{"ip":"190.166.254.136","total_events":388,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["388 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 82,231 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"82,231 bytes sent","bytes_sent":82231,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T17:45:59","last_seen":"2026-08-16T02:12:02","events_24h":0,"events_7d":388,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"136.254.166.190.f.sta.codetel.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":388}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":287},{"date":"2026-08-16","count":101}],"recent_events":[{"timestamp":"2026-08-16T02:12:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\f�FdK������؆���\u0014ߏ\u001e�ĞEn\u0007�\u0000��S\fB\u0015�Jľ�D>7��O�V��^V�8��w�?,,��S4BK)�i�K]�\u0004�w����\\�聦>��p*��$�,���\u0004�Oln\f\u0007��\u0001O�f*���U��\u0011�Fڞ�\u0000Ѻ���e7N\u0004�@�.q\r%�\u001bV[]���z���/𩫚�\rFb>�>��x���\r*�mN�$>$�L�%��j|�\u001fFfȞ\u0005�A་v8mѦv�\u000f%�����\u0019h�R\u001aU�\u000f(�g����ݲ�\u001aT����')\u0019V\u001bCr�N@����z����_\u001eK�-\u0000\u0001�����N�����\u000b]���\"�ov:���\u001aO�\u0018�I*�H��`=��O\u0013k(\u0004���0v�����6_�ٝ�\u001c�/c���\r�.�B��-�|����j貙�z\u0018{���G�����e;��i\u0012��I��fP0�i�G\u0012?]^�d�R�\u001b�qb���}0~*\u001e쎜�(�Z=,C��\u0015��7#�[5R","payload_hex":"5f1c45c324237adebfb3bb680bd968bc3677d69a51c32a342ad81a4ccf883f3ed6272919561b4372c14e409987e5ff7af1e384c25f1e4ba12d00018f979dbc8b4ebe89ac7facda0b5dddf0b122936f763aa5cdc61a4fe818cf492a8b48fcb8603d92e74f136b28048d89913076cdeeaed3d7365fefd99d9e1cc72f63acd2fa0d8d2ed542b2c82ded7ca2bdb39e6ae8b299957a187b9ff7ab47c3f9b7ea8b653bf1896912f3b849e1b5665030e269dd47123f5d5e85649f52c71bb87162aebce77d307e2a1eec8e9cd528f65a3d2c43f7e7159f853723fc5b3552","method":"","user_agent":"","ja3":"","session":"bd03e839-481e-422a-a6e8-0ca3b49e9ce1","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":15,"enriched":{"digest":"b9d952858928cfa4","strings":["}0~*","Z=,C"]}},{"timestamp":"2026-08-16T02:07:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-1T*ronq(S!bw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d31542a726f6e712853216277","method":"","user_agent":"","ja3":"","session":"54678467-4f86-44e2-ac02-8204a95a45bf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"49c86e233071c45d","strings":["BitTorrent protocol","<-UW1609-1T*ronq(S!bw"]}},{"timestamp":"2026-08-16T02:06:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������2\bY\u0017&5V�W\\��[0��7\u000ela�af\u001c�rc�7�\u000fь����QQ=�r\\\u0003���\u0001�a�V8���\u0000�%�\u000b>�K@��Fd�>��h\u0002\u0015\u0015�u�\u0010x:��/g�v@o�B�u\u0010\fN\"]r\u0017�HX��ߒ�R\u0011�W�Q�\u0007�\u0018�\r��y\tC̭)YnA��Y\"�\n�����ƨcs)�\u0007d��(\u0018���㻦}�Q�s%>Q�̊W�Y�\u0014��\u001a\u0004A-vN��kE\u000b�}�\fPXՕ�TGi�n�+�2H<�J�3��3�\u000bP�՞�hb��H\u0006��ξ����x)\\g�N߃��\u0019ZY9Q��P�@��u�r��A��Q","A-vN","x)\\g","ZY9Q"]}},{"timestamp":"2026-08-16T02:05:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-U4UCYu87D6ey","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d553455435975383744366579","method":"","user_agent":"","ja3":"","session":"5bc4de60-000a-468c-9c8e-e215f54e6e68","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"8d45a88c6286a1cd","strings":["BitTorrent protocol","<-UW1609-U4UCYu87D6ey"]}},{"timestamp":"2026-08-16T02:03:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Mp4��\t\u001d�\u0011�\n�n��;l�\u0012\u001b.pu\u0016\u0007?