{"ip":"186.33.77.90","total_events":68,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["68 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 15,471 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,471 bytes sent","bytes_sent":15471,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T20:36:36","last_seen":"2026-08-17T22:06:36","events_24h":0,"events_7d":68,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":27887,"org":"WIND Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27887","label":"WIND Telecom S.A.","category":"isp","url":"https://www.peeringdb.com/asn/27887"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":68}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":68}],"recent_events":[{"timestamp":"2026-08-17T22:06:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-gYEdinENHMpw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d67594564696e454e484d7077","method":"","user_agent":"","ja3":"","session":"ce913f42-498e-465d-aef9-540690fdfcba","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"15cbd8ac966285fb","strings":["BitTorrent protocol","<-UW1605-gYEdinENHMpw"]}},{"timestamp":"2026-08-17T22:05:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":�E\n��Rx��o3�_Tڬ��ͦ,\u001do���N\u000b�\u0005�x�\u0018�-��P\\�t ���e� ;\u001a��\u000bGX\u0003A�.T�H\u000eZ��G(c\u0007АH�f�<U�k���^�����F;kZ\u0000�<�eD�\u0006\u0006�\u0001M�uJFZ\u0006���F��nC\u0007���ֺ���\u0018����h Up�B�\u001d\u001ez� ��su`\rxB�Q\\ b ��HI�ց����4�I�{5>�`R�\u0013\r3�u�5d)����\u0000 )³Ͼ\u0005��k\u0015��J�\u001c%\u0015�ǆK��&`�;[�5C�6\u0003���z�?��E6[ܾ�q�C��\u0010����?~\u001d�u\u0004�VgZ)<*�\u0007\rN����J��)f=?\u000b��QR�����\u000e��;\u000b>4G-�L\\�Rڄ�/`���-DB\u0005�e�b\f��+&��\u0004�)�\u0003�#\u0001�]�s�\u0016��S��W����i��P�\u000b$��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2894c7b1-104e-4b7a-b985-8487e9e6c230","seq":1,"duration_ms":100,"bytes_in":364,"bytes_out":12,"enriched":{"digest":"08749d97ce4ff6ce","strings":["F;kZ","uJFZ","h Up","Q\\ b","VgZ)<*",")f=?",">4G-"]}},{"timestamp":"2026-08-17T22:03:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-U1y3wJk6ObJf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d55317933774a6b364f624a66","method":"","user_agent":"","ja3":"","session":"3987dec1-ed41-4523-a31c-d302244a7006","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b82825c66ad21d96","strings":["BitTorrent protocol","<-UW1605-U1y3wJk6ObJf"]}},{"timestamp":"2026-08-17T22:02:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�C��NS�iR�>\u001d\u0010l�Y\f\u000f��cY�]f�\u000fJV���/�\u0003A����Ew�QQ���PFȲ)��'����Ƥj\u0015V?�\u0010O�3��ow&r�\u001e?��Va�w\u0019�\u00146���ay�\nU'�\"4V��U~�&�\u001e~�]���4����\u00043���\u0014��#%�#\\�0�B\u0002z`��|�Z�ܬ��A2--v6��ux��P\u0013�>��Q\u001fK��Ǫ9\u0015��\u001eF�d/)\"�2�q)����I�M<\u001cw�^\u001fuYW���n\u001e�$�O�R�ks��\u0000�N}̚��s(\t������\"\u0006�N�H��\u0002�M׍�\u0010�\u0000�s�2�k�\u0016ED\u000e�D�J�=\r0:\u0019�F�����u1;��\u00195\u0014�ܐ�4��c��RO\u0002�Qq\u0002y�\u0017��\u0019}�\"\u001dwڞt�a��=�Q\r�<G�\u0014z^.