{"ip":"190.104.114.58","total_events":77,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["77 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 15,725 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,725 bytes sent","bytes_sent":15725,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-28T18:20:42","last_seen":"2026-08-28T21:45:27","events_24h":0,"events_7d":77,"geo":{"country_code":"GT","country_name":"Guatemala","region":"Guatemala","city":"Guatemala City","lat":14.6343,"lon":-90.5155,"asn":52362,"org":"Servicios Innovadores de Comunicacion y Entretenimiento, S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":77}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-28","count":77}],"recent_events":[{"timestamp":"2026-08-28T21:45:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�u�ͦ[��\u0015V�87\u0000TE�B��T�\b�\f�������h��յ���fnHCRe5*���}h��s�/�n��+\u0001bG�d��V�(��ދ�\n\u0014\u0006~\"�0-1S|\u000e��2\n��Kj�p������O.�E�+D�Bf1`�'=�F\tw\t��#��'�,�?���*�>\u001f���\b��(�еg�\u0012��v�~�\u001d�]'�>_%4�p���ӠER���\u001a�z{�j�U�\u001f��\t\"@��\u0011�\u0015ʹ","payload_hex":"d675e6cda65ba99b1556d43837005445ae42c1a654da08a60cf8e1aff4b2aeab68ec8ad5b596e4f0666e48435265352ae4c7d07d689ea673fb2ffd6ee38d2b016247ca64d6f756a028e0f8de8bde0a14067e22aa302d31537c0eabf9320af3c64b6ac070f288b7d3fded4f2efe45da2b44b64266316096273dbc46097709f0fa23faa827fc2cd63fc5d7ee2adc3e1ff8ad8208feeb28e6d0b567d7128ff276a77eed1daf5d27e93e5f2534d270ccc0d8d3a04552a4a6da1a877a7bac6acf55981fedc2092240bdd811fc15cdb4","method":"","user_agent":"","ja3":"","session":"029e9cd7-0ffb-4c2c-b5a7-4d4c735bf12a","seq":1,"duration_ms":101,"bytes_in":205,"bytes_out":14,"enriched":{"digest":"09c3015c9ff6a118","strings":["fnHCRe5*","0-1S|","Bf1`",">_%4","87TE"]}},{"timestamp":"2026-08-28T21:43:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-UC)5GEsY7)gj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d55432935474573593729676a","method":"","user_agent":"","ja3":"","session":"d7f4ef19-b1de-4d01-9a4c-5b5d226ffa18","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c3f2702af7890ff3","strings":["BitTorrent protocol","<-UW1605-UC)5GEsY7)gj"]}},{"timestamp":"2026-08-28T21:42:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0003�y�l\u0001�\f�j'�|\u000f<\r^�d\njT\u0000al�4�l��\u0010i����\u0001��������\u00196�\u001e�_���8А�/��\u0000#^���ނ��\f��2�}�f2U�@D��v\u0018\"\u0014J���R��KJ6��A�\bө��ΚC\u001bk�n�\u001c���z���c�\u0000\u0007|�\u0014�\u0004�����@��#\u000f\u000b�\u0016a�0\u0016�\u0010�s\u000b{��eY\u001c���\u0019�����26m�qx��\u001dy�\u0012�t9��\u0001�A��5�\u001f\u0004_�����3�ɢM�bB���i|b/\u0018˓Rb�3�ܵd��z�+3�1A��2\u0011-حD��i��m�'���·��\u001fT�=6\u0010��%���Z�3\u001b5���%�DŽ��LX�y����(\u0010x� T\t�c�}�?\u0001l\\)@\f���\u0019�@�X�����F�\u001c�T\u001eU�G�\u0017j�eb���\u001e\u0018\u0000��$��\u0002�\r�\u0002��\"\u0006�v\u001c������M��~\u0018p����Z��\u0017�y��\u0017�/\u0001�e\u001e����\u0015l\u0006��*\u000f\u0006�J�\u001a\u001d�U�O�ފےZ�K�LQ'F��_Rә�m\u0019��c���q�\u0010��\t�b@�}\u001fw\nx�\u0014�\u00000�7i\u0005���\u0017�\u001eJq��K�\u000bS����\u0001�\u001b0B۲�p��:\u0005f> 2��h����ƮsJԦh�)wϹ�t���>Ͷ��","payload_hex":"c203bd79bc6c01cb0cde6a278c7c0f3c0d5ee4640a6a5400616c9e34e16cbcc61069b988efff01eed4c9fe92f2969a1936b01eb45facf0a238d090882fb6bd00235ef0c3f0de8299cb0ceafc32c07def663255d04044e8af761822144a9685e452eb934b4a36ba9741d508d3a9b8c5ce9a431b6ba96e871cad947fed7af1ecc163c500077ccd14f504a1d27f89b3f540e7c1230f0bb87f1661923016d410ad730b7bb9d065591ca28dda1985ebfa99b832366def717882f51d79db128d7439bde201c84188f535f21f045fee93e6afff33d6c9a24de66242bc8ef4697c622f18cb9352628433a7dcb56498b47ad32b33ac3141efa0849afd32112dd8ad44cfd969ebb36db5279a9caec2b788981f54eb3d3610f4e625fae9d15ad0331b3586bbdc25a0c78486b64c58da79a8bbb9e7281078f1205409fe63bc7d8f3f016c5c29400c859883198e40aa58b6bffe918f469c1cd6541e559b47cf176ab065629e8aa01e1800b3b524b6d302b50dab02f7ce220689761c84959a80efae4d89cc7e187089b1adfb5ae6c317e37995c717de2f0195651eddd0dfc6156c06e2bd2a0f06af4afd1a1dd555d84fe4de8adb925af84ba34c51274699ce5f52d399c16d19bacc63a2c1f1718010a9c3099a6240ff7d1f770a788e14c40030cf376905fccdc717b81e4a7188f44ba50b538cc4fdc301e11b3042dbb2a6708efc3a05663e203299dc68bee08692c6ae734ad4a668aa2977cfb985748c87853ecdb6c9ee","method":"","user_agent":"","ja3":"","session":"0ce6c015-dd30-444a-9339-bb27ff5688d0","seq":1,"duration_ms":100,"bytes_in":541,"bytes_out":14,"enriched":{"digest":"83ee84cefa4db1ca","strings":["i|b/","l\\)@","LQ'F","f> 