{"ip":"190.149.152.86","total_events":240,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["240 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 47,295 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"47,295 bytes sent","bytes_sent":47295,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T22:02:11","last_seen":"2026-08-23T12:12:56","events_24h":0,"events_7d":239,"geo":{"country_code":"CR","country_name":"Costa Rica","region":"Provincia de San José","city":"Pavas","lat":9.9383,"lon":-84.1322,"asn":14754,"org":"TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14754","label":"Telgua","category":"enterprise","url":"https://www.peeringdb.com/asn/14754"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":240}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":1},{"date":"2026-08-22","count":8},{"date":"2026-08-23","count":231}],"recent_events":[{"timestamp":"2026-08-23T12:12:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT20B0-i4M6dXY_druy","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54323042302d69344d366458595f64727579","method":"","user_agent":"","ja3":"","session":"03997866-ab42-4a4e-8f6c-e4ca07da81f2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1431b3fbb8764c33","strings":["BitTorrent protocol","<-LT20B0-i4M6dXY_druy"]}},{"timestamp":"2026-08-23T12:04:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u0010�(\u001efm�!<�����O�}�\u000e�'^��D�/�\fs�:�ȟ�U�B�\u0006���2����-�\u0015*�\\E\u0003Ի� �v\u001a^���\\�{�\u0015���\t\u001f�.%{���%U���O.F1:�T�\b�y�� \u0003X��� �^,�/�","payload_hex":"a5e5cc10d1281e666da3213ce880e8e6a74f9a7d930eb8275e89d444862fda0c73d93a957fc89f8e55ea428306b69a8632c9f1bbb32db2152aab5c4503d4bb97209e761a5eb6d0df5cd67ba31596e4ec091f942e257beba1ec2555c9ecf84f2e46313aee54ed08ab799097200358e996cf209c5e2c802fb3","method":"","user_agent":"","ja3":"","session":"2d342bc4-2e12-407b-8872-72bdc320e1f9","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":14,"enriched":{"digest":"4d7400330e21925a","strings":["O.F1:"]}},{"timestamp":"2026-08-23T11:51:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT20B0-~1aJTY6.-OFh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54323042302d7e31614a5459362e2d4f4668","method":"","user_agent":"","ja3":"","session":"19042088-00f4-483a-b896-9de72dbc48be","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"db39d8c56d2ebebd","strings":["BitTorrent protocol","<-LT20B0-~1aJTY6.-OFh"]}},{"timestamp":"2026-08-23T11:40:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����I��A�!�����\u0016Fs ���\u0019\u0015+l��w{*�R�0��\u0002e��W6ӻУ��J�\u0014c�Le���&x>@ɹ<�����$��\u001a_=^:��x�X!��Q\u0011�x:�\u0000{�?�\u0015�)\u000f\nCĵ12��!���b��GQSc���\u000b0c����A�݉\u001b��\u0000�_\u0014E�������\u0005P�\u000e�#�|\u001c���]�$�Cj���\u001bݍ����ʋ\u0019C/7��+��I�C�2y:&�z�u5\u0001)���\u0003\u000fz�\u001f��~��p]r�ݖ+�\u0014�}��0�\u0018\u0002oȁ�ޕ��_���z�����,\u0003 FT��%\u0004�'�\u0012[\u0007�$�� {\u0007᧘\u001d�h����\r\u0012��\u001cw�Q�3��c\u001et���pkc5�08\"5�K�ٜ�\bfI|.�A\t���s\u0017�Y,�\u001a\u0011�\u0000;G��}G<��\u0005���%��H�[M�2���d������c�\u0019K��Ȧ�\u00153\u000f���G��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"96b37100-d7f3-43d0-ba90-6fd3d7a8541a","seq":1,"duration_ms":100,"bytes_in":392,"bytes_out":14,"enriched":{"digest":"4fb5b3fd18fabf1a","strings":["&x>@","GQSc","2y:&","pkc5","08\"5","fI|."]}},{"timestamp":"2026-08-23T11:32:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT20B0-tTQupaHcU3Yz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54323042302d74545175706148635533597a","method":"","user_agent":"","ja3":"","session":"981e0273-6f95-4b72-ac95-353b6a830c8c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"39d17818e516ac07","strings":["BitTorrent protocol","<-LT20B0-tTQupaHcU3Yz"]}},{"timestamp":"2026-08-23T11:24:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013{��뜨���_B�a(�o��x�M+�2��\u001f���Su��&l\u0018M��(\u0013{)t����\u0005���!