��UfB��ZZ��Ҷ\u0016�v�\u000b&\u0001���|���e5 \u0003UzY\u0010���\"��?��-3vu6��pһ]�\u0013�]L�ik����\u000e:�灡�\u0016$sx��\rG�lL�i\u0015�g��\u000e�\u0019H\u000b��saQ��l�j��\nz��\r1>�)�\u0003՝\u0019A�x��F>�\u0010O��ؚ>쿃��w�\b\u0019�\u001dP(�﨡��h�5\"enͭ��Ʊ�z~�-,ˬ+�C�\u000e֏�`\u001f�n��\u000e�\t��s�T5�?F���z�k�vc0","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c95ed8c4-0896-4d08-936a-c48035ca92cd","seq":1,"duration_ms":100,"bytes_in":558,"bytes_out":12,"enriched":{"digest":"7455369d5fb882d0","strings":["ow&r","A2--v6","d/)\"","-3vu6","5\"en"]}},{"timestamp":"2026-08-17T22:01:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-vEy7bpwEkqYc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d76457937627077456b715963","method":"","user_agent":"","ja3":"","session":"f8ee1fa8-95cc-4ecf-9b85-0d62a50554d1","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"bf6682bbb1de18a8","strings":["BitTorrent protocol","<-UW1605-vEy7bpwEkqYc"]}},{"timestamp":"2026-08-17T22:00:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0019��t�NG��x�\t{�:�AU�YJ����},.��w�\u0011��\u001a\u000f�����*�e��H�\b\u001cC�~�\u0001\u000ej�=\u0014R�~\u0004!�G��w��¢\u001cB�ڭ�h\u0010\u0006��6��\b\u001d�\u001a<.ް��}��\u0016���>�䑒\u001cKwF�; \u000f9��\u0019�8{�`��JJiY��ucܻ\u001c�,��V\u001e\u000f-\u0013��\u0000�[�����[\b��\n�s+e?d��","payload_hex":"d0df19969274ee4e479d8478d1097bf53ac64155eb594ac6faf5af7d2c2ec1f6778a11bd7f8f1a0f90ffb7e8b62af365e98248f8081c43bc7e8a010e6ae43d1452ef7e0421f247b79a779c87c2a21c42e4daadc06810068cdd36e5c1081d831a3c2edeb0fcef7d82ee16f3f1b73edee491921c4b7746b53b200f39e4ea19c8387bf060fcb44a4a6959b1ca7563dcbb1c932c8de9561e0f2d13f1b500aa5bf9a3a5f4875b0895e50ada732b653f64e9a6","method":"","user_agent":"","ja3":"","session":"9687f416-601e-4678-a6a0-3c5daff209de","seq":1,"duration_ms":101,"bytes_in":176,"bytes_out":12,"enriched":{"digest":"c54b1f4daa7b91e1","strings":["JJiY","s+e?d"]}},{"timestamp":"2026-08-17T21:58:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-oHZ)dzj2oa_q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f485a29647a6a326f615f71","method":"","user_agent":"","ja3":"","session":"f694bb61-75da-41d8-abbd-efe890c6704b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"cf722abb13048392","strings":["BitTorrent protocol","<-UW1605-oHZ)dzj2oa_q"]}},{"timestamp":"2026-08-17T21:57:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��Bِ�\u0005\u000eg�d�6�/~\u001c�\u0001%C(�j!)!����k�MQ1q�\u0010�u{\f��-@;�\u0000�T#��f����A���塟���5��Eq\u000f�\u0005��ۭ��uZx+����Ǽc�\u0017\u0017`\u001dsT��4̺\u0019��p\u0006?\u0000���.��<\u001f`V/\u0017���BL��Kq\u0015��!.��z3\u0007��5�H�\u00104��r��+ͽ�����$�뷊6Ӿ�}�\u0019�����\u000e\\���\u0011x\u001a�\u0007\u001ey�F?