{"ip":"190.166.254.201","total_events":632,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"632 events across 1 port(s)","confidence":"medium","network_type":null,"why":["632 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"132,560 bytes sent","bytes_sent":132560,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T15:27:03","last_seen":"2026-08-15T05:19:02","events_24h":0,"events_7d":632,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4615,"lon":-69.8965,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"201.254.166.190.f.sta.codetel.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":632}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":394},{"date":"2026-08-15","count":238}],"recent_events":[{"timestamp":"2026-08-15T05:19:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u0004쑣\"\u0001���\u001d\u001e��uv�\u0002S9[���wA��&�\u0015�Lp\ne�U���\u0003�ɘU���OX\u0015,��Q�Y���Թ\u001c�$!F��$�\u0014nx\u0011����ѱ�mR�d=����I�\u0001��N׀�\u0019�Bޘ6�\u0007�ʘ����\u0017͔�3�\u0010y�a�����^��\"�}\r�\u0010�H�\u001c��l\f�Ȣ��w���W)\r��C����En(h}�΢ W��\u0018la��!��\u001f��\u0015�\u0017�zV\u000e#5#�^rZC)��\u000f�R�;��\\b\u0004��^�����_Y�\u0019l�o��r\t?�aն/3�C�{���ۼf\u0018]�u����Yy�‡�\u0017�QX+","payload_hex":"eb92ca04ec91a32201b3b6991d1ef7bd7576d30253395beab8e37741e0f7268b158e4c700a65bf55a6acdd039ec998559da19e4f58152cf4ae51925989bbadd4b91ca7242146a7f424e8146e7811b5a1e381d1b1a46d52f1643d95a4b7c549c701efb64ed780cf19ff42de98368407e1ca98a7bfcdeb17cd94d433b51079b26183869ea7c75ea99922857d0d7f9c109648a51cf0f26c0ca9c8a2b7f377aa92ed57290d999343f6f69baa456e28687df1cea22057cecc186c61abcd21d7f31f8acc15f917ec7a560e233523fe5e725a4329c0a90fc152b43bbc8b5c6204d7e55ef5e3c096b33c798c51aae140db9ca22404aea9660dc6a9f25bb6879ea54f6a4b05b030f3a6cee0fe9943eb88fda3fcbb02907ada78293176bc5f3e5f599c196c8c6f93db72093fca61d5b62f33df43e47be0e680dbbc66185dd875a589bc835979d7c287c817bc51582b","method":"","user_agent":"","ja3":"","session":"34d415e2-2e3f-4007-89fe-0f1c247c1653","seq":1,"duration_ms":100,"bytes_in":330,"bytes_out":15,"enriched":{"digest":"0c7bf67c99d74193","strings":["En(h}","^rZC)","x)1v","_>_Y"]}},{"timestamp":"2026-08-15T05:17:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-co3qQ3SeL)~z","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d636f3371513353654c297e7a","method":"","user_agent":"","ja3":"","session":"d17251b4-143b-4594-a6ba-a10be0027e9f","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"af3a99106856e702","strings":["BitTorrent protocol","<-UW1609-co3qQ3SeL)~z"]}},{"timestamp":"2026-08-15T05:16:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�*s8/�\n�*�\u0003=���.���-\u0010��T��]\f΋�i�J�\u0017�;�ži\t�D���}}��5\u001faNn\b���縅���\u001de\u0013l]��\u0018\u000b�\u0002D�j\u0003��#�ߒv*�J�f\u0013Ɯ����C#R�\u0001�����6[�®��\u0014\u0010+��\f�do��\u001e��,�k\u0018\u0019L)U\u001f��\u0004qл��\u001c.�}Ab��k�yͳ���i��� ��ɧ~hU~\u001f�Vu�\u000b��\u0005��H��]יN��ZY�\u0013�O����ZA���,�>ي�M�1<��\u0001Db�ԓNi��\u0004g��\u0000�\u001d\u001e�P�X,Cr�\u0018D���@��G\u001e�t6��5�����s&O%։�cB���.