2","jTal"]}},{"timestamp":"2026-08-28T21:41:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-urNzBT4e!VtG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d75724e7a4254346521567447","method":"","user_agent":"","ja3":"","session":"e935a38a-529d-4461-9725-a1899f4ac10a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"fbaa928133979c04","strings":["BitTorrent protocol","<-UW1605-urNzBT4e!VtG"]}},{"timestamp":"2026-08-28T21:38:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-r3oIRD2D)rmk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d72336f495244324429726d6b","method":"","user_agent":"","ja3":"","session":"dfba321f-7115-454f-913b-9c6101072ad1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5adf24954c4e1a3f","strings":["BitTorrent protocol","<-UW1605-r3oIRD2D)rmk"]}},{"timestamp":"2026-08-28T21:34:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001b��\u0018V)aG�-�E-5\"s�wŎ������ʞ��\u0014<Q�O�7X��,�)\u001fh�\u0018)�W0�g\u0017�\u001e}w �/kh\b�\t\u0013�<�J��\n�6n6�CK��(\u0006-�*�;�.����sQl&&n����p�Q�pC�x�$�\u0019��\u0018�9��4�|2F�vA����k'�>Kh=�q\"\u0011-�+�\u000f\u0004\b�YP\u00135�N����J\u001d��","payload_hex":"1bf6ae1856296147ac2ddc452d352273e477c58effa1968d94b3ca9eb8ad143c51914fc937589ef22c83291f68dd1829c85730816717be1e7d7720a72f6b6808820913893c974aa9b30aa5366e36a9434b86b028062dc32aa43bc72efb8dbb8273516c26266ef797c6d7708751aa7043c5788a24871981c2189b39def334a07c3246f1764184b0bbaf6b278c3e4b683db07122112dd72b9b0f04088359501335ad4e81f0f3a44a1d9da9","method":"","user_agent":"","ja3":"","session":"5da2365e-7e42-4b91-a691-3913920e8b7e","seq":1,"duration_ms":100,"bytes_in":170,"bytes_out":14,"enriched":{"digest":"768f69de5043f773","strings":["V)aG","E-5\"s","sQl&&n",">Kh="]}},{"timestamp":"2026-08-28T21:30:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Yj-vTWS0Lc2p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d596a2d76545753304c633270","method":"","user_agent":"","ja3":"","session":"c001fda7-f914-4386-a506-3c9e1c9e9e0f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b8172cc5442098c2","strings":["BitTorrent protocol","<-UW1605-Yj-vTWS0Lc2p"]}},{"timestamp":"2026-08-28T21:25:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Nujl~yQA*SKc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4e756a6c7e7951412a534b63","method":"","user_agent":"","ja3":"","session":"0b161da4-21d9-4941-bb30-d0704efb893b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8dbed925d997df1a","strings":["BitTorrent protocol","<-UW1605-Nujl~yQA*SKc"]}},{"timestamp":"2026-08-28T21:22:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-oooOCpD2FdsV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f6f6f4f4370443246647356","method":"","user_agent":"","ja3":"","session":"e74c2aae-ec45-4196-8392-d8bfb3c7a786","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e16166c625929298","strings":["BitTorrent protocol","<-UW1605-oooOCpD2FdsV"]}},{"timestamp":"2026-08-28T21:19:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-ooa7aVsK)T!0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6f6f61376156734b29542130","method":"","user_agent":"","ja3":"","session":"f144dbc1-4219-433e-952c-4e8a109f6b17","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9c2f2baaaa9b7b7a","strings":["BitTorrent protocol","<-UW1605-ooa7aVsK)T!0"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:45:02.817367+00:00"}