{"ip":"200.119.177.3","total_events":152,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["152 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 32,498 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"32,498 bytes sent","bytes_sent":32498,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T15:22:29","last_seen":"2026-10-06T08:20:43","events_24h":0,"events_7d":98,"geo":{"country_code":"GT","country_name":"Guatemala","region":"Guatemala","city":"Guatemala City","lat":14.6343,"lon":-90.5155,"asn":14754,"org":"TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14754","label":"Telgua","category":"enterprise","url":"https://www.peeringdb.com/asn/14754"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":5,"protocols":[{"protocol":"udp","events":5}],"ports":[{"port":39131,"events":5}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-06T02:18:52","last_seen":"2026-10-06T05:23:29","recent":[{"timestamp":"2026-10-06T05:23:29","port":39131,"src_port":28916,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u0013����\u001b\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000I�\u0000\u0000","payload_hex":"410013bfc8c1d41b000000000000000049b40000","sni":"","session":"b509ea44-8686-497c-add3-6aa2f0e40a18","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-06T02:35:19","port":39131,"src_port":58658,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:.���m\u001b�<@Fb\u0005i����=�|9:info_hash20:.��I�.D��\f�Ɛu�d|\u0006\bje1:q9:get_peers1:t2:a�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a2e8b9ad96d1bb23c4046620569f281e3d13dab7c393a696e666f5f6861736832303a2e8b8b49b82e44a7a70ce5c690759d647c06086a65313a71393a6765745f7065657273313a74323a61d0313a76343a4c540102313a79313a7165","sni":"","session":"816a16f1-f1f3-4b26-adaf-3b0c96956876","bytes_in":104,"source_verified":false,"enriched":{"digest":"337678a65e38e403","strings":["d1:ad2:id20:.","<@Fb","|9:info_hash20:.","je1:q9:get_peers1:t2:a","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-06T02:32:18","port":39131,"src_port":58658,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:.���m\u001b�<@Fb\u0005i����=�|9:info_hash20:.��\u0003 h[�\u001eeP&����1��ye1:q9:get_peers1:t2:.\u000e1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a2e8b9ad96d1bb23c4046620569f281e3d13dab7c393a696e666f5f6861736832303a2e8b9e0320685bb41e655026a180e3e031fbf07965313a71393a6765745f7065657273313a74323a2e0e313a76343a4c540102313a79313a7165","sni":"","session":"f7976dbc-4117-41b1-9d67-7244c110083a","bytes_in":104,"source_verified":false,"enriched":{"digest":"e237ce75d7437555","strings":["d1:ad2:id20:.","<@Fb","|9:info_hash20:.","ye1:q9:get_peers1:t2:.","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-06T02:18:53","port":39131,"src_port":58713,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�y49��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�b\u0000\u0000","payload_hex":"4100a8793439f68c0000000000000000ac620000","sni":"","session":"e1e0042c-99be-4231-af23-19e98e914a8a","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-06T02:18:52","port":39131,"src_port":58658,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:.���m\u001b�<@Fb\u0005i����=�|9:info_hash20:.�(`ɔ��m�l�������u�e1:q9:get_peers1:t2:b-1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a2e8b9ad96d1bb23c4046620569f281e3d13dab7c393a696e666f5f6861736832303a2e8b2860c9948cad6de96cab87abdef8baff75e265313a71393a6765745f7065657273313a74323a622d313a76343a4c540102313a79313a7165","sni":"","session":"83e978d7-11c0-4873-9766-1e900982123a","bytes_in":104,"source_verified":false,"enriched":{"digest":"b31dddfd39f1b6af","strings":["d1:ad2:id20:.","<@Fb","|9:info_hash20:.","e1:q9:get_peers1:t2:b-1:v4:LT","1:y1:qe"]}}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":152}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-16","count":54},{"date":"2026-10-06","count":98}],"recent_events":[{"timestamp":"2026-10-06T08:20:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"]\f-#��Y��\u000fs�p�܏1\r��w�9\n>�F�哇�f\u0014\u0001\u0000V��X\u0000��=.Z�\u001aja:��\u001d��$\u0004��)�\u000e\u0004�F�`.