{"ip":"66.98.27.102","total_events":197,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["197 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 42,840 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"42,840 bytes sent","bytes_sent":42840,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T22:25:46","last_seen":"2026-08-19T02:46:17","events_24h":0,"events_7d":197,"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Nacional","city":"Santo Domingo","lat":18.4914,"lon":-69.9,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"102stb77.codetel.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":197}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":70},{"date":"2026-08-19","count":127}],"recent_events":[{"timestamp":"2026-08-19T02:46:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005��x�]�,A�Ս�o\u001a���t\u0017�h�p�����\t��pq}yp�^��m1�at�!3�_��J\u0012�#���p��_�\u0011jļ\u0004H��Ɇx��5�{�\u001b�3���(\u0014���2`�\u0004�\bY� ���`=�4��5V�'�\u001a�m���b\u0000�","payload_hex":"05e1ab78b95db82c4185d58dfc6f1af899d074178968e270a5c09ac18209b18470717d79707fa25edec76d31ed6174982133ef5fa8d94a12fb23e6b0dc70f2825fd9116ac4bc04488ee1c98678c3d535f67b821bfb33e3b0f42814a8b3903260c47f048e0859bb20a290a2603d9934e4f93556f227eb1a946df791bc6200c5","method":"","user_agent":"","ja3":"","session":"e6e71a36-ee1e-448e-b219-f2715d4be279","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":12,"enriched":{"digest":"f18ab5fb83dc9935","strings":["pq}yp"]}},{"timestamp":"2026-08-19T02:44:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-SFXXL.5oXh)K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d534658584c2e356f5868294b","method":"","user_agent":"","ja3":"","session":"9dc324e8-47ec-4b5c-89aa-59e910c2ac64","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"01f8799305bea417","strings":["BitTorrent protocol","<-UW1605-SFXXL.5oXh)K"]}},{"timestamp":"2026-08-19T02:43:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r�3�\u000e4\u001a��\u0019��!�������BR�Z�\u001f�\\bb<��\u0011)�L�!\u0011]�\u0001z\bݹ\u000b�\u0018�d\u001e#Z�ݶ\u0006\u001d�J\u0001΁B#�?�H����84䦂�2`�cR����y�K\u0018�\u000fx\u0007/W���lnì�.���W:\f>E�c�/\u0015��B_�V��\u0007�b8���G�sL�\u0004\u0002�b�v�:�\r�Gp \b.\u0017Wl\u0013\b֜��\u0011�MRa~���|����&i�-\u0000�G7-��\u000bܝ����r^�~s����FI ���b�O+��\u0001�g�kU\u0011>\u0002ҀKDd�9-��戽��Ғ�o�\u000f�HO���\u0003�)\noZ���@B]�x\u0004\u001a�◄�)hk��v�gɌ&\"[<�\u0000xǒ�:A�z\u0012�T�w����TI�\u0002D���Ye���$\u0007�N7\u0005\u001d�\u0016�\u001c��=��†�A�\u0011K\n\u000fq��#]I�`aZ5","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a6336178-fce7-4810-a10d-40b81bbbe100","seq":1,"duration_ms":101,"bytes_in":360,"bytes_out":12,"enriched":{"digest":"b3846d4cc7cfb4f2","strings":["\\bb<","MRa~","`aZ5"]}},{"timestamp":"2026-08-19T02:42:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-p!pA*6pH4uAP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d702170412a36704834754150","method":"","user_agent":"","ja3":"","session":"ddbcf9ca-00d2-4cb0-a328-7718ac893d8e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"c76e541dd24808e5","strings":["BitTorrent protocol","<-UW1605-p!pA*6pH4uAP"]}},{"timestamp":"2026-08-19T02:40:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"[���\u001fP8�\u0016ӕ��W�2�w/V\u001an�q��q�\\b��p(j�O�rb��\n��bZ�#g �\u0004��d9:*�\u001f�dV��i��V�'���?�32\u001cXa����\u001f��&w_�j�$�UY��P�\u0003a\u0001KDe�\u0015��D�n�'z\u0003�zV;���S�\u0001B�^Rd/��`7y*#\u0018\u000f\u001ae�S�ء�\u0001\u001b��.