{"ip":"157.100.121.90","total_events":156,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["156 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-03T23:53:32","last_seen":"2026-07-04T03:23:33","events_24h":0,"events_7d":156,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Guayas","city":"Guayaquil","lat":-2.2038,"lon":-79.8819,"asn":27947,"org":"Telconet S.A"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":156}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-03","count":6},{"date":"2026-07-04","count":150}],"recent_events":[{"timestamp":"2026-07-04T03:23:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"p93��Ͳ���k=�\u000b\u0013��s�\u0014����N/lS\u0005�Ƴ^�d�Z\u0000J`��?�BAp\u0007J�\u001d�\u0003\u0013���'\bS�\u0017��\u0014U��\u0014���\u0019��/�\tz#�\\�m��Uߣ}�s\u0016�~\r����@�\u0016w���q��5�x��9ׯ�\u000b. �\u00148x��)u�5⽿\u0015�\u001a��I�\b\r\u000e�\fC�{�4�����\u0013��T|�\u001dUNf6��\u0002��#^���?'�~I�]��z����(���b�+׈4ڤ�w�ˋꜟ�P�3�\u000buq�@z�.Gcᢡ6\u0011L�\\�\u0015�j�\u000ej��q-C?gA\u0010�`%f2�W���]\u001dhK�?��:�\u001b�Q\u0005Ah����![�M���^�@�\u000b\u000f�α�'�}�2\u0018�\u0002\u001eq��\fÿE\u001a���\u0000�Zy��V�&>\f���\u0005I�&Ao��8\u000e�;oS\u0017=�x\u0017Y���\u0005\t�\u0012\u0006F)�\u0002C7��1��Q\u0012\t#��s�Y4�\u0000�h4�\u0016�br`���U\u0001��kF��C\u0018U��\u0016����~��8i����eѣՕ��\u0004s��ч|8�J\b\u0019\u0001���1dD\u000bP�w�X\u000e��\u0000�s�A��\u0000�v�S�u�k\\Ϙ��\u0015x��~�_�3(��@�Rj��)��^��2}�s\u0011\t�.���ʖ,N��3������P�ܬ9m��:ӦUA�'D�zk\u000b[}��y�S��4���5\u0013�����ϑ\u0006","payload_hex":"703933b2bccdb299fe9a6b3d8d0b13b6bc73c314f3b0f1874e2f6c5305f7c6b35eec64955a004a60a4933fd1424170074ae81de30313baddc92708538617def31455a4b414849ee619a08d2fc9097a23b05c846debe755dfa37dbc73169c7e0dc8fabdab40971677a4e3bb7188c835bc78e2d039d7affd0b2e20b7143878aeda29758e35e2bdbf15c91a9f8c4998080d0ecf0c43d97bc73480d2c7fdab13d5da547cd31d554e6636e8d302a5b1235ebdb9f53f27e37e49b65dff987af7f6acd828b0ffe562cc2bd788347fdaa4ef77dbcb8bea9c9fed50c033850b757196407ae62e4763e1a2a136114cf85cf715bf6ada0e6a96e7712d433f674110b7602566328b57b2f5d35d1d684be83fe3983afa1be65105416891e4efb1215bbe4d81d4cf5ee3408d0b0f8dceb1b727de7dd9327f18f8021e718afa0cc3bf451a9c90a600975a79bd9356d1263e0c9ff1b70549f926416fdaf7380eb83b6f53173dc0781759e0b3eb0509f812064629c202433783a53198d251120923e7d673e8597f34ba00b76834be16e6627260d5d7cb550188a56b46af89431855f4a2169f8dade77ef9be386982d2efae65d1a3d5959cc30473e2d2d1877c38e04a081901aab3f03164440b50da77d7580eb1ed00e073d041a49e008376a9539a75e96b5ccf9882841578f2d67ee45f93332885ad40e7526ad2d82991dd5e8eb8327dd4731109bd2eeabae0ca962c4eeacc33cbf283d8fdb250c4dcac396d82993ad3a65541c42744847a6b0b5b7dc2e8798d53f99534bedfdb351383f3f0d4e5cf9106","method":"","user_agent":"","community_id":"1:J4nUQbVYfWgE1JRtzN8peo8s68A=","ja3":"","session":"61283f27-08b9-484c-be32-dbe94d7df0e7","seq":1,"duration_ms":100,"bytes_in":572,"bytes_out":14,"enriched":{"digest":"3f1a2aae91733e96","strings":["N/lS","UNf6","q-C?gA","`%f2"]}},{"timestamp":"2026-07-04T03:22:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-)J27DFbSdMwx","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d294a323744466253644d7778","method":"","user_agent":"","community_id":"1:tG+ZY+A9DVATj9NMOqxe65at4Tc=","ja3":"","session":"bc094377-9d68-475a-aeb9-ba8218434fe1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bbae2842331d4fe9","strings":["BitTorrent protocol","<-UW1609-)J27DFbSdMwx"]}},{"timestamp":"2026-07-04T03:20:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���Nf\u0012�\u0018ޡb)�\u00189���f{n�\u0017'K�����C�h\u0013�,b�A\u0016+gZ�_#��#r|LJw�&u�+ZDx��k-����6\u0013������h��\u000e����\n\"��w��Z�m��$�VIu]\u001f:fӾJ4�\u001aG���y����d2c\u00167�_�K�\u0011�ff��Ӈ��\u0018\f8�6���rz\t�$(?