{"ip":"190.48.156.21","total_events":233,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["233 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 15,844 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,844 bytes sent","bytes_sent":15844,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T02:36:06","last_seen":"2026-08-10T02:22:37","events_24h":0,"events_7d":233,"geo":{"country_code":"AR","country_name":"Argentina","region":"Chubut","city":"Puerto Madryn","lat":-42.762,"lon":-65.0539,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"190-48-156-21.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":233}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":210},{"date":"2026-08-10","count":23}],"recent_events":[{"timestamp":"2026-08-10T02:22:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��I�Ka��O܆�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b849ef4b619eda4fdc86ed","method":"","user_agent":"","ja3":"","session":"f90818ff-aa64-407f-8071-8c6f5f563df1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c2c5703db0c0b866","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:15:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Q�\"�r\\�Z\u0014I","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b851d92289725ca05a1449","method":"","user_agent":"","ja3":"","session":"a900ff38-fd15-40c8-9f8a-b2f46992bc2b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"21f8bb80874328bd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:11:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��� R6�#�\u0019��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b894205236a0239a1983c3","method":"","user_agent":"","ja3":"","session":"d3ae796b-6f8f-4b53-992b-4cac5a3de457","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"560ae3a9d384f9a3","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:08:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��e!(5�u�\u0011�j","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b865212835e575e911816a","method":"","user_agent":"","ja3":"","session":"ac58d0a5-e44a-4ae7-876c-05e828fe9d53","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2a5c48e3ee620cc5","strings":["BitTorrent protocol","<-UT360W-","e!(5"]}},{"timestamp":"2026-08-10T02:05:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0002Y\u001b^{\fIZt","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ca02591b5e7b0c495a74","method":"","user_agent":"","ja3":"","session":"61ddf241-e2c7-4833-bb2c-0021d03b5eb6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8dd55b57993cbfb1","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:03:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��Gп\u001f�ST]�\n","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b847d0bf1fe353545dff0a","method":"","user_agent":"","ja3":"","session":"cffc0bf8-0d1e-498d-8bba-8fe1cc53bb47","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d7b0b41ac6c238f5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:02:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\b�C�\u0018��I��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b808f043fe18bd9c4996f2","method":"","user_agent":"","ja3":"","session":"811b58b1-a28e-42de-b320-205f327df32c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5106b493f54be578","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:02:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\b�C�\u0018��I��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b808f043fe18bd9c4996f2","method":"","user_agent":"","ja3":"","session":"811b58b1-a28e-42de-b320-205f327df32c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5106b493f54be578","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:02:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\b�C�\u0018��I��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b808f043fe18bd9c4996f2","method":"","user_agent":"","ja3":"","session":"811b58b1-a28e-42de-b320-205f327df32c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5106b493f54be578","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-10T02:00:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��ˣ����\u0003���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8cba3e281fdb503b3b7c0","method":"","user_agent":"","ja3":"","session":"885dca7e-b932-45aa-b0dd-e2045aeca483","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8eea463c7bd7153d","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T16:54:40.099237+00:00"}