{"ip":"157.100.198.43","total_events":213,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["213 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 14,484 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"14,484 bytes sent","bytes_sent":14484,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T20:25:41","last_seen":"2026-08-17T22:20:26","events_24h":0,"events_7d":213,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Guayas","city":"Guayaquil","lat":-2.2038,"lon":-79.8819,"asn":27947,"org":"Telconet S.A"},"source_domain":"host-157-100-198-43.ecua.net.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27947","label":"Telconet Ecuador","category":"isp","url":"https://www.peeringdb.com/asn/27947"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":213}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":8},{"date":"2026-08-15","count":26},{"date":"2026-08-16","count":21},{"date":"2026-08-17","count":158}],"recent_events":[{"timestamp":"2026-08-17T22:20:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����N֞��Y\u0002�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d8dd4ed69efdaf5902aa","method":"","user_agent":"","ja3":"","session":"d6dc8443-392e-45e2-b4ee-906b48fd9b7b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a045d776b48e74c0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:13:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0011@��e5��\t","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e511408ba86535fda709","method":"","user_agent":"","ja3":"","session":"582e7e0b-65e1-4b15-8f40-27db3d3f6ee3","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2f1487d414459da2","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:09:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��M���\u000eY�D�\u001d","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84db183bc0e598144921d","method":"","user_agent":"","ja3":"","session":"81499757-ab04-416a-97e1-7b820f81c93d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3eecfe44d0558597","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:06:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�������\u0002����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b493a591d10299d8f3fc","method":"","user_agent":"","ja3":"","session":"791fc45b-71e6-4948-8443-608e8fef35d2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"14bf2af17202a3ee","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:04:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��~��\u0017os�\r��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87ef38b176f73dc0d90d4","method":"","user_agent":"","ja3":"","session":"2295276f-bd66-4e87-8d33-e5463b84cf21","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f7f9cd18fea54d8b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:02:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\"z{\t���\t�\u0011","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8227a7b0982a4ec09a511","method":"","user_agent":"","ja3":"","session":"15bc3182-0a50-4799-b848-dd81458dbf9a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"99860a4666a4eef4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T22:00:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���Hs���\b\u001b��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8bc4873c1bcc2081ba7d8","method":"","user_agent":"","ja3":"","session":"5b619b71-2eb5-4068-966c-c8f16d484ab9","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"efa9540acee6f5c4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T21:59:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����S\u00066�\t�-%","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8efdb530636d909e52d25","method":"","user_agent":"","ja3":"","session":"2ceaac87-7e8d-4cfc-94ee-274ade9ef0d3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"535e6ef9044b52e8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T21:57:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��u�Rf)y����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8759552662979b3f8dcc2","method":"","user_agent":"","ja3":"","session":"1f7c7740-85e1-43bd-8c0a-2c93d498299a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b4c2b293533e17eb","strings":["BitTorrent protocol","<-UT360W-","Rf)y"]}},{"timestamp":"2026-08-17T21:56:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\f��\u0015_�ew�W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b80ccae0155f986577ed57","method":"","user_agent":"","ja3":"","session":"ca4ae5b4-60bd-4c4b-b197-83f055c93420","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"28fbd35fe979c470","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T15:27:09.126618+00:00"}