{"ip":"157.100.189.223","total_events":349,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["349 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 23,732 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"23,732 bytes sent","bytes_sent":23732,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-03T21:34:08","last_seen":"2026-10-05T08:46:58","events_24h":48,"events_7d":349,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Pichincha","city":"Quito","lat":-0.2309,"lon":-78.5211,"asn":27947,"org":"Telconet S.A"},"source_domain":"host-157-100-189-223.ecua.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":349}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-03","count":23},{"date":"2026-10-04","count":278},{"date":"2026-10-05","count":48}],"recent_events":[{"timestamp":"2026-10-05T08:46:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�{��+�3��\u000b�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb97bafcc2b8b33f8b40b80","method":"","user_agent":"","ja3":"","session":"11332a09-1586-4d37-b21f-ed8256ab17bb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1736c7e28194519a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:44:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\t�DLR�\u001aհ8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb909ff444c52ca1ad5b038","method":"","user_agent":"","ja3":"","session":"ec4340bb-601f-406c-a0a2-9ba40bf75d0d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"61496493ba7c06d5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:42:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���5ſ�\b YZ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e5c635c5bfc30820595a","method":"","user_agent":"","ja3":"","session":"4e439158-e1c1-40f6-8f30-034c9c488c3c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"196f9d71a42c9c19","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:40:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���]y���xx�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e5965d79dcf58f787890","method":"","user_agent":"","ja3":"","session":"fb1ec448-e2e3-4d88-b348-1d32f25ad074","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e9b9c386d27a2f4d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:39:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���J���'\u00144�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9af844aac9ecf271434b9","method":"","user_agent":"","ja3":"","session":"b4ee1ca8-1d76-474e-9c7b-95d6fb3e288d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d0e05aa4b11316be","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:37:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�'7Gm�ܭsD�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb92737476d95dcad7344a1","method":"","user_agent":"","ja3":"","session":"f1ee00df-c0f5-4205-831d-7c689012c391","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e12b3e6cae64dc1d","strings":["BitTorrent protocol","<-UT360W-","'7Gm"]}},{"timestamp":"2026-10-05T08:36:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e���t2\u0014��g�\u0005","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb99093743214f6fb67fe05","method":"","user_agent":"","ja3":"","session":"58f347ed-9a42-43f4-b4ce-9045ba1de5c7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"bba2e799128f97df","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:34:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�i��L�\u0003�̩A","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb96995a94c8603c6cca941","method":"","user_agent":"","ja3":"","session":"6ac2bd76-f986-4a68-a046-e947b7ca8b8b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b353fb1b459923b2","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:33:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�6����֯�N�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb936ae96a79fd6af824e93","method":"","user_agent":"","ja3":"","session":"c3886a1b-f3a2-49f0-bba4-ed8fda8e7d5a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9a0a8608eab53434","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-05T08:31:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�^3qK��a�-�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb95e33714ba4f2619b2d8d","method":"","user_agent":"","ja3":"","session":"06bf5eb1-e5b4-4ca0-b18c-156c138498fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"440645a14612eeea","strings":["BitTorrent protocol","<-UT360W-","^3qK"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:56:04.682385+00:00"}