{"ip":"186.1.93.142","total_events":521,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"521 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["521 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"107,698 bytes sent","bytes_sent":107698,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-16T13:31:18","last_seen":"2026-08-17T00:56:04","events_24h":0,"events_7d":521,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":521}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":479},{"date":"2026-08-17","count":42}],"recent_events":[{"timestamp":"2026-08-17T00:56:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-*6urZ97*(miH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2a3675725a39372a286d6948","method":"","user_agent":"","ja3":"","session":"12bb24b9-553a-4354-b215-b83ebfbfcb02","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"59a1e34099e6010c","strings":["BitTorrent protocol","<-UW1605-*6urZ97*(miH"]}},{"timestamp":"2026-08-17T00:54:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�^����sN}Ik���Օ}V�o��\u0001��~�}�\u001f�\r�p\u0015i�\u001c޽l�($�\u0006;d0�a��S2֊��KZ\u0014i\u0003�aE>�!an��\u0007�—�\u0014\u0010s��s��S�GB���|#Y\u001eΒJ$�,~Z��l�\u001f��Ŕ\u001b�J7�v��a��C5���b��d��\u00129��E��x;@�����^���1\r�;C3\f�ɞR��\u001f�;\u001c8&��\u000fM���\u0004��.\u000fI%���9\u0002��������ƒ)j����\u001d\u0016B\tXŘ�oiF�\u0015��_���2���ƹ\u0002�~�M��rw~�]���\b�v|�\u0014\u0000ޱ�ٞ:h�6#.5ث9b��(I��\u0013?q�\u0010�=�;2eZ'}y\n\u0006\u001d:�\u0018��\u0006�u��A,�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"27e63ba8-9fbc-4df4-b66e-990ad39d2951","seq":1,"duration_ms":100,"bytes_in":312,"bytes_out":12,"enriched":{"digest":"f7362bfdc6cd6b65","strings":["sN}Ik","6#.5",";2eZ'}y"]}},{"timestamp":"2026-08-17T00:53:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-r*M*6WfFslA5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d722a4d2a36576646736c4135","method":"","user_agent":"","ja3":"","session":"cea1364a-741e-4fc9-8241-b5943e0031ef","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"4d9dce812bee7f86","strings":["BitTorrent protocol","<-UW1605-r*M*6WfFslA5"]}},{"timestamp":"2026-08-17T00:52:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"~\u0004��'>\u0000\u001a��i��W�V��}n��R?�\u001e}+������a���y߅�\u0005�\u000f��P�ˮ:�h��\r޽�U\u0000i>�\u0001ۧo>���Gݪ�1�\u0018ņ^\u000b�\u001d���\u0000�\u0016u)����sҡ�\u0000\u0013��a!�Y�-R��\u001e@��\u000fA\r+��S}���GX��\u0017l��\u001d(\u00149������S\n(��A��Z,L�rN�\u0001ګ͝�{\u0018VU���\u0017k\f��\u0000\"Nj�y�BX��|��=k�V�\u0010$\u0018@Y�[Ф\u0005��\u0005��\u0006�gi���^�}&��F�P;+-\n��AL��\u0017P�ն��1\u0017\u000fG�\u0016ͷ�%�F`���v!,�p�߳�7۾W�[�\u0003����%v�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"67aa1ffe-c842-4f9d-a189-c475915b56d2","seq":1,"duration_ms":100,"bytes_in":290,"bytes_out":12,"enriched":{"digest":"e43cac337e427035","strings":["P;+-"]}},{"timestamp":"2026-08-17T00:50:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-jPmbs!_zV7he","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a506d6273215f7a56376865","method":"","user_agent":"","ja3":"","session":"8b6a140f-6e51-4fd4-b4d6-039b9d757613","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"931a88e9d14d4b2f","strings":["BitTorrent protocol","<-UW1605-jPmbs!_zV7he"]}},{"timestamp":"2026-08-17T00:49:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":�|/� y\u001c�f��\u001c�;\u0019B\u00154�!�ԐtX;�N\u0016l(�\u001a�R��j��\"�R��E�=��$3�O������;͏\u001dp\u0012�^\u0017.