{"ip":"170.80.18.2","total_events":214,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["214 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 43,637 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"43,637 bytes sent","bytes_sent":43637,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T19:02:24","last_seen":"2026-08-30T02:40:38","events_24h":0,"events_7d":214,"geo":{"country_code":"NI","country_name":"Nicaragua","region":"Managua Department","city":"Managua","lat":12.1346,"lon":-86.2469,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"2-18-80-170.ufinet.com.ni","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":214}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-29","count":155},{"date":"2026-08-30","count":59}],"recent_events":[{"timestamp":"2026-08-30T02:40:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�$���٪a\u0019\u0016z��cb*�kn\u001d�h(��S�\u000b{\u001a�\tj\u0017�n\u0003�����oxd����y�EP��\u0006�AxR��Y�\u001c��q��\u001e���i�OG&!7��4�n�\u0012�fY�\u0015\u001c#Q�j0���R<sp��ؖ\u0017�؄�\b�8t�M4H�j\u0017j�O���uN�E�m\u0002\u001a\u0013%�A>\u000f��w��78�\u0006�#�\u001d{���V*\u0014��9A�v\u0012�͋���j�YR�“\u000f��L�b���\u0012�\u0019i��*��ƥ+�wK�[����&���`�\u0004\u0004�;{\"\u000f�jװ�5����#��~\u000but��V1n�^\u0015\u0016�\u000enD�ޢ�}�<k�x\u0017u����/D�)�\u0018u��\u0016^���_w\u000fn9A�?��Gj�`��{3��M+��\u0001�� =�I��x}�/p\u000fdQ\u0007�\u0015���\u0006���XeT�\u0010N�6\u0016�AC����\u0014�>L\u0013\u0002݈yb\u001a��\u0003�`�W�����&r\u001d�_i�\u0014�R��R�ʵB�E�~��P�\u0001���\u0002�B\u0002ܣMb\u0006o����e��6h\u0016\u0001U!\u0014��ڭ\u0007\u0014�[\u0005�\u001cn���gB/�h�m�\u0001�w��Ԉ���\u0001�j\u0013~\u0019�Vh(��&&\"����\u0005��#pl\n��8��x\\����e�Qd0Et����\tV�\u001c��@���\u001c.u�0��\u0018:6����ڣ�#�\n\u0010b\u001b������E��]��e\u0007(\u0001�#��Mh\u0018����B�]��JF\f","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b116980c-4e68-4c79-b6ae-f9b9033205b7","seq":1,"duration_ms":100,"bytes_in":584,"bytes_out":11,"enriched":{"digest":"aa8869b40abb748a","strings":["OG&!7","R<sp","Qd0Et"]}},{"timestamp":"2026-08-30T02:37:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ObsvrdLl-S82","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4f62737672644c6c2d533832","method":"","user_agent":"","ja3":"","session":"b525e111-9580-4e72-93c4-4c8293e765e8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"116e5595cf2d621e","strings":["BitTorrent protocol","<-UW1609-ObsvrdLl-S82"]}},{"timestamp":"2026-08-30T02:33:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"?��ţ��;)���u��?\u000b\u0005�:\bF&\u0018���=g\u0017\u001c�6���C\u0002�x������8'HԌ�y4�J��\u001c\u0016\u0011���K�\u0001��\u0004�S����\u0005\u000by\u001f��K\u001a\u0011c-�\u0001(U\u0017�K-�\u000b��k�\u0016#~������`���9�","payload_hex":"3fb997c5a3e3873b29aee5a67582c53f0b05ee3a08462618a8a9aa3d67171cc536e5f7a74302dc78f2efeda99ffc382748d48ccd7934a34abdd91c1611ae9a8d4bf501958204e3539ad4f3d5050b791febaa4b1a11632de1012855179e4b2d8f0b8aaf6b8416237ea8bdada6bfe960fe90e939a6","method":"","user_agent":"","ja3":"","session":"a3fd170d-b432-4937-abcb-821ad6367837","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":11},{"timestamp":"2026-08-30T02:30:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-I_bib-frlJLZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d495f6269622d66726c4a4c5a","method":"","user_agent":"","ja3":"","session":"ff9e87fe-c862-4161-a247-92f8f1cacea8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"aec071327af38411","strings":["BitTorrent protocol","<-UW1609-I_bib-frlJLZ"]}},{"timestamp":"2026-08-30T02:27:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����������y�/�?U\u0012��z��%jߨ���\u000b�\u0002\u0018\u000bF0\u000eT�\\�\bߝf\u001d{���E���$�X���ׅz�\u0014�\u0003V\tyK�\\S~ڠ[�\u0014k�E(�T�\u0010\\\u001dN)��[��܀����\b0�t<���Ղ\u0012(.