�����*(c�{��3\u00077-��ð+����\u0003:L���wP�!HU���\u001c<5������7��㇎�\u001c�e�\u0002b�9\u0006�A�\u0012:g�V)u\u0006�@-�W����\u000b����\u000e]��5im�\u001c�\u0015<���2�ѲD�R�|�V�\n-�M\\�tX��\u0011���\u0017\u0013h�-r\n�\u001c�ki�nx�3��6\u0004\u00024���E\u0007�U��\u0015\\�\u001b��Јez��\u0005�","payload_hex":"cf2a73382ff20acc2ac4033d8ee0ef2e99f89e2d10cff554c8d45d0cce8bbd698c4ae517b63b82c5be6909df44fce9dc7d7dd2e3351f614e6e08a6b2efe7b8858ea8c81d65136c5dc7dc180bc60244936a03b6ec23bfdf92762ac44aff6613c69ca5b5a0d2432352dc01d5e4f3d8d5365bdac2aeb4b814102b93ea0c8e646fb8c91ea18e2c8d6b18194c29551fadf70471d0bbb3941c2e8d7d41629ace6bc079cdb3fdf7c26995a1dd209394c9a77e68557e1f825675aa0b858b059f8548bdb55dd7994ee3b65a59e0138b4f80f0d5e75a418fd1d52ce43ed98adc4d8a313ca889014462a8d4934e69b8e404679bcb00ea1d1e9a50a5582c43729418448eafce40abad471edb7436c0d535a58ab1dbe673264f25d6898f6342aa837ff32ef699f6e0f62a2863b27bd5d43307372df0c3c3b02b8180e389033a4caeee9f7750b0214855b2f0891c3c35d4f79883e1f737c2cfe3878ece1cf665ef0262f439069641f0123a67ab56297506bd402d8557d8f48ad10b9c8180cb0e5deae835696dfe1c86153c9ebcc03289d1b244c252c17cc556dd0a2dc94d5cd474588d8b118aa3f6171368a72d720abf1cd26b69d36e78f333a98836040234daf1dc4507c1559abb155ced1ba1fcd088657aeba605aa","method":"","user_agent":"","ja3":"","session":"68c521af-aab0-4511-ae78-c793e94859d6","seq":1,"duration_ms":100,"bytes_in":463,"bytes_out":15,"enriched":{"digest":"c436ecdb9fea7b1f","strings":["*s8/","~hU~","X,Cr","s&O%"]}},{"timestamp":"2026-08-15T05:14:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-re!(a7ZABQ0V","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7265212861375a4142513056","method":"","user_agent":"","ja3":"","session":"1a693e33-9c5c-4574-9122-8af8d79851dc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"87bc5d409424eae8","strings":["BitTorrent protocol","<-UW1609-re!(a7ZABQ0V"]}},{"timestamp":"2026-08-15T05:13:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1�0\u0005-��\u0006v���\u0012�q��S>*��\u0007g2�a��u�u��\u0007yK�D������9\u0016\u0005#�\u0003�T�0\u001dE���)�9�]�\u0017S�3�5x�\u0017�,����\u0016\u0003��?\tx�m{\u001e@}LJ���V�t��2h_|\u0003�O�!K&��4f�& �p�����/���V�Z��\u000ek��$�Y�'\u0012\u001evp\r�\u000b����Γ�67�ob�Е.�\r��VO����P�͇\f�(��0\\��I���\u0005���\u001a7�,0L��","payload_hex":"31ff30052de5d20676fda8cf12ab71b6cf533e2ac2ed076732b861ea9375bf75e7be07794baa4493a5848beee439160523ac03fd54fc301d45e7e0c829f339a95df71753af339a3578ac17ca2cba81a9bb160382a33f0978e66d7b1e407d4c4ab9988b56d7748b9c32685f7c03ed4fa1214b26b8bb3466c32620f270c5cce6d9d72fa191e856f05ac0ff0e6baef524db59a627121e76700d830be2e8e993ce93e83637fb6f6296d0952ea20dafa2564fe7e1d6cb50e6cd870ce0288a89305cb19549f8a8fd05c9e0e41a37aa2c3c7482883f20fb1ed981c4fd0b865d4c913a0263655a99f5fd36ec28685203a538dc06737224bba53064f1700bae8783d7f8a7c19219be9a6ecf9621dec1f5f3d954256a8a28faddf2b37bdbb3598fd72190f735fe59a4a4869b89ce0d3cd5c52766027d25d424232ceb9707a2feb18c0127fdb3dab80feffccd6b96e5bafe0cfde77dbcd6b3d7b7dee1728fa6c4fa292a49500e55271ffdc7e8ee2a69dc24b11f8116a7c668af9b5ccda7f1ba9e96f00e024780975753341205b24f3f15e8524442231f0a96cfc862129cc52f8dc5f4d871047a2d901c0c7de9dc4b270435de8d712d0d101d0a0cec532098d49d460d506a7f56df7b45e11ab24e4aa901aa9615c37dd587672af111cb1e62e216ad684c65202e0042585f69aa76ff3b4209bcc1bab5cac54920f43e304cf29d","method":"","user_agent":"","ja3":"","session":"c5a8344a-54e1-4f67-858a-fe08f02a87e4","seq":1,"duration_ms":101,"bytes_in":506,"bytes_out":15,"enriched":{"digest":"25c62104671a9346","strings":["@}LJ","2h_|",")*IP","RDB#","hLe .","BX_i","hLe .BX_i"]}},{"timestamp":"2026-08-15T05:12:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-QeVRKP4NHGNM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d516556524b50344e48474e4d","method":"","user_agent":"","ja3":"","session":"a62976f2-7b37-455c-a1e0-b4e85eaef800","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d6f1297195b5c93b","strings":["BitTorrent protocol","<-UW1609-QeVRKP4NHGNM"]}},{"timestamp":"2026-08-15T05:10:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�� \u0006��>�����o�\u0012��Є\u001e�mo���ݜV\u0004�����ZH���Pc��<��j��ԋ0`V\r߻�i}�#\u000bT\u0014\u0010Ŋ\u001a�Ѝ-���J(#���VE'�\u0002\u0006\u0003/�\u0007��D�3�ڧ���ouj���<\u001a\u001f뫪�H\u0015B�Wy��K�Ԣb?\u0013j�*�@E��^d\u0003p� ��J\u0000\u0000���\u0004e��k0����\u0000����\u0006�d�\"�\u0019\r�_7%�A\u0016�W�/��of�p{�|���;\u000f͂�].]\u0002�/�7�Z�v�ܩ\u001c;�2>��(�s�R��v0\\�^�+]h�\"�X,\u00184��d�����^͠�s��?\u0000\r�w�C�i\u001e��͇C8\u001f\\�l7��`H�+\u001e\u0014�t��䄿�c�\u00143���.X\u001d,�\u000e�7,���pq�J5|S\u0011��CP�4BB:S��%K�H�巌%]�>D�^�[�ӏ\u0004\u001c�ڛ�V�a���.���Wk:�ae}�KX�*\u001e�5[��S��\u000b�\u001a{�\u0006�ApP�6�Xց\\�D\"9-[�\u0007~v���X��.��\u001d��tX��\u00002","payload_hex":"9087200695c73e9df4bdbde26fa812b1add0841ef56d6f909290dd9c56048c88e0c9ce5a48a292a85063dbe93cf0bf6af0e8d48b3060560ddfbbd7697dd6230b547f1410c58a1a99d08d2d83e2a44a28238ba0b4564527d20206032fae0798c3448d33a4daa7b8bcad7f6f756af2f4a63c1a1febabaad3481542af5779f7b84b9cd4a2623f136aeb2af740459fc45e640370eb20cafb4a0000f885ac0465acbc6b30d1fbbf8300938ae7ff068a64e522e1190de35f3725d241168957c87f2f8af76f669a707bf87cbcfe8a3b0fcd82f95d2e5d028e2fd237f95ae576a7dca91c3b87323eafa528ff73975285a076305cf85ec82b5d6899229e582c1834a3b764a9feeda5fe5ecda0db7396d33f000dfa77b643f6691ea7bdcd8743381f5cd76c37b2fc6048aa2b1e14d874a2c1e484bf89639514339aaea02e581d2c920edb372c3c2116b80ba27565e1db97d0f0364872719c0c41aef7bcec41c81e082efe82b23ef9ea947071c84a357c53118ef64350b53442423a53ee83254b8948fee5b78c255dbb3e44c65efe5bdfd38f041c94da9ba556a661caee872e8d82fb576b3ab861657d894b58b42a1eb9355babcb53eda67f0bb01a7bc806d3417050f2368e587fd6815cd84422392d5ba4077e76bc98eb58a6eb2e9b8f1d9afe745888920032","method":"","user_agent":"","ja3":"","session":"f56bf35f-ef80-4a1d-9ba3-2405139e4f0c","seq":1,"duration_ms":101,"bytes_in":481,"bytes_out":15,"enriched":{"digest":"8e083117e28d75d2","strings":["7,]\u0014�#�\u0011�̳Fe\u001b�p���\u000b\u001aM�\"\bA\f�.nE%�@\u0012��g\u001e�t��P!K�Y:�%�B���FVқ�v�\u0007f�s.z�d�\b�\u0018�\u0019g�}�&I�\u000b��Ẻ<�W��\u0015�x�Ш\r��\u0016�!�о1%JlPE��rD��OQ#���9�m\u0005-�\u001a�\u0004�\u0010\u0001\u0016\u0016���G)�\u0012|(\u0005R�74N���ſM�D�{�v\u0004�����|ɽ���i\u0006(ėnܙn�\f�\u001d��\u0013��\u0000�ɵ{#�٪/y&��N[�\b\u0011Ql��9'��9&3U","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"48b97867-43d8-4849-96cb-9b979d8066a3","seq":1,"duration_ms":100,"bytes_in":319,"bytes_out":15,"enriched":{"digest":"cbaef039ea504922","strings":[".nE%","1%JlPE","9&3U"]}},{"timestamp":"2026-08-15T05:06:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-8s~mAHvm21Dv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d38737e6d4148766d32314476","method":"","user_agent":"","ja3":"","session":"14aad0e7-2892-435a-ad58-7d3dfd380997","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"eed5a6ad99134a50","strings":["BitTorrent protocol","<-UW1609-8s~mAHvm21Dv"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:31:50.202477+00:00"}