{"ip":"186.33.72.142","total_events":129,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["129 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 28,085 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"28,085 bytes sent","bytes_sent":28085,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T01:02:36","last_seen":"2026-08-17T20:34:51","events_24h":0,"events_7d":129,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":129}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":129}],"recent_events":[{"timestamp":"2026-08-17T20:34:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-8Iv)4HcZlthV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d384976293448635a6c746856","method":"","user_agent":"","ja3":"","session":"a4a3c84e-165d-42ff-8f13-de464b4b702b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d0887a93ff7f46fc","strings":["BitTorrent protocol","<-UW1605-8Iv)4HcZlthV"]}},{"timestamp":"2026-08-17T20:33:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E�&]p\u0015�\u0011vε2/\u00068\u0003��K\u0011L5�\u0011��2\n*\u0006�\u000e6\u0010\u0002\u0017\u0004�g���̿kP_�Hۄo�&Ë��H�����a�����\u0000�u�cOY��\n�&Ǎ�U\u0007)n��/�q�-T@��\u000ft��CS�\u001082���<Ζ�9�~G1SUR�72���d�%>���r�v6L+\u0015�\u000e�����6v�Z��1�?��\u0016~���Of�\u0005�x��v\\�J.2C����\u0007&�\\r�]*\u0010�&\u001d\u0001�\\�ʷCCgd�G�2Kw��^�5��\u0006���\u001e�ɫ2�Ȁlf�%\u001fN\u0019��_�\u000fhΛ]�\u0013\"�9�����\f�1\u0001����\u000b����c\u001c=7\u0006���\u000b���\u001bæe�v","payload_hex":"9245e8265d7015a11176ceb5322f063803a3c34b114c35ed11d4f9320a2a06c60e36100217049c67a7e0b8ccbf6b505fe548db846fa226c38be99848b0a1b2c1bd61bbcbfcf08600ae75d9634f59a2bf0aea26c78dca5507296ea7a52ff371e92d5440fcd50f74ba8d43538610383290f58d3cce96d339c37e4731535552eb3732fddfc564a6253e91e6a972e276364c2b15d20eaea9b394fe3676f15a9bd131d13feaae167ea5f3b44f66c105db78a1b0765c9d4a2e324387b2bdfc0726ce5c72c95d2a108a261d01c35cf2cab743436764f24797324b7781e05e8e35e78c0696a4d51ef9c9ab32fbc8806c66d3251f4e1991c15fa70f68ce9b5dd613229a39c8ffabc7ec0c8531018f8fc8f50bbef2e893631c3d3706819cbe0ba1b5821bc3a665a976","method":"","user_agent":"","ja3":"","session":"3f8382dc-613f-4ccd-a56f-8b4d924576be","seq":1,"duration_ms":101,"bytes_in":292,"bytes_out":13,"enriched":{"digest":"37d11596e26a069e","strings":["~G1SUR","v6L+","J.2C","CCgd"]}},{"timestamp":"2026-08-17T20:32:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3jAvudrW0nIY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d336a417675647257306e4959","method":"","user_agent":"","ja3":"","session":"7aef2d1d-19cf-44f2-859c-6cb9e87612b3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c4ca4b3a85867712","strings":["BitTorrent protocol","<-UW1605-3jAvudrW0nIY"]}},{"timestamp":"2026-08-17T20:30:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ȁNyû+�j��\u001cc&�#��8�V\n��Je�Ȯ�\u0016�UYq\u0007�\u0013m��¯�\u0013���EWe��\u0018*k��&���7�y���&�{̀e�@���r�S��YH9ѥ���\u0002@jd�c���\f�\u0002\u000b��\u0019'�Г�^��\"�\u0007t\u001fT$m�2�l�\\�'\u0003�c���-B��]�L��$ij�<������<[��LW�\u0005��YǠV\t��H����y6H�j�8ȫ;B\u0011���\b\"���Ƭ��5�\u0007�y�e�t��\u0005\u001by*�%?%:a|��N��\f�e\u0014�|Yq?�\u0011�Z\u0006!�}����=�\\�O\n\u0014RQ6�\nT�jk�lRw�x�\u001dސ�x��#�\u001c��gQ��\u001c��qZZ���f*��\u0000����@!���\u0019͆�S�3K�NG��A�߈\u0002,z��\rŁ�t��\u0012ڂ�t=V��E�>[A","payload_hex":"8ec8814e79c3bb2b986afbd41c6326f223b4cd38fd560ad6f24a65cdc8ae9f16f055597107b6136db9bfc2afe513aafba1455765f4e8182a6b87e726cededc37aa79e79ffd26977bcc8065fa40a5b0b472a853e4c9594839d1a5eef1fa02406a64cd63f384c40cb0020b97c01927ddd093ac5eb29d22ff07741f54246d8d32a26ce25cea2703b063eff5d72d4282e85db94cf59724696a933ced8ef181cfde3c5b95c34c57ba05a4e359c7a056099ac348eca7c0b9793648856a9f38c8ab3b4211acabac08228aa5cec6acfebb35ee078879de659974a38e051b792ac6253f253a617ca3c64e93e20cce6514fb7c59713fb011bc5a0621da7d9085fcea3d875c904f0a14525136f90a54996a6ba26c5277ac78901dde90de78bef323d71cdecc6751fdf71ccfc7715a5a86d8e2662ac19b00f2f0f3b84021eea5da19cd86ff53fb334bf94e47f2f1418edf88022c7affae0dc581e774bfd812da829b743d56fad045c73e5b41","method":"","user_agent":"","ja3":"","session":"e6a991bc-315e-48f9-a14b-4161d140b065","seq":1,"duration_ms":100,"bytes_in":358,"bytes_out":13,"enriched":{"digest":"7808d7c162e12df9","strings":["%?