�����V̀\u00007 �Vg�o�;./���u\r���≉:���\u0018�\u0016ˮ�MΪ\f�X@A����F����Wۺ\u001c���@\u0010ޕ����f��\u0000�2N�\"�O�4/��Qg/N2CB�4b\u0010�M�M{J�\tqp�\t�$���P���\u001c@\u0014Qi�[�\n��>*#o�Ǥ��[�?B�uđJ@��\u0017�\u000eDC�O&���:�*P�\u0001�m�]�F","payload_hex":"5d0c2d23d3f1599cdf0f73d970c2dc8f310d919a779a390a3e86468de59387916614010056fa8e58008eaf3d2e5af91a6a613ae7f41dd1d02404a7fe299a0e04b04691602ea7a2a89da456cd80003720cf5667d66fcf3b2e2fbfb48c750de28cfae289893ae4b4f518ca16cbaef44dceaa0cb9584041b2bee5b446a2f396de57dbba1c93eb834010de95ebb9d7e066f98b00e7324ea822ae4f83342facae51672f4e324342f6346210a14de54d7b4adc097170b709df249281f150cafcd81c40145169af5bbf0aa3e63e2a236fc6c7a4a0bc5bee3f42c875c4914a40b2e917e00e447f43a74f268597973a942a508801ae6dc95da046","method":"","user_agent":"","ja3":"","session":"f35d2e30-660f-4467-b95c-9b167f31fb56","seq":1,"duration_ms":100,"bytes_in":246,"bytes_out":13,"enriched":{"digest":"5c2e2672fe375020","strings":["Qg/N2CB",">*#o"]}},{"timestamp":"2026-10-06T08:18:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-XbUr-i5Rv0*g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d586255722d69355276302a67","method":"","user_agent":"","ja3":"","session":"e8648791-3e85-4dae-8455-625170fcf124","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"758760370612bf35","strings":["BitTorrent protocol","<-UW160N-XbUr-i5Rv0*g"]}},{"timestamp":"2026-10-06T08:16:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0019�,P�X'\u0000�IT�{�iq\u001d�d�\u0011uC8wHQ���\u0010:@il��FL�P�᪾k�\u0015��P��Fqv�m�C���WNz��BNp�Lj�X��`��`���!����\u001d6���`bw൝�iwgo\u0010�\b�p�\u0017E+W8w��\u001e�k����\u0001\u001b�\\��lvM����mOj�\u0017>G��1}\u001a\u0003�\u000e���|��G�w���=\u000b4m.��� 2�Bq��A�\u000f�͏�ion3�\u0005��h���o.l\u00101}���r\u0017�܏������4o=fW\u0004\u0004\u0017H_�\u000f����`aM�\u0005m;2Ż~�e��T|r�\u0010<f;,���~fz��$��\u0013�T��7��ڴ�6�A\u0012�ER���K�X�\u0002��\u0018��\u0000\"#XB�\u0016�:_Z\"Ѵ6�,\u0014�S\f���Jr7��g�����?cV�\u001ds\u001e/���\tO\t�\u000f�\u0005<X�3F.M>�Y�\u001b�s\u000b�Vd�k�\u000bʬ�;B-�p��$�u��$\u0019:'���\r�y�T��Z((\u0015��ӑ~&�\u0017�c40q","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"df05439a-fd34-4f67-97ad-f3af9ed0e056","seq":1,"duration_ms":100,"bytes_in":427,"bytes_out":13,"enriched":{"digest":"cf5e9311c77e2a30","strings":["uC8wHQ",":@il","iwgo","E+W8w","ion3","4o=fW","<f;,","\"#XB",":_Z\"","3F.M>"]}},{"timestamp":"2026-10-06T08:13:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-g5OP0gkcj!Pn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d67354f5030676b636a21506e","method":"","user_agent":"","ja3":"","session":"1644b8d9-2609-4653-a0cc-b2c428b2634b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"26d2f0ace2b49d2d","strings":["BitTorrent protocol","<-UW160N-g5OP0gkcj!Pn"]}},{"timestamp":"2026-10-06T08:11:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0010�y��\t*\u0007\u0003�u�=\u0005r�ڒ\t�����@\u000fD�\u001d~F�[�\u0006�\r8��e�.��\"Ӆ������\u001a���qX�e[1�\u0000\u000e\n��\u0012$R4Z\u0003\u0010�Aq\u0003\n�\u0017�c]\u0004�\u0004�\u0012�_�#�\u001e|��[I�o.