{"ip":"190.80.218.197","total_events":327,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["327 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 68,199 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"68,199 bytes sent","bytes_sent":68199,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-20T17:10:21","last_seen":"2026-08-21T00:31:15","events_24h":327,"events_7d":327,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4829,"lon":-69.8964,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"197.218.80.190.m.sta.codetel.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":327}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-20","count":304},{"date":"2026-08-21","count":23}],"recent_events":[{"timestamp":"2026-08-21T00:31:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�yIзA\r��� \\���\u0007lV���¶\u0016��d��.#�K\u0018j^�^���|�Z?,\u0015l����\u0002����}�H\u0016�4V\u0010?\u0014�ž&��&@\b����\u0003�\no�E���$t\u001bO�8�+����\u0007am���XC�Mb�c�f��;�+[�h�ȍ�֣���y��OfSϬ-�7��sg+��C��\u001b��~&xJ\u0017-)�g\u0002���Jd��\u0007RA�\u001cT'ݱ���KF�\u0012�lR<��wH��w�����op`�X�����|�=I���$�Л\"E�ލ��C��b#�� \u0004/j��;Y��\n�SluV0kP�X2N����U֎l�Vq��k\u001b\u0013�|\u001f��\u001e\u0017\u0005'�\u0014UE�\u001djQ#s����.�*���C�\u0004�H\u000f���%�\u001d�\"\u0010��SR��\n��P\u0019\u0005�ȝ���\u000f��\u001fF)�?�\u0010h�\u0000\r*�g���@���\u001f���3�~�\u0005\u0010�;^ŝ\\","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"81218f70-ac39-435c-9569-675b4f83f923","seq":1,"duration_ms":100,"bytes_in":382,"bytes_out":14,"enriched":{"digest":"5a313d0234e84ee0","strings":["~&xJ","SluV0kP","jQ#s"]}},{"timestamp":"2026-08-21T00:29:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-uC9wyupgwtRO","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d75433977797570677774524f","method":"","user_agent":"","ja3":"","session":"af26c9d3-28e7-41dd-947b-f00152c6e820","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"190cd22956c923d4","strings":["BitTorrent protocol","<-UW1605-uC9wyupgwtRO"]}},{"timestamp":"2026-08-21T00:28:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�݌�&����-����nM�\u001e�\u0011�Etb4����\u00187�\b���\u000e��vea\u001e7���Y��\tn��-��!�]\\��^\u0015;��4�m\r��J-:����\t�Ǭ�&���\u0005c��\u000f̕�Q�]�%���n����^��]���׆�J��}����Ċ��gKʴZ\u0016�\u0014��qT���T\u0018P�y��H�\u0019(�����","payload_hex":"b8dd8cc526bdfb84952d88bfa8826e4db61e83119745746234fafbeadf1837ec08ae9bf50eb2bf7f7665611e37e4f1db598e9a096eb3962d829821d15d5cfeb85e153bb68d34866d0df08d4a2d3ae6d8f59c09ebc7acc9268c8dc50563bc970fcc95e851825dfd258ba18c6e98e3f08e5eb79d5db3d4f0d786b34a9e9b7db6e1e0ffc48af896674bcab45a169814be9a7154be87895418509479cdf4488f1928aee0ee88fa","method":"","user_agent":"","ja3":"","session":"ea7b24ab-f4fe-4d54-aa57-83b1cd2d32d0","seq":1,"duration_ms":100,"bytes_in":165,"bytes_out":14,"enriched":{"digest":"22e69716738bc655","strings":["Etb4"]}},{"timestamp":"2026-08-21T00:27:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Y97VDP3TaGZ~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d593937564450335461475a7e","method":"","user_agent":"","ja3":"","session":"7fb32b92-95af-430c-b24f-ee31fc9f2de9","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7715fc339ea3160b","strings":["BitTorrent protocol","<-UW1605-Y97VDP3TaGZ~"]}},{"timestamp":"2026-08-21T00:25:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%5\f�kg�\u001b��_�5[i�(\u001f��\u001a<��YU\u001d�ܼ�B\u00060���_Yx\u0018����׳�`�_\f\u0019b��o��^HL�����X$\u0010\"{���E �{{�\u0018�n�`\u0007# �؇i�4���b��8�I��a\u0014+�\u0019K�f�\u0018��A`\r�a#�\u001bl����\u001f�\u0018n�\u0006~�M~�=��K@a_�\r�\u0005�c-�","payload_hex":"25350cc36b67ca1bbce25f9c355b6997281ff4861a3c9dda59551db1dcbce94206309effd45f59781893839a89d7b3c560a75f0c196285916ffeac5e484cb8dce3c5fa582410227bf1e7eb4520877b7bb0188a6ee560072320d3d88769d534cbcbf96282a038c349a8a161142bfc194b8066b118cbd841600d9c6123ae1b6c8f8694af1ffb186ee3067eb64d7edf3dbfd04b40615f900d8e05e5632d89","method":"","user_agent":"","ja3":"","session":"fc9e1772-6b67-4bb0-aced-48a0bc6fd59f","seq":1,"duration_ms":101,"bytes_in":157,"bytes_out":14,"enriched":{"digest":"e488d718228ac46b","strings":["K@a_"]}},{"timestamp":"2026-08-21T00:24:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-0dd5a6LZfkdR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3064643561364c5a666b6452","method":"","user_agent":"","ja3":"","session":"f0820128-cd54-4f55-81f6-826331128efa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d629436bece7e3eb","strings":["BitTorrent protocol","<-UW1605-0dd5a6LZfkdR"]}},{"timestamp":"2026-08-21T00:23:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�*���R\u0013��\u001b0`�&���O��\n��F�\u0019ё��+\u0001/X,̺;����0<�\u0017�3��P�f���\u001e��,\u0005~�\"X(!F�(�~�P��.��\n�I\u001f\u0000����s�h<b}<�+�8-\u000b�`۫\u0001.�8\r�\u0005\u000fQ9,���º8���(#S\u0007�Z�$�\rTt�̆�'X��Bpҙ�\u0018ʥ��<�8b�\n�\u0016\u001e�v*\u0015\u000bF�tj�h+�2\u0004�6�/�A4���1}�oq�U�̎�k`j=*ਃ�P�tA2p������������?�V�h��JOB-��\u0007b�)\u0015_av��U3^S\\S2u�p�^�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c7ed261a-7adb-491c-ac84-26bd1ee363f4","seq":1,"duration_ms":100,"bytes_in":264,"bytes_out":14,"enriched":{"digest":"843f8a59f00178d8","strings":["\"X(!F","h<b}<","k`j=*","tA2p","JOB-","U3^S\\S2u"]}},{"timestamp":"2026-08-21T00:21:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-vJZo1azRyOiK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d764a5a6f31617a52794f694b","method":"","user_agent":"","ja3":"","session":"c4643551-3913-4777-be85-fb63d3294a1e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"30f37a43b9cde4b9","strings":["BitTorrent protocol","<-UW1605-vJZo1azRyOiK"]}},{"timestamp":"2026-08-21T00:20:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��?N5�Z�l��غ�i�\u0012ila��Dɏ�;�4���*d�\"�����%��0lF��qG��\fS>��ҿ\u0004�.��\u0004\t����f��h��YҼ3v��Κ&U\u001dV��j�\b��C�Q��M�DR��v̘�P�S���ŋ9\u0000��\u000e$��J�\u001d�i\u0001'�w�z=v\u001f�*��K�����Ŭ�s@��F�+Y=��\u0011S�78DF���/�˔ɫ��k�ax�r-���;F��\u000f@\u0015�\u0013\u0012�+��W�ũ��/����I�5�w���O�G�T��Ƽ�0\u000e���M��.mY'~�k�N6���w2H?�h<~��<7S��j��\u0018f\r�E�w`)���WQ�������=^\u0016Y��϶�X�Ǘ�Xyg�A8��\u0012��X\u001ff  �ǀX��\u001e�AS\u0003hOh��fq8�[�_���%�[\u0005\u001a��͗��t@\u0007\"�ycj����a��\u0011\u0013e�`\"i\u001d���\u0007��y�9\rc�S\u000f��\"ӝ\u0002~癯E��4�@�\u0013F'��)�NuJ����\u00010Q\u0016�pB@��\u001a�b\u0018���\u001b��O�\u0010\u001bI=�D�\t3T����i","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5ecb9bad-0ea7-404e-bf28-33ff55082d32","seq":1,"duration_ms":100,"bytes_in":476,"bytes_out":14,"enriched":{"digest":"a4c528f9f33010ce","strings":["78DF",".mY'~","w2H?"]}},{"timestamp":"2026-08-21T00:18:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-33gq6DD~)SNk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d333367713644447e29534e6b","method":"","user_agent":"","ja3":"","session":"420d355d-9572-4aa6-b31c-5cfc967e5ec1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"11979e80feb96da7","strings":["BitTorrent protocol","<-UW1605-33gq6DD~)SNk"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:35.832225+00:00"}