*����!�R+�>�\ra�J\u001dJYÙ��g��<\u0002��\u0018���l1\u0005�","payload_hex":"3a907c2fd220791cf166f6841c823b19421534f321a4d49074583bcb4e166c28821ab4528ebf6a99c622d952a3d545d13db38a2433f44fb3b58ab4d5c83bcd8f1d7012b85e172e2ad7e3efd421ad522bd63ec00d61a54a1d4a59c399fc7fda6793ae3c02dfeb18d8eb9c6c3105ce","method":"","user_agent":"","ja3":"","session":"80a25cfe-f088-4d52-baaa-e59a40fd085e","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":12},{"timestamp":"2026-08-17T00:47:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Uj8z8k5QVK6K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d556a387a386b3551564b364b","method":"","user_agent":"","ja3":"","session":"f1c9fc7c-da34-4a5d-89a8-f776412a377f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a01fe7d482ce3e24","strings":["BitTorrent protocol","<-UW1605-Uj8z8k5QVK6K"]}},{"timestamp":"2026-08-17T00:46:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0011)��y\u0018E�~�5�� ���>�'G\u0002\u0010%\u0007D�!\u001d���_�JL�u��G|^��F�g%f�$S����\tee\u0007��K@��\u00041d��՝�Ȑ��X�������I;�\u0019\tB�r�zRX�>�\u000f#\u0002W{v\bHA��5\u0001Ԯg0ga�󏃹ᾛ�\u001etx�����\u0000\u0004���yQ�\u000e��\u0001��%�\t\u0001]q�\u000br��\b8��\fo�ъ�|�+B�̅XBi�2~3�d\u000b?\u0002\u0006�<��}&m\u0015�^�\u0017&\u0013�1\u0007I���\u0014�ҁ�-\u0005[\u0019��\u001b\u001e|�q���g\u0003�FM\u00003��-n��SL��o\u0006�����&\u001fAraPZ4\u001b\u0000�ޘ\u0015\t$9��D���؇l��1�9^_o��*����O��)|��%Q\u000f)הM�g��!���?;&���\u001a��dwmi4c���@��aZ�4�M�l\u001f�c��Y��.EL\u0003J�����\u001d����\fǣ�]��/\u001d�L7�3ϵ�\u0018\\#�z\u0004���a���8,\u0018P��\u0018KH�X\u001dP\u0001&\u0000�{��\u001c�\u0019��\\�'Yk����_�o�\b�\u0005��\u001c\u001d���.vS\u0007�\n]qƗ�\u001f\"V������!*\u001b\u0000�g�w>N:\u0019z�\u0016Z�pb?A�h����=�q��\u001e����\u000b\n<���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"673fe37a-b719-4168-bf40-24000ba4b409","seq":1,"duration_ms":101,"bytes_in":518,"bytes_out":12,"enriched":{"digest":"e5a1f170c125db2b","strings":["g0ga","AraPZ4","dwmi4c","w>N:","pb?A"]}},{"timestamp":"2026-08-17T00:45:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-xSCs~l3w6ntR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d785343737e6c3377366e7452","method":"","user_agent":"","ja3":"","session":"d1739ca5-0724-478e-9fee-7e7f1ffbeb78","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"e866d5aac8835401","strings":["BitTorrent protocol","<-UW1605-xSCs~l3w6ntR"]}},{"timestamp":"2026-08-17T00:44:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�@��\u0005\u0002+܅O.ch\u0015nfG�$?��\u0012�9�5^�f\u00115\u0005�15�D,BdhB{α'<�\r��/��\blJ��3��M�\u0005\u0015��.r�Q\u0004<\u000bc��a�<�1��T��\f��k\\\u0004ȝaj3\u0003���\f�h���;���\u0001�\u0006�|g��\u000b��a3��D!�%\u001b�<\u0007_-}\u000b�P�+٦�Ss9\u0015���\u0005�y6o\u001aZП�\u001c�y\b�_��\u0001s","payload_hex":"7fe84086a305022bdc854f2e6368156e6647dc243ff9b512d339e0355e8c661135059f313582442c426468427bceb1273cdf0dace92fedac086c4ab59033cdc94dcb0515efdf2e72f651043c0b63fbb261be3cd331a1a75497de0ca6936b5c04c89d616a330394c09d0cd968f38fd93b9cf8d701f306ff7c67dffd0b9cb36133e1be442181251bab3c075f2d7d0bec50ce2bd9a6ca53733915f6a89c05d879366f1a5ad09fa31caf7908f35ff5c10173","method":"","user_agent":"","ja3":"","session":"22227494-1871-48aa-b3ae-99be2d8d5d95","seq":1,"duration_ms":100,"bytes_in":176,"bytes_out":12,"enriched":{"digest":"4b2a9f3c249ec1e1","strings":["O.ch","D,BdhB{"],"iocs":{"domains":["o.ch"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:29:36.514729+00:00"}