{"ip":"190.143.186.117","total_events":290,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["290 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 19,720 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,720 bytes sent","bytes_sent":19720,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-28T02:31:09","last_seen":"2026-08-23T23:59:07","events_24h":0,"events_7d":92,"geo":{"country_code":"GT","country_name":"Guatemala","region":"Guatemala","city":"Guatemala City","lat":14.6419,"lon":-90.5133,"asn":14754,"org":"TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14754","label":"Telgua","category":"enterprise","url":"https://www.peeringdb.com/asn/14754"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":290}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-28","count":8},{"date":"2026-07-30","count":11},{"date":"2026-08-01","count":8},{"date":"2026-08-02","count":22},{"date":"2026-08-03","count":11},{"date":"2026-08-04","count":8},{"date":"2026-08-06","count":36},{"date":"2026-08-07","count":17},{"date":"2026-08-14","count":13},{"date":"2026-08-19","count":31},{"date":"2026-08-20","count":33},{"date":"2026-08-21","count":26},{"date":"2026-08-22","count":8},{"date":"2026-08-23","count":58}],"recent_events":[{"timestamp":"2026-08-23T23:59:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���l�a\u0011m�\u0007��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f36caf61116dea07a4a1","method":"","user_agent":"","ja3":"","session":"d3944cc4-1b34-4c65-962d-db3c674dbfce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7694d9bd0119002e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:52:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��0{�zz���=g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8307bb87a7aa1f5cd3d67","method":"","user_agent":"","ja3":"","session":"0fdf6af0-c9c3-4c8f-a04c-15e97c9e9c01","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9e022c1666afcf93","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:47:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���qM]\u001f��\u001a�w","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8c0714d5d1fe6c81ad777","method":"","user_agent":"","ja3":"","session":"773f0305-82fb-4485-87d6-470983196a7d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1f731563d2b53f89","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:45:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��s�E�k�����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8739945a36b84cae4d2db","method":"","user_agent":"","ja3":"","session":"247245bc-b1c9-46fb-92b6-ede050bd9b84","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"523c652d2d0d6322","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:42:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����\u0002\u0001�m�O\u0019","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b885be800201986dd24f19","method":"","user_agent":"","ja3":"","session":"76a37a4e-e610-478a-8088-4dc0241de7dd","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"25a043afe71c8fb8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:41:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���2\u0010|�\u0011\t�l}","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f732107cec1109826c7d","method":"","user_agent":"","ja3":"","session":"b3d1a12d-d826-4686-b77c-4b363dfd099a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"22710fb4981fad88","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:39:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\\0�lj!\f{\u0004\u0017","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85c30a66c6a210c7b0417","method":"","user_agent":"","ja3":"","session":"b778969a-c418-42f5-9874-37b53c4cf999","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ae224e28215af57f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:38:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0004�7�^>�Ӡ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ff049437e95e3eacd3a0","method":"","user_agent":"","ja3":"","session":"1ec18079-31ca-4694-bdf3-97c84a4b5c10","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"45b230c0a6151048","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:37:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\bt3�\u001f8l���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8087433dc1f386cfeb589","method":"","user_agent":"","ja3":"","session":"e5a3d390-8d3c-409f-9382-2066c478ae0a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3a5a03eb5ff6ecd9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-23T23:35:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��3S�f��Q\u0001R+","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83353bb6685fa5101522b","method":"","user_agent":"","ja3":"","session":"115f01ab-2925-44b0-a5ee-2e8792c96244","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e3921577cefd9d82","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T11:00:26.396332+00:00"}