`���\u0010\u0005r1Z�S��s��� 2�F|$�AIjĤ�\bٮK7\u0001s�UV�s���9�\u0007��⫩ێ��\n��I�U41g� ��hL����:�\u0001���u6�%\bV��\b\u0013�K\u000ek�\u001e�\u0004\u0017艼��ߐxĵ�i5m\u000f\u000e�\u0012RR\u0001�%R��=�ַv�]]0��","payload_hex":"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","method":"","user_agent":"","community_id":"1:ngW1EOrCknMTZuaKT3d9D/RhTqM=","ja3":"","session":"d3c33dbe-1b13-4ba2-add6-783e6525116c","seq":1,"duration_ms":101,"bytes_in":305,"bytes_out":14,"enriched":{"digest":"ffec387e90a7d664","strings":["+ZDx","VIu]","U41g"]}},{"timestamp":"2026-07-04T03:19:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-n-zYzfVgPi0o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d6e2d7a597a6656675069306f","method":"","user_agent":"","community_id":"1:YcMAHxAayf4vHMm21EY/vzImtJc=","ja3":"","session":"0588a6aa-7a6c-4f70-af1e-4ab3686f6a19","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6b32177df01a1f41","strings":["BitTorrent protocol","<-UW1609-n-zYzfVgPi0o"]}},{"timestamp":"2026-07-04T03:18:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"M:�E�s״�\u001c&�I��/#ް�]�\u0001�\u00190=!�0s�$\u000et�E�\u001f\u0011��:�����cvx\nܹ֜\u0019��Q��� \u0010t'3+`��\u0005���Q〇�qIvW�MW�i@n��O$lq\u001a�(G\u0015u\u0013�y\u0015�B\u001a85�:�'ڜ�WP`�j*\u0012�Aj\"\u0007ֺ�T��X#\u0014K�zf������\u001a|'m\u0010\u0019�\"�\u0006������Sf�X���•��n�\u0017 \u0012�׮\b���Q'��,\b����r\u0004�n\u0003�䑢�`\u0015yk��\u001c�����H��˯/�\n\u0000o+2\u0003�2��\u000e�;Tџ��x\u0007��E�\u0011r\u001b,m�\u0000d�ҷ\u0016�����","payload_hex":"a964a8fe57e7313555bd83e7b576f4dcd326d3a0f9ef607dc8dd3118ff37f7cc3d5932ebc7f89a96c4678bb6b760ca32f1f932796665525f9afe67c8237d895cf7a53d0c830a678a590e547e5459ea1cfe5ce207ef1e19760d344f40534d9ec0edd02e0fa649ffdbdcb3985a441bfc0ac9a90213790b11f364e55c2e6bf83ab8cd514e6edb0adae57b31919b490a15f3a2a50603feb5d115f36316e6ff0258226b228286d34cb3b7d77e60c52fce3e19303d21b23073cc240e74f545de1f1190b33a8d82e397f16376780ad69cdcb919d1f651a3c18f20107427332b60af9f05fac4d651e38087e971497657824d57cb69406e8aa24f246c711adf2847157513eb79159e421a3835ad3a8927da9c90575060c66a2a12e2416a2207d6bad6548ee55823144b807a66a2a5b6c0828e1a7c276d1019be229e068b969abdc7fc5366b9588ec9dcc29584b16ee217201293d7ae08b7f6e05127b6c62c08f8f4bff772048f6e03bee491a2c36015796bad8d1cb8b5a4e7a748fad8cbaf2f9d0a006f2b32038632f9d40e983b54d19fe1867807e5d245c611721b2c6de50064a2d2b716adb8f5aade","method":"","user_agent":"","community_id":"1:yZOzcYR5WaOrg99zg+m4Ru/ic6Q=","ja3":"","session":"a0e1f582-bf1d-4a5b-885f-d45c4bbf857d","seq":1,"duration_ms":101,"bytes_in":421,"bytes_out":14,"enriched":{"digest":"f4996fac79a868ab","strings":["2yfeR_","T~TY","4O@SM","X\"k\"","t'3+`","qIvW","O$lq"]}},{"timestamp":"2026-07-04T03:11:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-iTk629vD)a~f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d69546b363239764429617e66","method":"","user_agent":"","community_id":"1:+UrLto0EHuO8s3l/reZDpmy3oys=","ja3":"","session":"4652ec1e-83f2-4650-8ce1-4ab1a0a65faf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"dc246bcfa9898b43","strings":["BitTorrent protocol","<-UW1609-iTk629vD)a~f"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-08T17:17:28.697235+00:00"}