��\u0015j\"ՠj�f�K�!NC���z��[P\u0019�x��q)�:\\S�S�2�\u001a�o��\u001f�]��A�p�S��_�N��\tp�3�m`�\u000f/���*M�Ɖ?���H��bw�WgQ>�(n\b�F�_R�S5̷|�~��4��O�k-�$����3�����\u001c#�\u001c","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1abbd4a2-7b02-4eda-8a1b-010e9fc053d9","seq":1,"duration_ms":100,"bytes_in":294,"bytes_out":12,"enriched":{"digest":"872d92a7525c4fb1","strings":["d9:*","^Rd/","`7y*#","WgQ>"]}},{"timestamp":"2026-08-19T02:39:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-s.X9-LHvLDD)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d732e58392d4c48764c444429","method":"","user_agent":"","ja3":"","session":"708428be-7e97-4c2a-a3ea-c6bd1aced291","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"efc7ec22f797022d","strings":["BitTorrent protocol","<-UW1605-s.X9-LHvLDD)"]}},{"timestamp":"2026-08-19T02:38:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�*\u0002�9��$��d�,�+���b�\t5���N�FQV٥k�fDp�@\u0016��-\u0014�\u001a�ۑ���O�IGδ5(6��Q�D���5z��T��\u001e}\"d�@���A\u0000�\fw˙ϡ��閠�l�\u0005��\t:\u001b����v|\u0014L\"�{c%h��{","payload_hex":"b32a02a339fbd924f7e064972caf2b87b9b862c3093589bbdd4edc465156d9a56b98664470f34016bee82d14cd1a89db9190eca44ffc4947ceb43528369aa051cb44a7dbca357f7aeeef54b8cb1e7d2264ed40dbc9e24100920c77cb99cfa1a5dde996a0be6cb005c2d9093a1bbbb0c0aa767c144c22847b632568818a7b","method":"","user_agent":"","ja3":"","session":"2b992ebf-1c38-4ef3-87b9-5a0f65705afd","seq":1,"duration_ms":100,"bytes_in":126,"bytes_out":12,"enriched":{"digest":"5f802f9ba49ef766","strings":["{c%h"]}},{"timestamp":"2026-08-19T02:36:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-5Uf8D(9s(xlf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d355566384428397328786c66","method":"","user_agent":"","ja3":"","session":"47488cec-4789-4277-af05-5e1f406df079","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"7a3bb0e1b13b911e","strings":["BitTorrent protocol","<-UW1605-5Uf8D(9s(xlf"]}},{"timestamp":"2026-08-19T02:35:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"u�\n�\u0004v�mPd��e6���O�߶�\\Z�8=�����f\u000e/�Ga���C>��y���s8\u001c�df���H�|_����\u0013���]Þ83TpK���*Η�s��+���O\u001c���\u0019�r7L�Uᨔa�\u001d�W�)�\u0011A��Ǝ�\u001f\u0000�߆NRm6\u0019\u0012je\u0007!h�U���f��\u0005d�P�.�\\�$��5\u0005\u001e��\nH\u0000!\u0004=�A�\u001b�\u0003Ͼ>G5�_��=�J��UX��\u0006���������ĤG{","payload_hex":"75d70ae60476846d5064d6d76536b4879a4fc6dfb69a5c5aaa383d949cabf4ad660e2fc94761c9ced9433ec1bf79fd8f8a73381ce86466fec6cc48c27c5faffae38d139ea5885dc39e383354704ba6a3f72ace97fa7388b02bc8eaa54f1cfc92d0199d72374cc255e1a8947f61e91dd757d529fb1141c0c9c68ea01f00bedf864e526d3619126a65072168ed55ee94f66687f80564bf508c2eaa5ca72486ea35051ea6ee0a480021043db441921bb703cfbe3e4735ad5fe6a73dee4ae98755589ba10694b3edf7f4a0dde49ac4a4477b","method":"","user_agent":"","ja3":"","session":"495a7175-71ba-4e67-9b98-e02952d5eb4b","seq":1,"duration_ms":101,"bytes_in":208,"bytes_out":12,"enriched":{"digest":"a03d733dd0cbcb5a","strings":["83TpK","NRm6"]}},{"timestamp":"2026-08-19T02:33:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-rCyLWW!R0O9~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d7243794c57572152304f397e","method":"","user_agent":"","ja3":"","session":"ff791048-b064-41c7-9f8a-c0aaef5f209d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"fe07aaafd6ddfd8b","strings":["BitTorrent protocol","<-UW1605-rCyLWW!R0O9~"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:36.238565+00:00"}