{"ip":"186.1.91.242","observed":true,"total_events":55,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["55 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,967 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,967 bytes sent","bytes_sent":10967,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T01:09:41","last_seen":"2026-10-14T02:12:59","events_24h":0,"events_7d":55,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":3,"protocols":[{"protocol":"udp","events":3}],"ports":[{"port":39131,"events":3}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-14T01:09:33","last_seen":"2026-10-14T01:09:39","recent":[{"timestamp":"2026-10-14T01:09:39","port":39131,"src_port":25661,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000W�\n���\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�p\u0000\u0000","payload_hex":"410057fe0ab09be80000000000000000ef700000","sni":"","session":"5a630b01-1162-48dd-9c47-84c586bde47a","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T01:09:36","port":39131,"src_port":25661,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000W�\n�1\u0018\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�p\u0000\u0000","payload_hex":"410057fe0a8231180000000000000000ef700000","sni":"","session":"2848b6c1-e79d-4cd3-a49b-e3e0d4ee9186","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T01:09:33","port":39131,"src_port":25661,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:S��5�̅n\n]1u���\u0000�$�M9:info_hash20:S��D��ěY$�F\n�k�s�l\u001fe1:q9:get_peers1:t2:��1:v4:LT\u0001\u00001:y1:qe","payload_hex":"64313a6164323a696432303a53a7a135e6cc856e0a5d3175fdf8ed00b824df4d393a696e666f5f6861736832303a53a7a1449ef5c49b5924a0460af66bde73896c1f65313a71393a6765745f7065657273313a74323a88b8313a76343a4c540100313a79313a7165","sni":"","session":"5d268b05-0d30-4375-8b2d-7f4d7943d13d","bytes_in":104,"source_verified":false,"enriched":{"digest":"046f948204ce44f1","strings":["d1:ad2:id20:S","M9:info_hash20:S","e1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":55}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-14","count":55}],"recent_events":[{"timestamp":"2026-10-14T02:12:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-0LkbWcDLFPN)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d304c6b625763444c46504e29","method":"","user_agent":"","ja3":"","session":"6bb3865d-62d3-4dcf-bb6a-ed425bad3cfd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"88047ee88e97f5f7","strings":["BitTorrent protocol","<-LT1000-0LkbWcDLFPN)"]}},{"timestamp":"2026-10-14T02:11:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"{\to%������6(Ӏ�����r�P,&V#��6\u0000��Z��Z�چ-�=î��\u001c:�@�o��_��C�8�vC��<\u0012tBW��#4��'`�\u0018HC�\u001e�ʩ�P\u0004|�2�%\u0003�\u000b?x���T^�b����D��#\u0010�:\u0001��\u000f�\u001fP�K^�b$���\u0010�*�\\�\bk,h\u001a�r��;� �f��q�\n\u000b�EW��س3��r��R\u0007U��\u0007��\u001d�k\u0012�8��\u000b�\u001e�ud��L�\n\u0018|N91 \u001b��F��N�����[>�a\u000e�\u0014X+��9Z\u0013\u001f�}C�U\u0019�H\u00033,\u0005���4\u001cw��=+\u0001Y�qhc�� C8�_H9���±\t���9\b�\u0001H \u0003\u0011��W��\u0011Z\f���\u001a��ã\u0006'-���\u0016��y+h","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3e88cdeb-43bd-4848-b5a5-cbf903281cd0","seq":1,"duration_ms":100,"bytes_in":319,"bytes_out":12,"enriched":{"digest":"b94842c3a9db733c","strings":["P,&V#","|N91"]}},{"timestamp":"2026-10-14T02:10:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-0LkbWcDLFPN)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d304c6b625763444c46504e29","method":"","user_agent":"","ja3":"","session":"46158952-209d-4d06-9d09-752c5f43c0f8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"88047ee88e97f5f7","strings":["BitTorrent protocol","<-LT1000-0LkbWcDLFPN)"]}},{"timestamp":"2026-10-14T02:09:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n�.p�Ȓ\u000f2^��>^9\u0001aՠ}!�\u0010F)\u001b�-��ˇ\u0017�\u001eNM��}>}Y!�R�\u0012'1�Rׄ1\u001d��Z=�\u0000OrU����\u000e���z�k7]#%���Ĭ���\u0005,K�a\u000e��?NW`ǽ\u0011Rn�f�~d�a�I��D��I+6+FO!@�\u0004NOŪпk\u001caK1\u0011\u0019�ϣ��\u0007\u000f@\u0004,\u001e9t~�z�\u0005�R�\n��>l\"�'����%b\u001c��הɴ���#�BdM�tݛ�ew\u0014z����M!D�Zb\u001d:�^�\u000e\fR\u00183f�Ba���-^-�����\u0017Q��`y�,�\u0019�Y\t\u0002Y��\\�^7�^�\u0017`H��g��\u001d����O���\u001f\u001a\u0014\u0019nK]�.y��\u0015N\u0014-_婺�8�a{�EMnC!