{"ip":"177.234.234.218","total_events":91,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["91 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 16,979 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"16,979 bytes sent","bytes_sent":16979,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-24T19:16:37","last_seen":"2026-08-29T02:58:37","events_24h":0,"events_7d":75,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Carchi","city":"Tulcán","lat":0.8,"lon":-77.7167,"asn":52468,"org":"UFINET PANAMA S.A."},"source_domain":"218-234-234-177.ufinetlatam.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as52468","label":"Ufinet Latam AS52468","category":"isp","url":"https://www.peeringdb.com/asn/52468"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":91}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-24","count":16},{"date":"2026-08-28","count":74},{"date":"2026-08-29","count":1}],"recent_events":[{"timestamp":"2026-08-29T02:58:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-tZ6bvmk(9*1x","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d745a3662766d6b28392a3178","method":"","user_agent":"","ja3":"","session":"e37f6fff-a144-4867-9579-769ff6c4f027","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f8dd6454e6ccb0ee","strings":["BitTorrent protocol","<-UW1605-tZ6bvmk(9*1x"]}},{"timestamp":"2026-08-28T22:48:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����t\u0007�Ye\u0016رc��}5�����\u0000@X\u0012\\@����oG(6\u0018���cy�\n���4e�]q�ؘ/6�*�\u0001$�LH���� �K�\u0000����\u0000&O�\b��[o���ү��*$u��R�dHa�","payload_hex":"9a9fbdf07f7407a0596516d8b163f4907d35bcee9fe0bb004058125c409ed5ced06f47283618b090b36379f60acbe7df3465965d71b7d8982f36d02a9c0124e14c48bdb4f8de20f94bea00b3e2d8c900264f9108a2985b6f98acddd2af7fcedd2a2475e3c8529f644861fd","method":"","user_agent":"","ja3":"","session":"2ef561d1-c25d-4bbe-82b8-bd53e5d212cb","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":15,"enriched":{"digest":"86690b0a2a58c09f","strings":["oG(6"]}},{"timestamp":"2026-08-28T22:47:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3s~9VnLLhPxj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d33737e39566e4c4c6850786a","method":"","user_agent":"","ja3":"","session":"a03cddbd-13fc-4a7d-b936-d4a55b654d42","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"51b9cfe97b29448e","strings":["BitTorrent protocol","<-UW1605-3s~9VnLLhPxj"]}},{"timestamp":"2026-08-28T22:46:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�rV\u001d,r�*+�[8V�oL����\u0018.�B�:��,\u0010\u000f\bj{��\u0004\u0011?W:(���s\u0016\u0005\u0005\u0010`&\u0012qv���\\�\u000b��M�\tp#�\u00167���G}�\\�aWT[�\u0019��/`i\u0006��n�C܀Ċ^������\u000b�\u0015����M�OT�\r���<�7�\rƧ�\u0012\u001aN","payload_hex":"8d72561d2c72b02a2bf25b3856f36f4ca9b8cbd9182e97429f3aa3aa2c100f086a7ba9ee04113f573a28beced47316050510602612717681adb45cb40bb4cc4dbd097023c61637a19a99477db85cba6157545bab1980942f606906aecc6e9943dc80c48a5ea09a94f5ef8b0b84158df5b3db4dba4f54970d9b9c973c8b379f0dc6a7b5121a4e","method":"","user_agent":"","ja3":"","session":"f4d175de-18ee-4555-a04c-e9dcde30f516","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":15,"enriched":{"digest":"d051ff3463655aa6","strings":["?W:(","aWT["]}},{"timestamp":"2026-08-28T22:44:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-QTnWSa!nI)W6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d51546e575361216e49295736","method":"","user_agent":"","ja3":"","session":"e85f0485-aaf5-4992-81e8-01509c84faaf","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9d2c8115f33260dd","strings":["BitTorrent protocol","<-UW1605-QTnWSa!nI)W6"]}},{"timestamp":"2026-08-28T22:43:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"AK��ݞ\b�\\Yvװ�\tV�\u000f\b\tRK�Z��8�&)��\u0014a�?�t5�t��c�\u0007\u0016��I�Cڬ5]̨�Y�鵈�ܦ�Gw��.