\u000es�I\u0003��$�Ao|]%+>�\u0002\u0001�Aײf;\u001d#EuY@�Hamt�\u0002O73�\u0012BT��Z�l��o\u0010��-_6�ɺ\u0015\\�y(L\u0006��2\u0003J:gƒWك�|��}�_\u001c2��t��\u001c\bW���C�\u0000�����\u001d�\u001d���䗮\u0011k�3���-��-Y��� e�H�q�t�Uz���\u001f\u0014�Z��\u0003����ر$�W�\u001b��\b%�\u0010���\u0005hM���h\u0018�f2i(N$aM�R\u0013�\u0019*��,\u0011i+�\u0000��\u0016\r#�!\u001b���VS�))�\b&�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6c770fbb-fc91-49e8-8cde-d9f2dd4b40a6","seq":1,"duration_ms":100,"bytes_in":424,"bytes_out":12,"enriched":{"digest":"17bbad80d80bb783","strings":["j!)!","MQ1q","uZx+","Ao|]%+>","#EuY@","Hamt","f2i(N$aM"]}},{"timestamp":"2026-08-17T21:55:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-IffGyA)LRrzS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d496666477941294c52727a53","method":"","user_agent":"","ja3":"","session":"12ed77a1-87f2-479d-a4ca-b613980038f3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c223476770a9a863","strings":["BitTorrent protocol","<-UW1605-IffGyA)LRrzS"]}},{"timestamp":"2026-08-17T21:54:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013](}˟��s�\tm\u000f��]�~��\\������w����<Od1�ij��\u0001�N()\u000f�2QmE��Y�wȂXIU��\bd�R&\u001cw�\u0017��������\u0006rӤk��r��fj\u0012��B��[3�2C\u001d\u0015\r�\u0014�O�Tw���\u00179,����?����?�ho�rj\u001cb�\u000fY�6i\u001f��3����ո���;:�L\u0014��\u0014���v���7w���r|��+\u0017/��`\u0019���\u0001+�\"�\u0006�X/F�&܉Q{n\u0012�j���a�å���y\u0002�r��C�\\�u�E`�_�\u001eo���\u000e�m�/!M�m��\u0014��\u0005L�SF�2\\o�H\f�^\u0003�퉞y#T�nI\u001364�8 \"A^5���\u0012����xF\u0004�M*'H\u0019�g�1%�\u0016gZ������|�8֛\t�L�\u0013����X�n��\u0007�\u0003��\u001b0� \u0010\u001bn����\u001b��l�E+.�2\u0012c\t\u0019x4\u0006+�v�i��ܩ���g�<\u001e���+��k��\u001c��(�b�G}��L�4*1Y�d\u001c�������K2l�\u0012�1�P\u0018e�?\u0001\u0007�Zag�3\u0003��I��","payload_hex":"135d287dcb9fabac73bb096d0ff4965de07ea3d15ca8e5f591fcbd779390e3ff3c4f6431d5696ac4dd01b24e28290fc832516d45dcf759ce77c88258495582c00864b952261c779817a096f7dfebc6f9d90672d3a46b9a8f72e885666a12d6c6428bda5b33af32431d150d9f14d04f9d54778ba8b017392cfbeef2b13ff1bff4893fab686fa3726a1c62830f599836691fc7f133b1ebe2e7d5b8f2a7ee3b3abd4c149df114c5dbd376feded037779d84a2727c86f22b172ff7966019f89782012be722eb069c582f46e626dc89517b6e12c16af7b6ef6183c3a5aed9dc7902f672c5ee43be5ce075bb4560e25fe81e6fe7e6af0e9b6db52f214d816da2ae14a3dc054cab5346cc325c6f89480ce05e038ced899e792354da6e49133634c7382022415e359ebda912cdef99ca7846048b4d2a274819c467fb3125ab16675aafe5e480ceec7cc038d69b09ed4cd913e6c4d8ef58bb6e9eb8078103efdc1b30d020101b6eaabcbcfb1be2ab6cc2452b2eb932126309197834062bc676bf69d6dddca99cf58d67883c1ebdc1fb2bbfeb6ba7eb1cbcac28d762aa477da8d84ce1342a3159a8641c92a693cbf9b6d14b326ce612c731a1501865833f0107965a6167bf3303c5cb49f2ff","method":"","user_agent":"","ja3":"","session":"cdb81c92-216b-4419-a0f6-d4bf91eae38c","seq":1,"duration_ms":101,"bytes_in":455,"bytes_out":12,"enriched":{"digest":"b42558f410add38b","strings":["<Od1","2QmE","8 \"A^5","M*'H","4*1Y"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:30:06.872510+00:00"}