���{�B)Z���l��&R<�\u001a��\u001f\u000be�� W�ls\u000fԖ\u0005ӂ�a�;ޖ\u0016s\u0016�h�aLJ\u0010��\u0001뷗#W\u0007�B�߮x�\u0015.��\u0001\u0017[D5���&�aX�S�s�\u0006�rj\u0019�Q��%����\u001fB�'�,�甁����2u�Sa���.������r��R�:�\u001f\u001b�\u0011hKZI�9\u0015\u0007\u0006��1\u001c\u0016�\u0002\\��dhĨ\u0018ub_\u0015��\tU��oy�2}'2�7�\u0004~\u001cHE��.�J<Bzi���ʍ���\u0000\u0004\u0002�\u0018��W2'V��5�2�:{�s�`�>5���ٳZݧBaP\n��|�č�罹���\u001a���y8q\u0015���'�#5�p��ɑ}�\u0018rwj��\u0001�l�\u0012�\n?\r؋�����$�K�B`\u0005��\n,�W7�\u0004��\u001d","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"375af027-2cb4-4db0-bba1-80e372b48f08","seq":1,"duration_ms":100,"bytes_in":442,"bytes_out":11,"enriched":{"digest":"959a954d56e97ff9","strings":["hKZI","2}'2","J<Bzi","W2'V"]}},{"timestamp":"2026-08-30T02:23:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-xNIfi5L0WHzm","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d784e496669354c3057487a6d","method":"","user_agent":"","ja3":"","session":"9a00cf62-d0fe-47a6-8764-b2702b3145c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"331fecc6ff44d187","strings":["BitTorrent protocol","<-UW1609-xNIfi5L0WHzm"]}},{"timestamp":"2026-08-30T02:20:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�b@at�\u0006fhKӎ\r��g�$\n\u0004�̀�D7��\u0011x�X�C5U2w$�X����r+�d��1\u000f&H�s��u�\u001d쎁���?s�D\rҗ<\fS��`Μ�·���=�yN����3�\u000e\\��@\u0011cīH�\u001e/�\u0001�\u001c!�\u001f�\u0019�CJ�E��\u0016�n%|\u0005���d=��\u001fB���~��\u000f\u0014\u0010�\u0001���t�c�L��csB#���~���[DO�/\u0010��|�Q��\u0003�p�ܰ�\u001f�Ǥ4�*\u0002��;��\n\u001c\u0013LOqh�\u000b\u0006:�_�E��RK�pRm��D�I����e�[L�\r\u00127���ī��\u0016#���\u0003�,���=\u0000�H�X���\u0016���\u0005�qΛЌ\u0006A\u0013\n\u001d�49�y�\u000e�U#s�\u0005�k9�\u0011Zv\u0015u'\u001e�\u000f;�\u0019�4�m\u0015ȆC��\t��e\u0003\u0016��g��@)׌�����O\u001d�N����Uڇ\u0000N�\u000e6i\t�ͱ���\u001c\f���ī\b�\u0014\u0000u)��F�","payload_hex":"a262406174ef0666684bd38e0d90a567a4240a04c1cd80d64437c1d81178f558a64335553277249a58e6b2ea90722b8564a3ac310f2648bc73a18b75d41dec8e81f4c9d03f73b9440dd2973c0c53818060ce9cc2c2b7edcdda3dbf794ef6cbe08b33ca0e5c8997401163c4ab48901e2fc001e71c21e31fb719d3434aa745b9c116c06e257c05a9eb9c643d87b91f42aaf3f37ea8950f14109d01dfc8c774ba63804cbba963734223afcdfb7ea59c905b444fcf2f10e5e27cfb517f8dc803b770c6dcb08e1f8cc7a4348f2a02e7eb3baca90a1c134c4f7168cb0b063a845fac45bb87524bf670526d99a1448a49a7e6d9ec65ea5b4c9f0d12378ac6c1c4ab91901623c191b903852cb0f7b23d00d2488658b5b69816fee0a405ac71ce9bd08c0641130a1dea3439cd79bd0eda5523739105986b39a2115a761575271e8c0f3be7199134d16d15c88643bdd30983f8650316869a67e6bb4029d78c898d98bca44f1df94ea4a69ec955da87004efd0e366909b7cdb181aadc1c0cc9e7f8c4ab08ec1400752985d246b3","method":"","user_agent":"","ja3":"","session":"e97ff959-0f7d-465c-b192-c4d5ee2c615e","seq":1,"duration_ms":100,"bytes_in":392,"bytes_out":11,"enriched":{"digest":"1d06ed192a901e4e","strings":["b@at","C5U2w$","csB#","LOqh"]}},{"timestamp":"2026-08-30T02:16:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-B1Y_zc~r0sZx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4231595f7a637e7230735a78","method":"","user_agent":"","ja3":"","session":"2036f316-63c5-4bf7-ab9f-05d13f65cb12","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"c43e97823261e1cf","strings":["BitTorrent