�C�6�\b��٩�F~��\u0012�j1����lw\"�\u001e�\u0002�\u0018�(�2�","payload_hex":"137bc1feeb9ca8a0eff75f429c6128e36feddb78f04d2be432bdfd1f92ab9a537587c1266c184d93a928137b2974c5e0daf905adeca821ce43d736aa088fe8d9a9e6467e8dcc12d86a31adc3e3c06c7722cd1ef3023c42b3f9202a3c16b433b0517630e6207800324ee7ed575cd772487df24b229abc3d7a19fb04876af7cf220a93dd0890e3b7b67b3b3aa2623d781d01ad528f78ae386f72b90fa146883c6d2206c54750a7941fbea17936df7b88264e354437a52ef1c8a6a8d195ae9f1cc196595511f91e2dfd7d35364fcf1240e2eeafbeded34416a80972d5b28fab003801dfd125845e3f1f49b0380cd9312a42a59010522e43129e59fd87bf9e72b82c7b6868931b0aba04782236c05a0449556397b9c300744a4ff1aadf08dbceb2b1ce3adfb298f8e9024bef8d26c38f9e496d6f93a0dafdc8c8a837dad4e6e9609a09b9ceb09b448082891b98ecd35e624e60784ce29ae3b61fca6c20413ebe189f28c332c8","method":"","user_agent":"","ja3":"","session":"7754b4cd-92b0-439e-8116-511ae645f703","seq":1,"duration_ms":100,"bytes_in":356,"bytes_out":14,"enriched":{"digest":"557a378ea8a6790e","strings":["&N5D7","}56O",",{hh","^bN`xL","l A>"]}},{"timestamp":"2026-08-23T11:16:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT20B0-TcO(aXR!0w6u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54323042302d54634f286158522130773675","method":"","user_agent":"","ja3":"","session":"5dde2932-9ae8-41bd-a834-0ebbdcc88af7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"04c2e580e372c302","strings":["BitTorrent protocol","<-LT20B0-TcO(aXR!0w6u"]}},{"timestamp":"2026-08-23T11:12:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"qnܔ���\u001e���g\u00138y6�ϖ����\u000e��\u0003T�C�ԗi���K�\u0003�N� ��L�4�03i:�\\�r8�{\u001f�ѫ\u0016��\u0003�Y�\u0006�ͫ�Zx��\u000b2u\b&\u0006z\f(T�×\u0015�@�\rݘ\u0005\u001ee;5��˾\"��pC\u000fl��h�n1ܯ�\u0002�f\u0013=��\u001c�T(����_�K\u0018TTX�&d�s�\u0011�Jbw����T���J���0!��D\u0005���M�\u001c�O��\u001fp�B߷��˞N-�\u001ef��r4F\u0005Ӑ���\t�)\u001f�n\u001c�iR�hJ}\u001d�\u000b\u0010q9�c:٘��y���\u0010��q�e3f?r'�T��7��U~��f���5C7�k�k�M�y?\u0001�^~�F��IQa����9t��&\u001b��x�!-�\u0000\u001e_e\"�֑��с'�y\u0007G9�ī/h�S�V\u0000�\"R�W�t��K�.�����-���5H��}O�63\\'Bq���6��(�\u000e\u001d�a�K�'vs��{\t���n���\u00185�=\n�S0�\u0017�*���\u00028\f�\"�\t�,�+���ޮ�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"326eb7df-2004-4792-aa3e-7b216e1d3dea","seq":1,"duration_ms":101,"bytes_in":436,"bytes_out":14,"enriched":{"digest":"31ffdcecb1de0ac9","strings":["03i:","e3f?r'","63\\'Bq"]}},{"timestamp":"2026-08-23T11:08:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-LT20B0-0Ho*XlRl-.eD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4c54323042302d30486f2a586c526c2d2e6544","method":"","user_agent":"","ja3":"","session":"338905c1-059c-4a80-b1d7-24c37a96471a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"590266c10d1b10e7","strings":["BitTorrent protocol","<-LT20B0-0Ho*XlRl-.eD"]}},{"timestamp":"2026-08-23T11:05:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�F}\u0013\u0012E���Ֆ�0l����u���\u000e�����;�8����!_\"kv\u001c-G_\nE�t�ۣ��Zt\u0013���?\\y\u0015�D*\u0015�%\u0001���*���dZ\u0001\u001e\u000f!M\u0011w�V���\u0002׌\u001cR�4\u0019���\u0007>��\u0013����ѹ=gNuR�-[�O7�*�ў^ct��\r�y�>�����;9p���(5��\u0004cT��\u0015�߭/�\t��VQpt��@q�F-��L\u001di\u0006}�a��:z%\u0011\u0015}Oᾷ����z�\u0005_\"&b���`W�U�ti(\u0003&[�j��G�qaeԘ\u000by�oL'�~Bc���.���\"ܟFϿ��!\u0014�v4?���\u0017�pij���ƻ)(�G�$\u001d��\u0017���͗H̫a]s���\u0011&�z\bq�\u000ff�М","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"77e5e7f5-3c4c-4c4f-a6a8-075d78b125f4","seq":1,"duration_ms":100,"bytes_in":316,"bytes_out":14,"enriched":{"digest":"6a522a970155bb1a","strings":["!_\"kv","=gNuR","VQpt","_\"&b"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T10:58:52.857173+00:00"}