{"ip":"200.8.173.183","total_events":115,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["115 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 25,114 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"25,114 bytes sent","bytes_sent":25114,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T06:25:53","last_seen":"2026-09-10T03:25:05","events_24h":0,"events_7d":13,"geo":{"country_code":"VE","country_name":"Venezuela","region":"","city":"","lat":8.0,"lon":-66.0,"asn":21826,"org":"Corporacion Telemic C.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as21826","label":"Corporación Telemic Network","category":"isp","url":"https://www.peeringdb.com/asn/21826"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":115}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-29","count":97},{"date":"2026-08-30","count":5},{"date":"2026-09-10","count":13}],"recent_events":[{"timestamp":"2026-09-10T03:25:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yJV0.YFtYY9F","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d794a56302e59467459593946","method":"","user_agent":"","ja3":"","session":"9a54080a-07e0-4adf-874d-d013c26fa057","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"dbbec7fc7ce22feb","strings":["BitTorrent protocol","<-UW160N-yJV0.YFtYY9F"]}},{"timestamp":"2026-09-10T03:23:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���I4�\u0003���\u0001o�W�\u0002�\u00111A�N�94B�e��%5�o�<(E����\u0019�H�\u001a�O)����w_Ê��B=y��<Sˁ�^�$��Ct��V\u000f�B&�[p~3\u0019[���\u000f���\u001c1��ʵb��\b'�\u001f��k/\u0006\u0006���Hy��>�J\u0018��>�u{sP3��(����]���o� ��B����J�I�\u001f2d�N)g�N�\u0014Z�\u0014�8Ny�:y��Y{��78�8��VuI�**]I���hI��~c\ru[!����)����s��4�#`&��z���\u0003i#*��(�����*�M�d��x\rIϢ��!P獾\u000e��z�Z��ͻ�)�m��A�8�\\�W�\u000f����\u0016���χlyx��q�\r�,M�\u0004m��$��\u0012��\u001cPM�Q\u001fJT@\u0016\b�,��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b5d6c94a-e03a-46a6-a9ba-3cb06207b05c","seq":1,"duration_ms":100,"bytes_in":345,"bytes_out":13,"enriched":{"digest":"2f736d16704e2388","strings":["[p~3","u{sP3","**]I"]}},{"timestamp":"2026-09-10T03:22:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nyjD-gx55)w7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e796a442d67783535297737","method":"","user_agent":"","ja3":"","session":"bbdeb7cf-0e3e-4872-aaf5-839706579f42","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4ab397cc240c4f07","strings":["BitTorrent protocol","<-UW160N-nyjD-gx55)w7"]}},{"timestamp":"2026-09-10T03:21:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����ok\u0011)�\\��N��\u000b~\u001d\"`r�\u0013y\f�.�\u001c�.=\u0005j��xBr��uwg��Ε���\\\u001f'\ra\u001a��Z�\u0017�O6�\n��*��ql���J~\u0011�m����cP�>\\���:{I�� ��ц%q\u001f�l;�2\u0000_�a��a�l�\u0004��;�wT#\u000b�d��f;�S>�\u0003�\u000fj�v4�\u0015\u001a�x΁@Χ[��M��Aj\u001f\u0001KKG�Z�L_��̐a\\�c}Ó����k��\b\u0019X���L\u001a���Z������Z=�|WMՔ|��8�.�ܧ���\u0010z9���*��`�`d��wO\u0004!R��\u000f�k�+\u001c��\u001e�|\u0010�u\\hj`X^��HZ7��'�$'��\u001e����x���\u001e��%&p��u��-\u0005ӱ�ū����јY/��*�;�i;�\u0003d\u000eurK��\u0018H0\u0015c\b����*�Z�2dh� ױ=9��@�oXz:�J3�_�7p>\u001d�A\n�$+���\u0014��\u000f�o�h4�=,S\"8���K\u0010Z��媲\u0014[ �U�\u0010JO͟���\u0018�=_�jtc\u001b�V\u000f��+�$g�\u0001߮\u0000Tgy��'V��V\u0011߬5�\u0016@8\u000fe\u00075\f#d�2\u0011|IY�\u000f��Y�x\u0015z\t�B\u000fP-�NVZN���2\u001d/�\u001b&��� !���\u0010^c��3\u00106�~��)M������o�\u0016\u0003>�!��\u000e0�\u001f�){�,�I�F�O�-b\u0019#�\u001f���(�m� e��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"22e1e460-34e9-4d5e-a33a-d767c984a0de","seq":1,"duration_ms":100,"bytes_in":586,"bytes_out":13,"enriched":{"digest":"b1b2a4ab15e48dea","strings":["u\\hj`X^","oXz:","=,S\"8","NVZN"]}},{"timestamp":"2026-09-10T03:19:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-qV6I1_!99kdz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d71563649315f2139396b647a","method":"","user_agent":"","ja3":"","session":"3c641b62-f8b2-41cc-96db-c39ffd973b07","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"06d90b9271ccedc2","strings":["BitTorrent protocol","<-UW160N-qV6I1_!99kdz"]}},{"timestamp":"2026-09-10T03:18:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�7�A���jN-4�Ңl����u\u0006���\u0015��\u0012uÂ��ךE��\u0005���o�12��[)\u001f�߽|�\u0005����L0Ն\u001avS7����JE�����ԗ?