\t��\u0017��\u0011���o󃡀p�4S}L\t�I��KuE4�i{�0�1\rR��?P������*�\u0006�RʒQ���eF;�ͫ�δ\u001d\u0006G*T2S� ^r�n��\u001b���\u0007ᭈ�co:\u0014��\u000b\u0019u,��;\u000ec:\u0003c��sL\u0003Ԋ�p�˱)��9zo�S�\u0012��2Ɏ6\b}�\r�\u0017\u001c��ڰ�K��.\u0001\u001f�ܤ�\u0002�1�}�a�\u0000�l\u0007R��‘),�+�\u001b߹\\>�V�\u000f��\u0014�p�RD�.\u001e��\u0012\u0019u��e��Q","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3777c511-6f55-40aa-ab8a-dc41d6d9cc10","seq":1,"duration_ms":101,"bytes_in":524,"bytes_out":12,"enriched":{"digest":"c533409c7f599c8d","strings":["}>}Y!","k7]#%","?NW`","I+6+FO!@","EMnC!","4S}L","KuE4","G*T2S"]}},{"timestamp":"2026-10-14T02:08:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-0LkbWcDLFPN)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d304c6b625763444c46504e29","method":"","user_agent":"","ja3":"","session":"041d468a-8de1-404e-9f99-fc464fb7973b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"88047ee88e97f5f7","strings":["BitTorrent protocol","<-LT1000-0LkbWcDLFPN)"]}},{"timestamp":"2026-10-14T02:06:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0010\u0004��1�!�YX�P\u0003p瞂G���~^+Ĺ.^6A4\u0014�z����\u0005�g*��0�92ьN\u0011�1��^����b�y��쓛��T؋��$,a١�z�nFaPA)h��ٶ�\u00191�\u0004���4[��\u0011T\u0014x\u0012�\u0007z�b%S֯�~\n�\u0016Q\u0002�L6B�\u0012J<��o�\nN��\u0012l#*�f���K+ݘ�\u001d�}\u0011�w�\rc�M@[W�F��S.Fv��\u0004���Y��:�\t�\u00131r�\u0015\n��5��M�\u001fR��x\u0016�\u0003;��\u001b3KE��JGjk&H�w;O��1\u0012���i\u0016i�ӇD�\u0004\"̓�ь���C�9\u000b\u0014�砏�\u0018��\u000e\u000e�9rf����-T�0��ĕ�\u0019�*=]\u0018�myYQƒ%S�\u0011ӂ�!@�`|�0T<\u0019ހ�D��7ڞ���)r�[�\u0005\n�P&�yE��1�d�ܚjF��\u0006��Ɲ�E��J\u0019?\u0011���@�)�>�\u001fr�7�G�8���,\\�k\u00072T�2��zs��@","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"add232a4-c14e-42f3-9235-dd23201bc602","seq":1,"duration_ms":101,"bytes_in":407,"bytes_out":12,"enriched":{"digest":"a0fadcfadf0a083f","strings":[".^6A4","nFaPA)h","M@[W","S.Fv","JGjk&H","myYQ"],"iocs":{"domains":["s.fv"]}}},{"timestamp":"2026-10-14T02:05:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-0LkbWcDLFPN)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d304c6b625763444c46504e29","method":"","user_agent":"","ja3":"","session":"372faf73-61f0-4c79-881c-98c190ae96ce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"88047ee88e97f5f7","strings":["BitTorrent protocol","<-LT1000-0LkbWcDLFPN)"]}},{"timestamp":"2026-10-14T02:04:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����m\u001a2u�9�^�H\u0014i*���P�/�1����\u0018D�`校��\u0010�kô\u0004f��YG�_\u0002���^��\u001a��_L\\�l�Ü\u0006}|i<�\u0012YE��y��>L��\tP\u001aR��\\��\u0002��9���g��\u0014>���(\u0012~��I�\u0014��X��V�\f�EXl��p���h�z\u000b{;���Q_�-\n]b,�L\u0019v\u001a��","payload_hex":"a388fcd26d1a3275c039b95e844814692a8dacb350bf2ffc31bab3e1f118449160e6a0a19dc0108b6bc3b40466f9a85947bc5f0281e6b65ea8ca1a8cc35f4c5c946cf7c39c067d7c693ca912594592bf79b4ac3e4c9e8d09501a52c9ce5cccd30282fa3985afed67bfa2143ee8d8c528127eb19349a114a5e858addf56dc0cf245586cb483708fa2db688d7a0b7b3b95b5fc515fbf2d0a5d622cf44c19761aea98","method":"","user_agent":"","ja3":"","session":"604267b7-9688-4410-8c8b-fe4d4e2a329f","seq":1,"duration_ms":100,"bytes_in":161,"bytes_out":12,"enriched":{"digest":"bea747530c8f86d2","strings":["}|i<"]}},{"timestamp":"2026-10-14T02:03:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT1000-0LkbWcDLFPN)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54313030302d304c6b625763444c46504e29","method":"","user_agent":"","ja3":"","session":"79e8826f-923e-4c03-b968-c5e34da29248","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"88047ee88e97f5f7","strings":["BitTorrent protocol","<-LT1000-0LkbWcDLFPN)"]}},{"timestamp":"2026-10-14T02:01:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�?Φ�(�7풕�α�).����3mC�`�|�����zc\u0016�=�E46��|.�/M�\u0012)���uÌ.�\u0002*�����ò�A��Ʉ�+��g����W�1�\u0018M\u000e��$�s�,8N���O�v߳p�.�X��\u0005����\f��g�\u000f��\u00113�s�O{VmH�{�\u001f\u0012�\u000f��܄\u0003����\u001bv�\u0014U\beJ����\u001c~\u0012^U���Cf\u0005\u001d8�;���V�I�e�r���!\u0012�~iXyɫ���_��Q�\u0006$���޴���3V�X�V\u0018'�\n9��g�qA�k��{\u001d@]�\u000b���+","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"102e8634-8d6b-4ced-8300-be1b61e621d8","seq":1,"duration_ms":100,"bytes_in":253,"bytes_out":12,"enriched":{"digest":"1b0f556bf245110d","strings":["O{VmH","~iXy"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-15T05:38:32.708321+00:00"}