{"ip":"186.150.146.99","total_events":682,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"682 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["682 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"142,166 bytes sent","bytes_sent":142166,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-18T21:35:45","last_seen":"2026-08-16T00:18:58","events_24h":72,"events_7d":325,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Santo Domingo Province","city":"Santo Domingo Este","lat":18.4852,"lon":-69.8685,"asn":28118,"org":"ALTICE DOMINICANA S.A."},"source_domain":"ip-146-99.tricom.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28118","label":"Altice Dominicana","category":"isp","url":"https://www.peeringdb.com/asn/28118"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":682}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-18","count":73},{"date":"2026-07-25","count":76},{"date":"2026-08-02","count":35},{"date":"2026-08-03","count":45},{"date":"2026-08-04","count":9},{"date":"2026-08-07","count":34},{"date":"2026-08-08","count":85},{"date":"2026-08-11","count":57},{"date":"2026-08-14","count":82},{"date":"2026-08-15","count":172},{"date":"2026-08-16","count":14}],"recent_events":[{"timestamp":"2026-08-16T00:18:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-P(W*.57Pji8e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5028572a2e3537506a693865","method":"","user_agent":"","ja3":"","session":"4115ec52-31e4-4e46-9484-d194f3a55fb4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0d548dd0f1b1eeb8","strings":["BitTorrent protocol","<-UW1609-P(W*.57Pji8e"]}},{"timestamp":"2026-08-16T00:18:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���X��f���\u0012��P䟐�oބ\b�\u001b�\u000f�;���^7\u000f>�W��&'e]��x�H�2r3�ne|�3�\b���{��t�\u0001\u0010��9u \u0017�/}Bue�\u0004T('��\bEbſ\u0005\\c8jp��R¤A{�%\u001a�\u0013��P�L�\u000eh��iu�f�0]��\t","payload_hex":"ade36ad478c6f0a3537e96a20b5b6155a97d95f49827ba1490d2bac86d219d82e26ee16b2c8a8db70a85d665c6929750d0f92a2d416f9103e516820485098cf25b3c07728221e0b94acab768fa1b726e2c798264bb9e54cfd73f5858b83ee49f90a86fde8408de1bc40ff63bbaf2995e370f3ed657b8862627655da39378c048d63272339c6e657cfa33bb08f085be7baf9274ac0110afcf39752017812f7d427565bd04542827fe9a084562c5bf055c63386a708ba252c2a4417b97251a8f138dc450b04cd00e68dbd769759166ed305de99709","method":"","user_agent":"","ja3":"","session":"e59b2378-0382-48d9-a84e-98a0fa30776b","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":14,"enriched":{"digest":"86d3335711b9a960","strings":["*-Ao","rn,y","&'e]","/}Bue","\\c8jp"]}},{"timestamp":"2026-08-16T00:11:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-1BF*1JJZR15m","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d3142462a314a4a5a5231356d","method":"","user_agent":"","ja3":"","session":"f063899a-6b7c-49f8-af58-34c46c904e17","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7fe3709e12671a9b","strings":["BitTorrent protocol","<-UW1609-1BF*1JJZR15m"]}},{"timestamp":"2026-08-16T00:10:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�L�� ���&�כaf�M\u0005C1ċ>��/��6�p�(���&���\t�_!\u000b%�%�\u0001�����8v�N�b\u0016p�<��ۿ��99?��@�9'\r;ِr�(C��?\u001d�\b�c��\u0001\u001b���U�#�|ߔ]��q[�U�BDe���&9�\n\u0013@\t0HJA\u0019j\u0018tRK�\n{\u0011�I4w�=�I�\u000fD\n\u0011�\u0006��m��\u0014����E��l۫�L2ޓ�5G8\u0004\n��a(\u0010��\u0017Q�Y�ۋ���#-������\u00101��8�}","payload_hex":"8c4c89eb2098fda52684d79b6166874d054331c48b3ec6ea2f9db336eb70f5289d86da26b5b1fd09ce5f210b25c4258601a2f9a0b88c3876c94ec7621670ea3ce592dbbfa0aa39393f85ca40f339270d3bd99072b82843eece3f1da508d163fecd011b889bac55f623c07cdf945da587715bca55bb424465f389f62639880a13400930484a41196a1874524b900a7b11f9493477903dfc49ff0f440a11fb06a9e66dd9c614b2edc3ce45c0856cdbaba14c32de93f4354738040a9597612810f9d217517fa059cfdb8bb6f388232dfaa2f8cee0851031ada038d27d","method":"","user_agent":"","ja3":"","session":"42bc0df1-0454-4b02-b5d6-68c7debc11fb","seq":1,"duration_ms":100,"bytes_in":219,"bytes_out":14,"enriched":{"digest":"564a021a8a775980","strings":["0HJA"]}},{"timestamp":"2026-08-16T00:08:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-FrVqE~PFY6Qe","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d46725671457e504659365165","method":"","user_agent":"","ja3":"","session":"e0b053b1-3c60-43e7-a7d2-3bb7f1fa5ad0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"149fb2b4ac1c5634","strings":["BitTorrent protocol","<-UW1609-FrVqE~PFY6Qe"]}},{"timestamp":"2026-08-16T00:07:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���߳\u0018�O�~Y\u0007\u000eT)1�P}\f�=\u0003\u001f;�?(�Ԝ˖\u0006��'�/J�\\��\"���h\u000f`\u0013t��z�c��T�|p��f��+*��h�9�\u000e�O\u0012�y\u0002�\u001d-N\u0000��)���� vX\u001d�\u000ep<�Bw�!\u0014�\u000e�y)�\u001e�+�\u0007��$�7\u001d��s&���\u0019�9�dg��V\u001e\u0001�8I\u0015�l~\u001am�(�zpM��\u000e<�VYO�]\u0016�ї��\u000eG�N��f��\u0011�z���@o\u0000���\t~:�����R��´*�\u0016sut�yѯ�Q\u001f1��\u0000%��\u0014�9�?��KB��c\nE�D��T\u0012L\u0001�/�o8#F\u001aS遌ll7BG'7�s9��V���Ocg͜\u0007���PJ�ꄎ�p��\r��E�\u001b\u0017?Dh��'7u�Q\u0015��r]�\u001dr\u0007�\u0015*�5\\\u0005�\u00194A\u0002�4wPK��1��)#{D�.\u0019�l�_p�N8�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"274d385b-119a-4533-b91c-a23a19a85929","seq":1,"duration_ms":100,"bytes_in":363,"bytes_out":14,"enriched":{"digest":"88759e0edb5dddba","strings":["o8#F","ll7BG'7","4wPK",")#{D"]}},{"timestamp":"2026-08-16T00:06:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ZXvwMffpD*P_","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5a5876774d666670442a505f","method":"","user_agent":"","ja3":"","session":"9f7ca765-f495-4217-90e5-2dbbe35f4fd1","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f7caa9fb546166b7","strings":["BitTorrent protocol","<-UW1609-ZXvwMffpD*P_"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T12:46:01.113417+00:00"}