enriched":{"digest":"f0c5470a8c8908fd","strings":["k`q_","`C#x1"]}},{"timestamp":"2026-08-15T21:40:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-kN7ZHJhMNM2Z","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6b4e375a484a684d4e4d325a","method":"","user_agent":"","ja3":"","session":"3d7d6834-a952-4ade-92c9-d14e5110852a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"7b05f3133f6c82e1","strings":["BitTorrent protocol","<-UW1605-kN7ZHJhMNM2Z"]}},{"timestamp":"2026-08-15T21:39:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��+�$N�Ψ\\���������JN\u000e0.N-S?b?�i��\u001b/W�x�-v,ʸ0��},� c��=��Gߵc�C-D\u000bN�Z�����i�<['G���\t#���\u001bF{������a8n�AF]�\u0018�ʫ��sg���T;�?�|�.*<\nˈM=v$כ�*,ђs\u0016Dn_�4dh\u0001/��U\fگ\u0017B\u000b%��\u0004�[��䍥_\u001c�\u001c����Q�\u0007Fd�Ǭ�I���'ͱ�}�����SR^Ճ�\u001b��\u0002{\u0005\u0004��&�[L!!��Ot�W�}�<`י����a�pu�Q�6/n&��y��U\\\u001cr���L��'ѡSQR\u000e*Ή�S\u0007\u000f�8�XJѠr��\u0016��(R,N\u001c�\u001e�P,\f\u0013�d�7�8\u0017 2h�.�K","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"426c96f1-001c-4625-b495-81298e6cbe28","seq":1,"duration_ms":100,"bytes_in":324,"bytes_out":12,"enriched":{"digest":"1d1290325e46d562","strings":["0.N-S?b?","<['G","M=v$","[L!!","6/n&","(R,N"]}},{"timestamp":"2026-08-15T21:38:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2)DNn-a-dV~K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3229444e6e2d612d64567e4b","method":"","user_agent":"","ja3":"","session":"c7241a60-56dc-4aa2-bd71-24cd85978e69","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d7dc7d696a1069d4","strings":["BitTorrent protocol","<-UW1605-2)DNn-a-dV~K"]}},{"timestamp":"2026-08-15T21:36:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":".\u001f����VW�`��ɄF��}�ݖ�}\u0003��u�(R���?]{�ϔBU��zD�\u0014\u0002Cw3\u0000oSEGq/=oTB��8\"؜�\u0011��x��>\u0012���\u00115z[0wAM\u00146�\u0016��{�_\u000e\u001b��\rf��2)�\u0003�|��@\u0016\u000fl����H*��(��\u001d+/��K�\u001a���^�\to_,\rmq8G�xg��b7�\u0011�ԘN\n\u0002��\u0010�<�@�[\u0013�/<�����\u001bZu��#O\u0013)","payload_hex":"2e1fafc1a0c95657e2608ddac98446bcbd7da8dd96a77d0382aa75fd2852b6f79b3f5d7ba0cf944255eabf7a44a21402437733006f534547712f3d6f54429be73822d89cc311fb8078fc993e12fcb8cc11357a5b3077414d14369e1691c57bf65f0e1bf1a30d669a9e32299103da7cfd8a40160f6ca999b984482adbd5288efe1d2b2f86e94b951a8cd0f85eda096f5f2c0d6d713847d27867c9d16237e311fbd4984e0a0292d210983ce240b05b13dd2f3cbda2f7838f1b5a7591c4234f1329","method":"","user_agent":"","ja3":"","session":"ad9a477d-7e3a-47a6-9e65-95d884e85fb4","seq":1,"duration_ms":101,"bytes_in":192,"bytes_out":12,"enriched":{"digest":"49dfe085fed23f3c","strings":["oSEGq/=oTB","5z[0wAM","mq8G","Cw3oSEGq/=oTB"]}},{"timestamp":"2026-08-15T21:35:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Kkapx0esDzvZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4b6b617078306573447a765a","method":"","user_agent":"","ja3":"","session":"167098c8-210b-4ea2-a335-4fd951a37b11","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"cb05cade464beb37","strings":["BitTorrent protocol","<-UW1605-Kkapx0esDzvZ"]}},{"timestamp":"2026-08-15T21:34:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�v��~E3\u001c\"L�z��L�3\u0012WQ�Apt[Io�\u0014P��z$.�t�L]l�u9\u001b�h����\u0002_�\u001e�6���U���!3�\u0015�ds��%͆`xSZ�r���Qgrd�1\u0012U��x]�\"�vD�1~\u0013>-J��{w��S@1��O\u0011�\u001b�Q��bD.&���L��C���\\{��Ĺ�U\u000b;��F�v�\u0015�8=�wmd���_\bj�AJ�1}0�\u000b��]\u001d�>���j�\u0003�XC��_��G��z��y[\\`�j�����t�\u0018��\u000b�\u0005�=֬�À��\u0014�\u001b3�\u00024(�\f\r�Б�\n��Le���Q+\u000e��\"�K}z��J��Q\u001b�|��:��/������ȵ\u000f��U�b�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f794b81a-faa8-4dec-9610-44d9e5f421da","seq":1,"duration_ms":101,"bytes_in":300,"bytes_out":12,"enriched":{"digest":"f6dd0cfb31f8597f","strings":["Apt[Io","`xSZ","Qgrd","bD.&","y[\\`"]}},{"timestamp":"2026-08-15T21:32:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-!HqVd~mdj6B5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d21487156647e6d646a364235","method":"","user_agent":"","ja3":"","session":"04d7103b-998a-46b5-9978-656f19570e18","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"259fe2dcf257c19c","strings":["BitTorrent protocol","<-UW1605-!HqVd~mdj6B5"]}},{"timestamp":"2026-08-15T21:31:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�j\r:������V���H?�\u0019\u0007u�=2�8�m�X��O��?B\u001e^�/������\u00146���\u001b\u001e3\u0005�r�\u0002�ډ�g��d������8\u000f�ev�9� \u000e�\u001d�\u001f�U\rSĩt9\u0004\u0013�j��cCM�V(���6_\u000e\u000f�\u0017��;z2l\u001a\t�\r�C�r���0�\u000f�8%\u0000sū��C�(���\u0007%�\u001dh\u000f|�z\u001cM\u0003II���1֌_����30�\u0005\u0014��yi�p\u0013�0������\u001b�3o�\\\u001a��\u0004E��P�+�b%*w��&�mD�1�����+q���/��","payload_hex":"ec6a0d3acbedcdf6aed6568a83f2483fbb190775d53d32d738ce6dd158baee4faba13f421e5e852f9d828ab7e1ab1436a3a8a51b1e3305ab72a302f2da899e67baed64d0ecf2f98db8380fb56576fc3987200ebb1df4eeba951f91550d53c4a974390413956ae0d563434dcf5628b181dc365f0e0ff117b0d03b7a326c1a09bc0da4438372daeb9b30bd0f8338250073c5ab81fc43c328e28cda07258d1d680f7cf67a1c4d034949ec92ca31d68c5f998cf8b63330840514a0827969f47013be30c190b3d3e1cb1be1336fbb5c1ae8d60445ded750ea2bb462252a7792a926826d44a731fba98a97c12b71bdacee2fabea","method":"","user_agent":"","ja3":"","session":"694043e3-95c5-4cf2-a00c-e919154ef02e","seq":1,"duration_ms":100,"bytes_in":241,"bytes_out":12,"enriched":{"digest":"f476fb8e369a5d2e","strings":[";z2l","b%*w"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:30:06.728763+00:00"}