{"ip":"186.33.103.186","observed":true,"total_events":412,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["412 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 86,206 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"86,206 bytes sent","bytes_sent":86206,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-09T17:11:28","last_seen":"2026-10-10T02:39:08","events_24h":0,"events_7d":412,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4829,"lon":-69.8964,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-09T17:11:24","last_seen":"2026-10-09T17:11:24","recent":[{"timestamp":"2026-10-09T17:11:24","port":39131,"src_port":55214,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000K�7��|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"41004bc437b1a77c0000000000000000f6ba0000","sni":"","session":"daff4e7d-08ee-402e-b3fb-a2fa919e1175","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":412}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-09","count":299},{"date":"2026-10-10","count":113}],"recent_events":[{"timestamp":"2026-10-10T02:39:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R,ۺD��\\�a�+��*�D\u0015ON�H�xd\u001f7tc�Wb�\u000f_��҂j����M �\"�ZX��\u001c\u0001�i��m������&\u001d\u0001\u0017���\b\u0015�b�������\u001e��*��Z\u0001�>�\u001aB��!c\u0018�\u0012I\u001ba~�#�\u001bN�����(��\u0011zYm\u0016K\u0010�u˱�\u0012�ư��(�\u0012\u001e\t��=�<\fy>�Pqy\u0011*���\u0006�j�P\u001e�\u0018��/\u0007e->\u0016}\u0007�G|\u0014�W�)z�j\u0018RA�)��\u001e\t�B\t�ٻ��[\u0016i�R\u0000\"\u000e�9Sf�g<��l�(�w�\u001cx���;S'\\f~\u00059�N���+3��*�PE�\u0019=�kn�|\u001e���A��\u0001�QY\"82�C���\u000fO\u001d�\\�g�ގ�\u001b","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f1509ae5-ed93-4558-821e-148d85dc02fe","seq":1,"duration_ms":100,"bytes_in":295,"bytes_out":14,"enriched":{"digest":"6b70e8d495aa7678","strings":[";S'\\f~","QY\"82"]}},{"timestamp":"2026-10-10T02:37:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-j9kuTD0cJOcF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6a396b75544430634a4f6346","method":"","user_agent":"","ja3":"","session":"c97c5172-9fac-4dbc-84a4-a4d71805997b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f89fb132dfdc07df","strings":["BitTorrent protocol","<-UW160N-j9kuTD0cJOcF"]}},{"timestamp":"2026-10-10T02:36:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"`]��\"i�8׾#E1�p�ͺ�nG\u0002�_�`�\f�G�\u0018�D�z\\�̘2�;�1\u0017I-��z�h�\u0005ld�����ޛ�MF[R����͕ԯ�8.b��eЕC�\u0013ҵ��V.\u000e�^X���%(@�9r�e\u001f\u000fU\u000f�v\u001dn\u0018����=eϔ%To�\u0019\u0011ɜ\u0005\u00143E&�\r\n\u0001D��瘣߯_nA{�П/-�\u0011\f�aͥ��EB�f��/�*�П6�'\u000b\u0019�\u0014�=�1 K?o�V\u001ay\u001a\u001eEB3,~�lV�\u001aœ�d����ۋg\\����+�e2\u0002*�CL���c�M���`�V�����^��?b��P!H\u0004��\"�_�\u0005~I:��գ`����\u0007���\u0012�Ļ���\u0011�\u0013���\u0000؍+�\rY=�\u0013��\f��M���3��Ļ�V��̄\u0010�*#��2\u0011����S�\u0003\n\r���D˕é���i�\u0002X��\u0013� >�i���ky���\u0007�X�{3�ɵ�1�թ���q~?�ߪmPe'f��\u0014��|h��\u001c�4���6��hv����\u0001?|�A\u0019\t���[G\u0004���F�]�\u001b�9Vi��Иv�̭��\n�m7��]J�E�͘\bX��м�aoE��fIg)~�&�R\u0007����e\u0005��\u0005��z�v�*,v.������/Q\u001fk\u0012��euj�h\u0013�`b\u0004�\u0018B�]�J{E��M�\u0006ؤV�<��T���\u0000 ���\u0001�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"da04edfd-7413-4cdf-bc41-194423ed4038","seq":1,"duration_ms":101,"bytes_in":432,"bytes_out":14,"enriched":{"digest":"63ece921e3a63cd5","strings":["t-xh","mPe'f","fIg)~","*,v."]}},{"timestamp":"2026-10-10T02:26:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Or3yJHDppobJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4f7233794a484470706f624a","method":"","user_agent":"","ja3":"","session":"4a418e85-48fd-4438-97ef-60ac1bb4b7f9","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1c7776afdfaaedf2","strings":["BitTorrent protocol","<-UW160N-Or3yJHDppobJ"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-15T05:38:40.876422+00:00"}