protocol","<-UW1609-B1Y_zc~r0sZx"]}},{"timestamp":"2026-08-30T02:13:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u001c&�\u00061{FIf\u0006\u00075\t�kY����'�-��\n�\u0015���.����c\u000b�|\"\f\\\u0012%��J|j��9�4v��㝖n���=��6��ھO\u0011\u000fw{���?�Lh��\u001f`~����\u0019C�����ĩ�����\u0006[��\u000b���\u0018K�r��L8<1��b�㮨t�����\u0007�+�\u0007�����v�\u001e�t��\u000f��S>k�BCU��9�M��U��i\u000eл��~.�\u000bD�qʻ�6�S���&�����E��\u000bc;\u0016��.�a�\u0005O�9\u001en>\u000b�����}\u0015t'7x�c�2N�@A<\u000b�o��_C�0�+�'��\u0010i �L����\u0006i$K$T�i�\u0002��k\u000eW:�V���ve\u001e%�%�\u000b\u001c\"\u0012��eN����6C\u0002���\u0012��vg��\u0006���G\u0017�\u0012\u0011�sҝ>�}L����λF��:����O_�f�۫��K\u0002b\t��,>\\/�{�\u0015o!\u00056^��Qcs̊��\f�RJ�\u000e/MЫo\u001bzE�trԤ�'��\u0007����U����\u000bZ:��Y���7�\u000b�A>�p\u0017h��v��#�ĔvO��\u0006��'T[g\u000f�N�jcgj\f�+�_��\u001fPq\u000b��R[jAQ\u0017B�:A�\u0015�է��'>o\u0005\u0018�m�Э(�g�|\u0000\u0018�\u0003@\u0001�@����>Ն��T��<T�d4\u000e\"cL\u0017,��\u0002\u0000��\u0017\u001b�\\���рxĬ�\u000b࠺8","payload_hex":"eb901c26b206317b46496606073509b46b59e084c5f227b12d98d80a8015e5f2e12ec1b79fde630bef7c220c5c1225f3a74a7c6ae7f339953476baf7e39d966efaa6c03deaf936f197dabe4f110f777bb79bfd3fb84c6883a61f607eeeedbabe1943e1f183edddc4a9b48dacffa9065bf0ce0bfdbe88184bc172b2be4c383c31a8a462f7e3aea874ab878feed307a82b840796e080bbca76ea1ea674b0f20f888c533e6bb042435599b57f39e24db6e655a0ba690ed0bbd3e77e2ee30b44f971cabbb136a253fedde026efd6ddfcfc459ccd0b633b16d8f42ed761cd054f8f391e6e3e0bc08e91b1c37d1574273778e863f5324ecf40413c0b906f8be65f43bd30b82b9327b6f91069209f4cf0f8bfc50669244b2454ca69c402b48a6b0e573aa956e3fcd876651e25f125980b1c2212dbca654eb39cfea3364302d2ebd312fa84766791a906baaac94717f11211d673d29d3efc7d4c99a3bda6cebb46c5ca3a8887b4804f5f9c66cadbaba89c4b026209e1ee2c3e5c2fb77b93156f2105365e8fd0516373cc8ad6df0ce6524aee0e2f4dd0ab6f1b7a45937472d4a4a927e5a407bbb686d05592e1abd70b5a3a9ceb5982e4df37800bc9413eb2701768d3c276b6a723b1c494764feadf06bd8227545b670fee4e916a63676a0ca82ba05feaeb1f50710beebe525b6a41511742aa3a41b515c0d5a7cbc2273e6f0518b76dc0d0ad28de67be7c0018c1034001f440c5fccbf53ed586c7c254d6cc3c54cb64340e22634c172ce5e70200e5f3171ba15ccb7fb4a4d18078c4ac960be0a0ba38","method":"","user_agent":"","ja3":"","session":"6ed82da3-6a30-408f-becb-141289c4f897","seq":1,"duration_ms":100,"bytes_in":574,"bytes_out":11,"enriched":{"digest":"b4fa8fa5b2cc521b","strings":["1{FIf","L8<1","t'7x","i$K$T","'T[g","jcgj","R[jAQ"]}},{"timestamp":"2026-08-30T02:10:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-ZoOSgq.JkGfw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5a6f4f5367712e4a6b476677","method":"","user_agent":"","ja3":"","session":"a466f68d-21c3-409e-8742-1efa3d66c187","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"11b36eccb122602e","strings":["BitTorrent protocol","<-UW1609-ZoOSgq.JkGfw"],"iocs":{"domains":["uw1609-zoosgq.jkgfw"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:15:43.170321+00:00"}