{"ip":"157.100.191.105","total_events":99,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["99 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 21,216 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,216 bytes sent","bytes_sent":21216,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T20:49:40","last_seen":"2026-10-05T21:29:17","events_24h":24,"events_7d":99,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Pichincha","city":"Quito","lat":-0.2309,"lon":-78.5211,"asn":27947,"org":"Telconet S.A"},"source_domain":"host-157-100-191-105.ecua.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T21:08:35","last_seen":"2026-10-05T21:08:35","recent":[{"timestamp":"2026-10-05T21:08:35","port":39131,"src_port":40668,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��\u001e�C\u0007\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00008�\u0000\u0000","payload_hex":"4100daf31e884307000000000000000038850000","sni":"","session":"ee18c8d4-27b8-4d07-8817-eb6334963b52","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":99}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-30","count":75},{"date":"2026-10-05","count":24}],"recent_events":[{"timestamp":"2026-10-05T21:29:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!NUzxinpoe9W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d214e557a78696e706f653957","method":"","user_agent":"","ja3":"","session":"3843fa2e-d82b-4844-a0ff-c2ef7b9ac369","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9efb08eab1f449b3","strings":["BitTorrent protocol","<-UW160N-!NUzxinpoe9W"]}},{"timestamp":"2026-10-05T21:28:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�8�\u001e\u0012#�=\n��Z���f\u0005\u000b=b\u0006�>�\u0012U�\\�\u0019e%�>\u000b�Vx��2�����Ynx$������\u0005���k,\u001c)+�/���4)Ч�$��pm\u0011*3\u001f8�� �\u00041�\u0010���dMi�A���\u0007�S[�s:-h�$7�σ��/x\u0012\r�\u0013;b8�Ly�p���\u0018�m;��e����1\u0011��\u0004�\u00049��,�r�\u0005+�B�ߢ�b�f�\u001a6=ԉ0q\r���7p\u0001�n\u0000\u001aM��EP���=>[uzt��@\u0006-8ԛ\u001a[��e�]�����6�\u000f�])5�{�<|�\u0004����or;\u0005�6��%�8K�GZ9�`X��P&6c�\u00066�5�Vp���]PT�\t�,�#�y.���\u0005D�\u0005\u000b�\u0010׮��k3t������\u0016�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"70f46ea9-86a8-403c-a528-8d61a533a454","seq":1,"duration_ms":101,"bytes_in":318,"bytes_out":15,"enriched":{"digest":"736c6f0a9b76f419","strings":["Ynx$","s:-h","=>[uzt","P&6c"]}},{"timestamp":"2026-10-05T21:26:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-lO_i7VHVQYY1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6c4f5f693756485651595931","method":"","user_agent":"","ja3":"","session":"0419b2e6-13b8-4135-93f3-32551c038eab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"66bdd4d3b097048a","strings":["BitTorrent protocol","<-UW160N-lO_i7VHVQYY1"]}},{"timestamp":"2026-10-05T21:25:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"q�+Q�[q��\u001b3��S$e��P~��pQ\u0017����h���Ĩ\u0004D\u000e\f�b\u001f���(\u000f���\u0006�)\u0018�\u001dl/\u0007ng�$tU�r�w(o\u00193\u0011���\u0002���Ye�\n�.\u000b�\u001930���P�oc�F�G8\f�]f�I�›m���bI_l!}��C��g�?��\u0006P�\u0007�e\u0000���\f�(on1\u0003�\u000f�*~��t���9H��ü�&Cʍء_��P�\\.\u0016\u0005+Q��6E\f{b�����^Z\u0011�\u0018��\u0003�6�\tN@9q�\u001f\u001b�\u001c��H\u0017m�阜��iW7�\u0001-���K�\u0016p\u001d�'q4t�h[�\u00015B�j�\u0015�\u0015��\u0003�Ӳ�Њ\u001a�����N�š�����t?tz��L�k��������Ol�%\u001f�B@R῞��VJ\u0013- ���TSy�nG��M�ot���TG7�[,�/��������\u001dJb,��\u001fk\f\f����m�Y.�W=3\u001a�c��cW�v�+(\\��8\u0018��o��!{�$�\u001b�\u0004>�A!M�*�\u001b�L�LxLJ_�~t�٠�?��\u0011N\u0016�8�����!