っ�d:�/\u0007wi��[Ɛ����>�\u0006!�\u0004J\u0001��C%x\u0014�����\u0004$�\u0019m��d\r�Pm\u0005u0t/]�\"\u0010L��jq\u0004�\"=�\"j�7\\�~�e�\u001a�\u001b-��,�eq�%�]�ޏ\u0016r�\u0013A�������D��'��\u0016\"�kIӪ9�}z��\u0003G'�\u0012n��w$���\u001d������)N�����D��t��\u0012�ć�sD�\u001f�=V#�.ogݝ狪p�6�n=�]=\u0011+_���\u000e�kF\u0003�g?Ry����z�J�Ŋ�}ĬW\r�?9̭\u0006D�\u0012D\u0000���ll�[f�Y�C6\u000b�Z�L���\u0006Nj\n��ϸҴ�cu\u0003�c��|\f;�\"���f\u0007����\u0007ϊ�$�\u0002o�F1\n9\u001eY�)YM����n�i̟����1�<�\u000e���O\u001dԓ��æ��C�:�I�/d)�+Y\u0017��[\u001e\"1�4լ%qy\u0000��,��r$\u0013�a�����F���\u001c�`\u001f鎧&ibc��c��\u0017K\u001d����\u0001b\u001a\\q�H7$���\u0003\r4�\u0004�\u0015+��Y��^��%?�3�YC���Mb��I\r\"K\\�n���\u000e�)����g&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c03917c4-17b4-4a4b-b571-f0c4e27846b8","seq":1,"duration_ms":100,"bytes_in":499,"bytes_out":15,"enriched":{"digest":"b6c5b9ac803c4c28","strings":["u0t/]","g?Ry","&ibc"]}},{"timestamp":"2026-08-16T02:02:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-z-WZivjr.MS1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7a2d575a69766a722e4d5331","method":"","user_agent":"","ja3":"","session":"8997a04c-94f7-4b5e-8b56-30f8d60e3028","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"468420487d10d19a","strings":["BitTorrent protocol","<-UW1609-z-WZivjr.MS1"]}},{"timestamp":"2026-08-16T02:01:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"P$\u0002=H� \u0003y\u0001W�4�-85�?3�9+T�;�\n�k�8���1\u001aR\u0013�?2\"ي��ٚ�@\u0013E\u0019F�kf\u0017���@�d�0-\"d�b:�IC\u0002\u0010����m�\u001a�'~�\u001e�������\u001b\u0015º=Eo����\u0003�\u0010�pZ%̀��82�H��z����LLO�:RԊ�\u0016��.Q�rv*����\f\u000e@_h\u0012�6����~���\u0006GL!u�ߣϬW�I\u001fMB��dz8�A\u0012���7���i������\u0019V���N�G��\u0003�\u0004���D\u0000\u0005\u001a�\f|r��2���\r���~�����\u0017\u0011zo�q8��\u0011����\u000bv/","payload_hex":"5024023d48f82003790157dd34af2d3835b33f33f5392b548d3bae0af06bca38bdb89e311a5213883f3222d98afe8bd99aa44013451946966b6617f09a94409e64be302d2264f0623ac149430210b093e1b86d861afa277e841ebebbd6c3cee7ab1b15c2ba3d456fe5cef7b203fb10a2705a25cd80a5dc3832e6489fba7a96aaffe84c4c4f803a52d48abb16b0822e51e472762ad7c1ff880c0e405f681298369aa5bab67ee786e806474c2175e5dfa3cfac57d6491f4d42bac4c7b338ad4112cdfaaa37b7e6c869f49f9dfec2d41956a5e5a34ee247cad9038204938f884400051af20c7c72818132f7fab00d8ddce27ef3f6e1ffc717117a6fc57138a2a211af87e6f20b762f","method":"","user_agent":"","ja3":"","session":"1e941f37-ef08-4aa9-b25d-2ae006b6f449","seq":1,"duration_ms":100,"bytes_in":263,"bytes_out":15,"enriched":{"digest":"1eb6c7327f817e51","strings":["0-\"d","GL!u"]}},{"timestamp":"2026-08-16T01:59:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ysQd-.KQDXqR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d797351642d2e4b5144587152","method":"","user_agent":"","ja3":"","session":"08c73097-5114-4ddf-a8a1-1bf58af321ae","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9d04068bf9cd9b6f","strings":["BitTorrent protocol","<-UW1609-ysQd-.KQDXqR"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:31:50.856509+00:00"}