{"ip":"157.100.120.15","total_events":344,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["344 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 66,072 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"66,072 bytes sent","bytes_sent":66072,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-20T03:42:53","last_seen":"2026-08-20T15:24:08","events_24h":344,"events_7d":344,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Guayas","city":"Guayaquil","lat":-2.2038,"lon":-79.8819,"asn":27947,"org":"Telconet S.A"},"source_domain":"host-157-100-120-15.ecua.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":344}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-20","count":344}],"recent_events":[{"timestamp":"2026-08-20T15:24:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-m-ucc8wkkw1k","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6d2d75636338776b6b77316b","method":"","user_agent":"","ja3":"","session":"46ac3f78-4574-4e5e-9acc-29ce0372be4d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"30c5c0ab0b5fd8dc","strings":["BitTorrent protocol","<-UW1605-m-ucc8wkkw1k"]}},{"timestamp":"2026-08-20T15:21:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���V\u000f��.c\u0016RQ�uA\\���I\u0016z���k�\u0005�tL�`\u001e�������DegM}����\f\u0016A;g�B$˛�^��.�ML�4N��\b�Sfd��\u0010���t\u0007�8'��%��si�L��S�n=\nJ:�\u001aY��\u0002�t�\n\u0016H�����c�9�5\u0001�#\u0001�s{\u000b\f�\u0014a�\u0006\u0005�۬�2<�\u0001๦�\\�5;��\u0014Hs�o�ll�N�\u001f�$'^C��OBM��$,����w R�W\u0000z\u0003�(֬li�J�\u0017Z}�\u0016O�r�iR�\f�Z>�;�j�����WA\u0017Cy\u0004s�T%ݙ4��\n��\u0000��V�����hY���5\u0011,:��G�u���v!��,�\u0007�\u001dL�\u0007�u\u0007\t��X�f�\u000b\te�I?0*\u000by;/+��\\�&��۹H�y�=�G\u0013t\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c71aac08-ff58-4d99-b3f9-e535ec4d1bdc","seq":1,"duration_ms":101,"bytes_in":334,"bytes_out":14,"enriched":{"digest":"bee746bc568b2cba","strings":["DegM}","$'^C","I?0*","y;/+"]}},{"timestamp":"2026-08-20T15:19:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-F(VnEf!d05j2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4628566e4566216430356a32","method":"","user_agent":"","ja3":"","session":"1c1e7888-6cb1-431a-8b8a-91e3c9a41f8c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"be972af0463a3531","strings":["BitTorrent protocol","<-UW1605-F(VnEf!d05j2"]}},{"timestamp":"2026-08-20T15:17:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003G2���\u0006�\"�J�W�?\u0000c���ql\u0011\r2��'�'��4��\u000b}�c=�:�uo��`Q=Q-kb/\u0013��>t<� \n]�\u0018��\f��xh����'�`\u0002�\u0018� ��\u000e�A�|V\u000f��)�S��Dž�SF�x�V\f�3}Ο\u0018$�fE�e�=���\u001e�Pd\u000b\u000bO�fQ�qn�\u0006\u0003T�YIh��bj������UZ\n���\bc\u000b�~��U�1}���B���(","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"73d4dddd-3f59-49b6-b557-799699e666d2","seq":1,"duration_ms":100,"bytes_in":400,"bytes_out":14,"enriched":{"digest":"3d885b0aaf3de6b9","strings":["@;cp","`Q=Q-kb/"]}},{"timestamp":"2026-08-20T15:05:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3dD(eXObn3M~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d3364442865584f626e334d7e","method":"","user_agent":"","ja3":"","session":"e1460255-a555-4521-8d71-579423d3e520","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d99bd93b321120d1","strings":["BitTorrent protocol","<-UW1605-3dD(eXObn3M~"]}},{"timestamp":"2026-08-20T15:02:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�7��\u0006ޚЧ��\u0003\u0000���ں%�bW���\u0006�UaH\u0015�}\u000bc^���(�\u0011@\u0015�-�̐�2����\u0016�[S���yV0\u0002ۘ��8Z�\u0014ɼ|B��\"�y^�����\u000f\u001dA*y��2�t\u0015\u0005�Ŷ+��\u0010\u0006�h�8�\u0018:W�~5�\u0017��}5��ԟ�f<�R@�g�_���)��$���Z�t:R��\u0003�\u0007\u0018`�&\u001exP\u0000�\u0010�.�\r'35���\u0013o\u001f�t�:]�����\u0001\u0004\u0003�L�˱\u0014]��^�\u001a�\u001e��P���\r^�\u0003\u0000m����J�TC��]�p\u0006��\u0003*>~�\b��v\u000b\u0012Y�<�?^'�|���\u001b���~��iZ�u�����FN+=0�]D\u000e\u001d��3R","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"de4857d3-8022-4176-b949-79a3edf20491","seq":1,"duration_ms":101,"bytes_in":292,"bytes_out":14,"enriched":{"digest":"80cdc82839e4dfc6","strings":["FN+=0"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T15:27:07.622692+00:00"}