\u0010���Ռ��_*^R&","payload_hex":"c337c741fdf4fa6a4e2d34bed2a26cd7f684a675c28106898ef915b5b81275c382e6ecd79a45b9c305aca2d26fed313286e35b291f8fdfbd7cfa05fcc2d2ee4c30d5861a7653378fa0dad34a45cac3e2d9c4d4973f10d7def7d58ca18a5f2a5e5226","method":"","user_agent":"","ja3":"","session":"730012c0-7a19-4c1d-adc5-029b694f121d","seq":1,"duration_ms":100,"bytes_in":98,"bytes_out":13,"enriched":{"digest":"b223b11f160df14a","strings":["jN-4","_*^R&"]}},{"timestamp":"2026-09-10T03:16:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-SBv6P2OV.ROS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5342763650324f562e524f53","method":"","user_agent":"","ja3":"","session":"48e2ec27-48ec-4403-a65a-35c5caa718b0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"05442dcdb727bea5","strings":["BitTorrent protocol","<-UW160N-SBv6P2OV.ROS"],"iocs":{"domains":["uw160n-sbv6p2ov.ros"]}}},{"timestamp":"2026-09-10T03:15:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"I+�\u0013\u0004\u001d��\"\u001c<\\~�A�h4m�qÿ�3���Bit�v���,����{�VP�n��[ɯ!\fw��\u001a0f(�H��x�3v�\f�\u0007�Y^��k9\rt��M8����tLq\u0018\tj\u0003���U��-�m��Pf��\u0004��,��Q\u001e�.����|�h��-e\u0011\n\u0017;)9�c<�y���� �\u0003oa�ɀ���ߒ9����W��\u0015c)\u0006(Z��|�2JO�\nZ*\u0014l�/b�s\u0012o\u0016/\u00198h\u0015.Zs��\u001c�噁n��\f\u0015�*�\b)��\u0002<\\?zs�\u001d)�\u0001Ӳ��Yr�03B\u0011��+ ���Z�!�o����\u001d��\u0004�\u0014�:�KM���^�_\u0016\u0001\u001a���u}�&)�;%I6\u0013�h;�ŗswL�\u0001�����\u0007f�","payload_hex":"492bdf13041d92c0221c3c5c7ec341f968346def71c3bfcb337fe69fee4269749c767fa4af932c86dbeed47bf15650ef6ec2cf5bc9af210c778b8a1a306628b5489aa278cb3376970cf207e4595e98c06b390d7484ce4d38faa8f6c7744c7118096a03a49c8855838c2dcb6dad8c506683c60484bc2c8ba7511eff2eaffc92a17cc66884b12d65110a173b2939bf633c867984f4aeaf2088036f61cac980c1f8c4df92399aeee09957abd315632906285ab9b47c80324a4fd50a5a2a146ca42f62e373126f162f193868152e5a73a6ee1ca6e599816ee68a0c15f72a9c082992a3023c5c3f7a73c21d29ec01d3b298de5972e73033421190cd2b20a2f2af5af321ca6fd3e5ed8f1db6f804c614913a834b4decebb85ea75f16011a89cacd757db12629813b25493613bc683b8bc59773774cc901c0adf3e9d207669f","method":"","user_agent":"","ja3":"","session":"a1b3ce9a-84fe-4b00-94a2-78079fb71e69","seq":1,"duration_ms":100,"bytes_in":316,"bytes_out":13,"enriched":{"digest":"8df69480b931d71a","strings":["<\\?zs",";%I6"]}},{"timestamp":"2026-09-10T03:14:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Rq8Kl71lSPKP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5271384b6c37316c53504b50","method":"","user_agent":"","ja3":"","session":"5c6ba61e-de96-4380-8dee-f8eee17b50ce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d8df1883ead24deb","strings":["BitTorrent protocol","<-UW160N-Rq8Kl71lSPKP"]}},{"timestamp":"2026-09-10T03:13:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�s����s�C�JZ�3�O���\u001bD�\u001e�/gEu�9f�\u0001�\u0005\u0019-�0Bt��/\r�\u0000\u0000���\u0002[���.M-C��\u000ew��\u0005\u001f]��/��a�S\u000ee�9���d�4\u001eLecOD��-�����|�X��(9:\u001a���tɖ��>'P\u0013~�絆�1��.[\u001e�JAB\u001f����^�?��P_g\u000e�0,*8�\u0016\r��~��~ș���z\b�","payload_hex":"f7737ff995fbd1738143a94a5a9b33e44f9e9edc1b44a21eab2f6745758c3966b101c705192dd7304274a7bf2f0df60000a8fed7025b98fd952e4d2d43afef0e7782c3051f5d81f52f94cd61c4530e65a939fbbcf2648e341e4c65634f4487be2debb1e1e8d67cbf58a9de28393a1a94a0b474c99683f73e2750137efee7b5868931c8f32e5b1ea44a41421f9c958ce75ee33f92dd505f670ec4302c2a38f2160dfe9d7ee9d87ec899bd96f47a089b","method":"","user_agent":"","ja3":"","session":"f0210c47-15a7-4f93-821d-e3c657d68e3c","seq":1,"duration_ms":100,"bytes_in":175,"bytes_out":13,"enriched":{"digest":"83b2c23acd43fee9","strings":["/gEu",".M-C","LecOD","0,*8"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:34.702520+00:00"}