\u0002�\u001eQӅ9�[:Z�v\t~F�\u0013\u0010���1�f<��\u0012z�T\u001bo������;�ao�:�t���atN��\u0002�|�Oziq��hɻo�(k�i�\u0001%#I=���XB�y�ЂJ�\t�V\u0012�J\u000e��\u0003�^�WHjk�B\u0005���l\u001a�[�\u0007�̗���3���mb&�7m�C�)\u0004\u0001ϥp��Z\n�\u000f���$'#����W��\f)(U\u0018�q>h��9�����S�&�^(���~^�!ï얙F\\,�s�H��n�o֝��Q>�$�X������7\u0007\tTuT\t��&eJ\f��\u0012>g��QA���/\u001c��\u0004��W�;�(n�a칻D7P��8��^���\u0013�[{������i�]����Ч�E'�[��A���_��m7�ޥ\u000b\u0000u��J\u0005���(Ⱥ,�>6�z�}eur�ozn��!�\u001by\u000eFA\u001a�\n�\u0011g��7ZCh\u000bڽ\u0011Gk�h�S\"ұ\u001d�Z����\u001e@ŋ��\n{\u001c-��\u0003-l��4\u0005�R|UpN��)� $\u0012t��e�5�<�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d21a4e42-3c7a-4cab-b573-839afe8f5fc9","seq":1,"duration_ms":100,"bytes_in":510,"bytes_out":15,"enriched":{"digest":"cef9eec46e92543c","strings":["Oziq","%#I=","WHjk","}eur","7ZCh","R|UpN"]}},{"timestamp":"2026-08-28T22:41:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-14d7oSCej1Mn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d313464376f5343656a314d6e","method":"","user_agent":"","ja3":"","session":"82e381bc-3478-47d2-bde9-2c977a8bc24a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c72c57bb8b69de04","strings":["BitTorrent protocol","<-UW1605-14d7oSCej1Mn"]}},{"timestamp":"2026-08-28T22:40:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"?�H,��I�:�e��G\u000e\u0016��Je2Ǣla�k���]檎vZ�g\u0010X�vj��9�E\u0014�\u001a!{}�!W����\u0015\u0005�`Dd\u0001/���V��O8\u0004C��W��Cv\u001f�0q�k&w��,cȺLmOeEp�[Gb����\u0003\u001ax��\b@Dʼn�yb�� �j�dB\u0012u��J��&�xnLJ\u001f'�\u001b7���@z�v�\u00110]���\u001fH���,�%��h+�N�\n�E�%��<\f$e\u0011E�x�\u00009�'�*q���'h�\u001e���\u001c\u0012��1�n�\u001c��i��HGm�^�nj�@u�y�\u001628��{�}O��Np����5�ǘNe�7�Ӣ�\u0012�#�D͉��f1��\u0017I\u0012}�D\u0013���N�↗��n�B�{���6̚��A�\u0019��8\u0013_^��tnݻ|E\tZLT׿���*�\u0019\u001d��\u0017P�\b�r��D\u0006���l��\u0005ۯ�\u0010��\n�>\u0014�,\u0018�EK�9�R�KȩU\u0005:y�<5B�3���X��+�\u000e\u0005\u0019��;��e�\u0018<B'�0\u000b�'&Y`�W$��`\rD�b�Ol5WĊ\f�x��Jh��M\u001eBH+��3\u0011��\u001f�V��\u0004\u0004߁�\u0015iZ��/E.\u001c���Ƞw�Q\u0018nz�yz����\u0014tAU��'{����D�\t�6r�G�!@����Ү\u001c\u0019��U��Q�3��\"�\u0002���\u0013B\u0018�^W��\u001bV�!\u001f>�\b��u|�́3b\\","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8c90de30-351c-4fa9-abfb-3a1dbc8a0e84","seq":1,"duration_ms":101,"bytes_in":577,"bytes_out":15,"enriched":{"digest":"28d2ae617e031dfb","strings":["LmOeEp","'&Y`","Ol5W"]}},{"timestamp":"2026-08-28T22:39:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-UefyQq!VW3LD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d556566795171215657334c44","method":"","user_agent":"","ja3":"","session":"354a9d55-9a36-4f91-8210-ac4d0bd95748","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"dca9534edc0ee9ca","strings":["BitTorrent protocol","<-UW1605-UefyQq!VW3LD"]}},{"timestamp":"2026-08-28T22:37:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001bJ�F!r}\u000e\t�����\u0002d�\nü���ӎ��`x���c�o@�!�<\u0017-C'1���b�xfR��\u0004�^�l/�\u001al@\"DO\u0005��i���>��H�]`�v,8�%Cv\u0006�S��a��\u0013I\u001a[s��x��IE���kc���鋤n��m�)���e�\b\n*\u000b�3�#Ks`I\u0005\u0005�7YV+�H7���iG̽e��[S\u001dRr\u001eAg%��K.IBf�B��p|��c>�J\u000b�������\u00001n�anU�Go��\u000e�f�[fxɞ\u0000�\u0002\r�N?_uH�\u0019��Pʜ�rt�\b�w��H�M\u0015�g\u0011'ۃ\u0003h(ϯ\u0001\u0018�)��n�W�Z\\��\u0019M4*Tt Y��WB-x=���髟��\u0002@��\u000b\u001f�Z��ڳ����0��\u001a~vS���ٮ)�;j�a[\u0000���r���/��i0�&�@��5��@g��XG#&�\u001b�I\u0018��{l��񄈲m��Iݙע_\u0012y�� �O���\u0006_\t4�o��V7J�\u0012�9�R�T��\u0016�r\r����s�i;�LI�z.��\b����\u0003�_�F\u0010\u0001n\u001ao�)3���I\f;\u0006T����p�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d6cce402-c71d-4b82-9e00-3d401e0e317a","seq":1,"duration_ms":100,"bytes_in":475,"bytes_out":15,"enriched":{"digest":"e8f608213bea2265","strings":["F!r}","-C'1","l@\"DO","#Ks`I","7YV+","K.IBf","N?_uH","M4*Tt Y","WB-x=","XG#&"],"iocs":{"domains":["k.ibf"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:21:15.659872+00:00"}