{"ip":"66.98.23.104","total_events":95,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["95 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,501 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,501 bytes sent","bytes_sent":18501,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T19:33:00","last_seen":"2026-08-17T22:22:44","events_24h":0,"events_7d":95,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4914,"lon":-69.9,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"104stb73.codetel.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":95}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":95}],"recent_events":[{"timestamp":"2026-08-17T22:22:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���6\u0017�>�\t�\u0004�\r����\u0005\u0017]�n�t�S$���<U#8G�ݺ���\u001c�\u0014\r0Hq\u0011v�����%�\t�?\u0011p�t�j�/t�\"���\u0010<�2�\u0003�@\r�[�l�>q#p\u0006�6\fX[\u0013Ϻ��\u001e>����\u000b��RA��� ���;�p�[�}6����O��\u0002��\bR�\u001eIA~ˈ2&��\t\u00147JRe�ײ��re�\u0001�;�\u001d�\t���2�0\u0007G��!�o��\u0007N����r\u000b\u001b5�EA\u0005�g\u001a��ē��է7��AU�Y��t�م�lv�\u0017\u0017@���>��eV�ѯ��d�=]2�W���\u001d�\u0015�\u0001��3�Q�ՙ\u0007Z��\u0000�\u001e��127ǒ�<\u0019�&\u0000#p\u0003�Â\"\u0015�d�IcE�~I^��y�\tzv","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cf52c4ad-9577-4b83-a48e-c9d82f080278","seq":1,"duration_ms":100,"bytes_in":315,"bytes_out":12,"enriched":{"digest":"9e5290d8d641ad74","strings":["<U#8G",">q#p","7JRe"]}},{"timestamp":"2026-08-17T22:20:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-SE7OftgCbYZX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5345374f6674674362595a58","method":"","user_agent":"","ja3":"","session":"9e8beef1-ce98-4532-bbd1-d6dc1f500fb9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"e07b92719e1fb0ab","strings":["BitTorrent protocol","<-UW1609-SE7OftgCbYZX"]}},{"timestamp":"2026-08-17T22:17:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�iF\u0002'X��\t`���*�d�^8�\u001d>&\u0017'\u0010�en�bW��\u001cO�]�[`���*�����`I(:\u000f����^E��S\u0002�\u0018Y\u0012\tA�\u001eEq\tdo�\u0003̞rdm�Y�Ov]��{��J2\u0019�f�2,|L:P��a\u0005T������c/���ey�� %?vT\u0004i\r$\"u;\u0006�l���������0�(�p\u001a\u0012�� Ö��J󰼊�%\u0000(����0�2\u0018\\��!�5�$IL%�\u0002�gg\u001c�W(��;S��Y\u0005�R�Tc\u0010��\u001e/,�\u001b\u001e�B\u0006Gf�\u0004��,��d\u0001�\u001c+�.r�F��)��8�\u001b;���ޟ�R�)\\Xh���%�)ޞ��\u00165Yk\u001f�]Z�c�^mJ5��~l�s�\u000b�\u0007E{�����\u0019�˒��\u00054\u0002��\u0015G���\u001eenC\u0006��RL\u000b�ےL\u0004q�{Yy�+�afY%w��l�(į26a1��SNc[袴S�\\��C۱�tx��*5\u001e\\��R5XI�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7f5b9ff5-90ca-4715-b666-9820962c1ba7","seq":1,"duration_ms":100,"bytes_in":399,"bytes_out":12,"enriched":{"digest":"74e9bdff7a7ce656","strings":["`I(:","2,|L:P","%?vT","$\"u;","$IL%",")\\Xh","^mJ5","afY%w","26a1","SNc["]}},{"timestamp":"2026-08-17T22:15:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-APvF7zpVwt0o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d41507646377a70567774306f","method":"","user_agent":"","ja3":"","session":"95b39199-6ee9-4481-b704-439cdc3da445","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"8887b69831307234","strings":["BitTorrent protocol","<-UW1609-APvF7zpVwt0o"]}},{"timestamp":"2026-08-17T22:13:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000f\u0019�y��\u0014\u0012T\\ӧ%�QQ\bc\u000f�\u000fW͕7�1x��$��2�9��n�V�{�\u0002Ta\\\u001d�a�H(k�̖@,�Č�\n\u0012����Ji��kA�+'��\u001a8����-��~\t�9����5��\u0018\u001dg�����sI9p\u001a.\u0002$ec��uu,��\t��Iq,h\u0013q�@e҉���qz�0�]���6\u001bhv��'V\fņ����Y?�`�\u0015??