�W\u0011��<�����~�\r\u00137\"x)[�#T���|#pGn����\u00016��a��\u0007�t��\u0012X�)�S\u001b@*��fQ","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0386c522-2243-4d34-8cfe-c4057eb66b91","seq":1,"duration_ms":100,"bytes_in":511,"bytes_out":15,"enriched":{"digest":"17093243543e4aa4","strings":["bI_l!}","(on1","N@9q","'q4t","t?tz","7\"x)[","|#pGn"]}},{"timestamp":"2026-10-05T21:23:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-i4ZxrqKHH0x7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d69345a7872714b4848307837","method":"","user_agent":"","ja3":"","session":"c3d4b453-2bed-4bbd-8068-0de4f3d77a4b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a3570e975319709e","strings":["BitTorrent protocol","<-UW160N-i4ZxrqKHH0x7"]}},{"timestamp":"2026-10-05T21:22:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u000f�.d�!|�\u0013���@��a\u000e!��jd��\u0014�H+�+��\u0004�&�@�Y�ntvU�GEw6\u0011�C���+���նS�7��Y�N��#Ǥ�B\u0015,n�dk\\�c�\f�7�MU�4\u001b\u0016\u001bc\u0004���D�`R��fA����\u000e�&�����b����>^�H\u0014?G\u0010�E7����\u000f���e\bح=��^˱�9X��|f\u0000W��[b\u00129�2�\u001a��{�\u0001���ae8\u001e^�v�����'�����\u0014�8gY����DZʤ��=sԅ�I\u000b|\u0002�\u001e��Ɨ�Ǫ�&~\u0006/�|�sOhW_����\u001a/����\u0002�D�fN*��^�0��l�$�l�WH_`D$r̉\u0012��%�\u0011�(�+��\u0004x�<�y-�\u0018����s/�K�\u0007d&�!\u001e�[���T�������ba��g�!����\u0001�}��z_��I��j","payload_hex":"b6fdec0fea2e64d9217cdf13bee3d9408cfc610e21f7d66a64b8db14e5482bc42bb1e9049526c2408c598e6e747655c847457736118e43fbc1952bf7fdc4d5b653b637e09c59a34efed323c7a4d242152c6efa646b5cea63ec0cca37a54d55b0341b161b6304cce0de44a0605294ea6641acc9e0c40efc269d8cb5839062e5e2fae23e5ebc48143f4710b0453787a3a2890fcad8d96508d8ad3dc0ca5ecbb1913958ddc27c660057e98c5b621239a532d31abda67bdd01ef95c16165381e5eac769191ad9092279391e0829e1493386759ab87e09c445acaa4f59a3d73d485df490b7c02c61eaecec6979fc7aaa9267e062fde7cf7734f68575f9ae89bff1a2fb5aeadf5028044d2664e2ac1a35ed030cae96c8024d16ca757485f60442472cc8912efb6257f94118c287fa92b90f10478c33c9c792d9718dbc5c0db732fe44bd1076426be211e8d5bfce3e65486ffd5f09ec3f062618b8867922197f3f5df01ed7db0e87a5fddfb7f49eabe6a","method":"","user_agent":"","ja3":"","session":"bc724722-7b00-4508-b2f6-02917b93c83e","seq":1,"duration_ms":100,"bytes_in":365,"bytes_out":15,"enriched":{"digest":"8c4e7cf9939a48ca","strings":["ntvU","GEw6","sOhW_","WH_`D$r"]}},{"timestamp":"2026-10-05T21:21:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yQjnV-tP2!lE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d79516a6e562d745032216c45","method":"","user_agent":"","ja3":"","session":"1e7aebcb-8d68-4c60-83e0-20b6c34f1abb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"81076f98a7550c09","strings":["BitTorrent protocol","<-UW160N-yQjnV-tP2!lE"]}},{"timestamp":"2026-10-05T21:19:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"]�AϡE�8�W�ڟ�^��&B���.5m�c�}���z{���2C�X�C��Ua���������ɴ�Br�� M�\u001e������\u0018����T9\u001a��t��1�،�\u001bzȬ�x���d�\u001c)\r���}��b(/�������_%�[�^�ޓHL}�S��\u001d\u0018�\u0002k��.?Y6Wd��1�\u0001��)�,�,\u0000���\u001do��d`����L�B&�\u0000\u001dc\u001d�UEqؘ�H-��}��i����!��\u001e�o��d��C/�� \u000b^�6��e� X��j�\u0013�p��\b\nHC��82�E\u0014�u�ޭ\u0003/\u0012Y�\t�����\u000fll�6\n�D���\fjR�6��\u0018}�r^���y1��'��\u0010��2�bC�\u000e\u001e�\u0005�ZJpr��G(ARa��9\u0007?a\"#R{�i�=*Cͳ�}�7��\u000b�\u0010��xs~~�*C��\u0017�\u0005W�� \u0015��\u0018�7���D)�Q̇���|�\u001e�pw\\Ƌ�'\u001bk\u000f\u000b3�g/G>\u001f;\u0004\u0001�\u001c�5�����\u000f�%�mJ�P\u0004�ЗH9��<��Pr��V\u0007Щ������c5��z�Xu\u0004<��\u0016k-�a|���fۄfƈ=\u0006��}�E�~�{�\u0014>8�\"�\u0013\u001d�\u0000���n��,v/\u0006�ӊKt���a���\u001d�|\u0002҄tM7�',\u0007uv�A]Fn\u000b>��n�?�!��\u000eM�5�Wi�Ɠ��\"��X��$^_lu\u0016\f\u0017�?ab$#3KZSZ��t�^j\u0019lײ��","A]Fn","$^_lu","?ab$#3KZSZ"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:56:31.523623+00:00"}