%:a|","|Yq?"]}},{"timestamp":"2026-08-17T20:29:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-j_KLwiGdP1lZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a5f4b4c7769476450316c5a","method":"","user_agent":"","ja3":"","session":"1c84f23a-8b5c-4934-9bac-39d0c6ee6240","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9592a2589f0dfbb9","strings":["BitTorrent protocol","<-UW1605-j_KLwiGdP1lZ"]}},{"timestamp":"2026-08-17T20:28:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"S��˲�d\nC�X\u001fT�?k\u0003#�.��%��/���\"�Ґ@\t��ĵ\u000fnr�.flH�(�P������\f\u0007�t\u0011��%/�Aӝ���y�,���Z<\u0017A���s5�\u001aV������\b�X\u0015,��1Ic\u0014ޜXu.�p��5vl���3�SN�L�","payload_hex":"53d4facbb2bd640a43b6581f54eb3f6b03238c2e9ec2259db82fa9facc22e8d2904009c9c8c4b50f6e72c22e666c48e128b950f7869fe7a9db0c078e7411b99a252f8941d39db49a9979ad2cf2e2a45a3c1741849c9c7335bf1a568ac09eb9a49708ac58152cb5a031496314de9c58752ec77098c635766ce4f88933d7534ed74cc1","method":"","user_agent":"","ja3":"","session":"1f2c7868-97a9-466a-9280-b0aad5e015a2","seq":1,"duration_ms":100,"bytes_in":130,"bytes_out":13,"enriched":{"digest":"0b8f2f634cf563b9","strings":[".flH"]}},{"timestamp":"2026-08-17T20:26:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(o)YLy!.E2~a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d286f29594c79212e45327e61","method":"","user_agent":"","ja3":"","session":"656169db-4144-4f94-a0b1-f0c4b2d6beca","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"59984c61cdc35ebd","strings":["BitTorrent protocol","<-UW1605-(o)YLy!.E2~a"]}},{"timestamp":"2026-08-17T20:25:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"/�\u0000ٺ~�,�\u0001'\"\u0005ŀ�W�4����^:I\u0005�\"/�J�~S3M�}�J'����Z\u0006�#��S ��L�������6�KI�\u0014���>keFH;�D��@����\u000ej�E]>��i8���\fs��h��g�A|,\u000b;�m,�>�&�$��x�$��.oI8��`\u001b�,!\u001b��i�PQLω\f�$qѕ\u0014|U�\u001c\u0007o��\u001e����x�n�x=�5\u0001����~�q��Va�^���7�Mڬ5ܓ�,��m_\u001e�Qˆ �]�����*��<8.)�P�8���`Y�׽��U�����$��K�a��\u000e\u001c�T�oqͿ��O�G�֋�%E\u0019�\u001e1�M��U�M\u001eW˓�=#;��/��㧗qk�V��\u0012��\u0017�wm٠�S}ږvF\u0019�R�X\t","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"663af7fa-84fd-4ee6-b5bd-d7983277890a","seq":1,"duration_ms":100,"bytes_in":340,"bytes_out":13,"enriched":{"digest":"b87e4e8bbe433176","strings":["~S3M","eFH;",".oI8","<8.)"]}},{"timestamp":"2026-08-17T20:24:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-bN*mYVml8Zgr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d624e2a6d59566d6c385a6772","method":"","user_agent":"","ja3":"","session":"581de04b-faf6-497d-ac60-753b4a0b916d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"73c369de7bf8f9ec","strings":["BitTorrent protocol","<-UW1605-bN*mYVml8Zgr"]}},{"timestamp":"2026-08-17T20:22:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"G�\u001d�N��AM|�A�$��]�U�`���C]�ǿ��G���\u001f������\u0019�\u000fx�u��\nG��\u0017M\u001c�s\u0001[�O/�\u0018.�\u0014E�\t�SAH�����w�'�\u000b���\n\u0007\u0000嵧�K\u001c���ق��\u0000�we�A���{��~��v}~\u001aϳ\u0018�%w�W�-�sL���-�c���F6�n����40[+0'��{x}\u0005X�\u0010���ж�9k�@���s�d��;xXge�?\"�ƟL�L9%y\u0010��6�W\u0002��*[{ێ�\\tu=��\u0004R��ץ�|nwMлUP\u000f���i�\u000elhObE\u000e4k\u00074mQ�t\u0006f�wfn��]��\\a����\u0007�݀q��\u001a���dă�\u0007)/c�����~�U�j��>\u0007=qp*�]}��Y�g\u0019�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c15a6bc3-93c3-4d65-9852-44b5ee2f40d2","seq":1,"duration_ms":100,"bytes_in":329,"bytes_out":13,"enriched":{"digest":"b86396844254845d","strings":["40[+0'",";xXge","L9%y","\\tu=","|nwM","lhObE","=qp*"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:30:08.137925+00:00"}