{"ip":"157.100.191.6","total_events":182,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["182 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 12,376 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,376 bytes sent","bytes_sent":12376,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T21:31:34","last_seen":"2026-08-17T05:54:17","events_24h":0,"events_7d":182,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Pichincha","city":"Quito","lat":-0.2309,"lon":-78.5211,"asn":27947,"org":"Telconet S.A"},"source_domain":"host-157-100-191-6.ecua.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":182}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":22},{"date":"2026-08-16","count":94},{"date":"2026-08-17","count":66}],"recent_events":[{"timestamp":"2026-08-17T05:54:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001c�n��9�)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f81ce56e7fe4cc39ae29","method":"","user_agent":"","ja3":"","session":"74660bfa-3d5e-410b-b85c-38988acaddb5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6dc72a6f24ec2817","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:47:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���;�<g� ,dl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89c3bf83c67c4202c646c","method":"","user_agent":"","ja3":"","session":"31f892ee-58e0-4cb9-9d82-8c16313207fd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cf67addf43422a00","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:47:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���;�<g� ,dl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89c3bf83c67c4202c646c","method":"","user_agent":"","ja3":"","session":"31f892ee-58e0-4cb9-9d82-8c16313207fd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cf67addf43422a00","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:47:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���;�<g� ,dl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89c3bf83c67c4202c646c","method":"","user_agent":"","ja3":"","session":"31f892ee-58e0-4cb9-9d82-8c16313207fd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cf67addf43422a00","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:42:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����a�F�7�\u0010�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8eced6195469e378510e2","method":"","user_agent":"","ja3":"","session":"9139bdfe-6dd9-4ada-86a5-ecf82800fd22","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a653efcf25e0a01f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:40:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��$\u001d��9\u0004��ĺ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8241d81c13904b0bcc4ba","method":"","user_agent":"","ja3":"","session":"480aa30f-6329-40a4-9f99-b142ed2fe991","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4dfa7a84f90d49c8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:37:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001a\u000b+\t#\u0001�\u0015g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b01a0b2b092301f81567","method":"","user_agent":"","ja3":"","session":"7886f291-835f-41c9-a629-1fd0cb46939f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f55c5ba0d50b1bf1","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:35:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0016%�o�\u0006�A\u001f%","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81625f26fcc0692411f25","method":"","user_agent":"","ja3":"","session":"cbd1de78-1a73-4232-b7ff-107bb76af3e3","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6ea268ca09b947fa","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:33:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001f�\u0002\u0005�mޕ�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ca1fd20205a26dde95b4","method":"","user_agent":"","ja3":"","session":"d57e86e2-daa8-4eb0-ae97-346060940f19","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a3877ba970341d1c","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T05:30:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��f��.3��H1�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b866abfe2e33808b483193","method":"","user_agent":"","ja3":"","session":"be8bcff6-4202-4ce7-8527-3ae9957abb68","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"076044f54f7c341a","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T15:27:09.638887+00:00"}