�'�C˞mq;�\u0002\u0013+d��a��G���5\u000f�F.�~�t7;2\u001e+�\f\u000f�\b��\u00062\u000e�U���s\t�Ml���Իӏ�+o�WQ2)T�خ�괮�s","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4267dffe-5bca-49ba-ab2c-8898ce2b384a","seq":1,"duration_ms":100,"bytes_in":259,"bytes_out":12,"enriched":{"digest":"e845c254c59f5ed5","strings":["sI9p","Iq,h","t7;2","WQ2)T"]}},{"timestamp":"2026-08-17T22:10:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-Dy_za9hDXa-!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d44795f7a6139684458612d21","method":"","user_agent":"","ja3":"","session":"4bee5db3-845b-459e-a242-90c3e558780e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c2005e9847d7135f","strings":["BitTorrent protocol","<-UW1609-Dy_za9hDXa-!"]}},{"timestamp":"2026-08-17T22:08:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�'���\u001cH��\b�v��q\u0003~\u000fU�\u0005h���\u000ei\u0012�߁�\u0001���E��s����`�ޖv6Ph�\u001d�{���\u0016��$`U\u001bv�\u001f�S�l�E<:\u0012�b�X-��M!�\u000f���\u0004{�rCV<5\u0005[#��F9~\t�[���&r�1�:��̎�`����D\u0019d�>�)\u001b�FQ�~��B\u0016\u0014&�Ɨ���\u0016���ظG��ό�ɆG'�e�X��h\u0005V`ųA<�2�\r\u0004<L�y\b�o","payload_hex":"a727b9a0871c48abfd08dd768bb771037e0f55e20568c1bf900e6912c7df819a0187b2cb45cac17397a1bf91608dde96763650689a1dce7bfdaaea16e7872460551b76851fd353b96cbd453c3a129f6282582da1d74d21f70f8ee59e047bb37243563c35055b23c5da46397e09b35be3a1d32672f431f63aa585cc8ec560e5a3edf5441964e73ef0291bc24651c27ef7b242161426a7c697f3e2be1681e894d8b847fa91cf8cbac9864727a165c158edb168055660c5b3413cf432bc0d043c4cc47908d36f","method":"","user_agent":"","ja3":"","session":"ab1441a9-f066-4a2e-8a4a-db306a717332","seq":1,"duration_ms":100,"bytes_in":197,"bytes_out":12,"enriched":{"digest":"7e8228e15e8352c3","strings":["v6Ph","rCV<5"]}},{"timestamp":"2026-08-17T22:05:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609--MPDF(makSFj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d2d4d504446286d616b53466a","method":"","user_agent":"","ja3":"","session":"24da43bf-06cf-432c-81ec-246a2da184d9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"38be37a60645107e","strings":["BitTorrent protocol","<-UW1609--MPDF(makSFj"]}},{"timestamp":"2026-08-17T22:03:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��<�D�\u00003�hŌ��C(9�\r��R�u�\u0002�Tژ��y�z4\b1������'L^�\u001a\\���X�欮�\u001dk�\b\u0007�\u0001�z8���Ք�Hu�\u001d���g�J妟2��N\u001eI\u0019����\u0015��::B.\u0016lNI!\u0010�<��\u0004t�\u0011�$ێ��\u001b�}2;hX\u0011��71~[����\u0011�\u0004�Բm{�$\"d\u0014�`=�\u001b$ۢ\u0013�\u0017\u001c�[2\u001c�u$4��z","payload_hex":"fea63cd044c00033ce68c58c95af432839f10d8ecc52d2758602d754da98a7e679c97a340831d1e6e69ce288274c5ea91a5cdae0a358bce6acaef81d6bc708079c019a7a3892c8ffd594b048758e1da4a889679a4ae5a69f32f1ac4e1e491987aabdf715aba43a3a422e166c4e492110c43cb1d60474c811df24db8e88e51bfe7d323b685811eda437317e5b898be78211f20491d4b26d7be1242264147ff17f603dda1b24dba213cf171ca65b321ca4752434e3d87a","method":"","user_agent":"","ja3":"","session":"488db7cd-6347-4f04-8389-6c61d73f570a","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":12,"enriched":{"digest":"a41e741a99e026be","strings":["::B.","lNI!","}2;hX","71~["]}},{"timestamp":"2026-08-17T22:01:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-UIUk07IQR!Jz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5549556b3037495152214a7a","method":"","user_agent":"","ja3":"","session":"d4797cd1-288d-457d-8bd1-a37a0ef21a86","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"21a51e477572ac9c","strings":["BitTorrent protocol","<-UW1609-UIUk07IQR!Jz"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:35.935830+00:00"}