�PIx{\u001e��6��P�����\u0004�����R��iv�];r�\u001c�,��������\u0011aV�ոr�5\fŭ\u001fs�\u00054��@]Cg^��>$\r�оX�\u0014��\u001f���W\u000f�'\u0005�q�,��\u0014ܲ\u0011���n��","payload_hex":"da109e79e0d1092a0703af75eb3d0572fcda92099be9b9c2ea400f44a31d7e46915b8c068b0d38ddf365e92e90ea22d385fcb48dc6dace1af2def07158fb655b31aa000e0ab1c1122452345a03109a4171030a8d1797635d0490049612d15ffa23fd1e7ccacb7f5b49b66f2e8a5049787b1eeef53680dd50fb81dff9a704d6f8ffffb252ddf16976ff5d3b72871cb72cc0b8b0f29f92caee116156c3d5b872c9350cc5ad1f73dd0534b9c9405d43675ef2eb3e240d94d0be58ff1488bb1fe3d9e7570fab27059f71927f2cb78a14dcb211bbf1886eaaa4","method":"","user_agent":"","ja3":"","session":"d8fb75a0-a1c7-4001-9730-79e8098d4b58","seq":1,"duration_ms":100,"bytes_in":215,"bytes_out":13,"enriched":{"digest":"0bbb44df4d2876a9","strings":["$R4Z","PIx{","@]Cg^"]}},{"timestamp":"2026-10-06T08:08:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-EzauS(YJLonM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d457a61755328594a4c6f6e4d","method":"","user_agent":"","ja3":"","session":"6002a126-0c8f-4481-809d-77c5e6c727bc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f63c8636ef27b79c","strings":["BitTorrent protocol","<-UW160N-EzauS(YJLonM"]}},{"timestamp":"2026-10-06T08:06:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"؆��\u000etŧɶ��޷�݉�v|�@ă�P���0�d�%�H��\u0007�B�2�ʈ(�k�\u0001\u0015�A���>��\u001e�U�3M�>�S�\r�\u0000��O���f��\f���f�@%6���!�\u001d,H��\u0013\u000b��Ic�z�v*\u0017E+��T��v��\u00072��\u001bT��G\u0003pJ�s�f���1\u0003��|��m4�T~\u0007�an`%=�fS_!��\u001c\u0011$�x�\"�t\u0004���]Oc��YR\u0010v���fL\u001b�(��*�\f��ePD��J�&�����%\\��\t&5䏉\u001d>��Ϣ�|ҕ�cq-Gs�_�Ĵ�$\u00171_��\u000b�\u001cy�|s\u0006���03���4�?�.��Fz_�h\u001cj�ɐ�\u0006�\u0014S��M5Z\u0004��\u0011`ު��U\u0000s�]\f\u001e��ƭ���N-�6(\u001e:U\\���^d���v=�n\u001b�Y�n\u0001�\n�Q�A�>�������\n���(ڀ:�Ѿ�ɑG_����(Y�[�\b�\u0013ѿP�bC#��ԅ���hkU���:�����p�\u0019\u001d{y�\u0011�֠m\r�\u0007'�\u0014pS���%��&�A������T\u001b)�����'$ �I�\u0004/7O����Ғџ!\u001d�,�i����to\"�:��\no���\u0013%\u0003�=�\u0013j�D�h�S��\f�K��78��\u0005\u0010b�t:����C�A�M�q<�f�\u001d��T�gi\u0011�A:b��۵^�\u000e\u00067<V�4{itp��D~Q��e","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c79dec24-1268-4673-99a7-93cfdde85a9c","seq":1,"duration_ms":101,"bytes_in":587,"bytes_out":13,"enriched":{"digest":"faf228ba3455ecd9","strings":["an`%=","fS_!","cq-Gs","4{itp"]}},{"timestamp":"2026-10-06T08:04:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-95ymQe7pnI2*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3935796d516537706e49322a","method":"","user_agent":"","ja3":"","session":"06e7cd2e-3083-49be-adee-8a91ae102b8e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2363452909464f9d","strings":["BitTorrent protocol","<-UW160N-95ymQe7pnI2*"]}},{"timestamp":"2026-10-06T08:01:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0010�t�`��Eq�mt3\u0004o\b8?[�\b'��7\f���N�ʈȐ@s��w\u001e�\u0002[\"���ط\u001a8�\u0010�\u001f\b��i����OZ�y@sw��b�z�\"���m���\u000f��|�{�\u000fii��\u0012Xȧ/Ģg�p�a�Q�}�\u0003�q�S%���]�\u0019S:�Bnߓ�͡�*\t�H\u0019U%�\u0016��;f��'5�׼�i\u0016�\b\u0010Gc�����7\u001f:�Ig�\u0013HU\u001ep'���\u000f��<�]�C.\u0017�@pm7_�Cy�\u0003�\\au\u0013��~\u000e�''k��*��P����Z�s\u0012���4Wu����u���dv��Y�I��@���@}","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3b058d06-3b02-4bc5-8461-53cf21b547da","seq":1,"duration_ms":101,"bytes_in":263,"bytes_out":13,"enriched":{"digest":"121c715fcffb6a2d","strings":["y@sw","@pm7_"]}},{"timestamp":"2026-10-06T07:59:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!Y2UoDg-jgql","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d215932556f44672d6a67716c","method":"","user_agent":"","ja3":"","session":"d42354e5-e750-42e9-a9af-47a3f9b9e35e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ee27e312f732b8b4","strings":["BitTorrent protocol","<-UW160N-!Y2UoDg-jgql"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-11T13:35:34.384402+00:00"}