{"ip":"191.99.55.181","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,816 bytes sent","bytes_sent":2816,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T23:38:41","last_seen":"2026-10-01T23:52:06","events_24h":0,"events_7d":12,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Azuay","city":"Cuenca","lat":-2.8976,"lon":-79.0045,"asn":27738,"org":"Ecuadortelecom S.A."},"source_domain":"cgnatgpon-191-99-55-181.customer.claro.com.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27738","label":"Ecuadortelecom","category":"isp","url":"https://www.peeringdb.com/asn/27738"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":12}],"recent_events":[{"timestamp":"2026-10-01T23:52:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"L&H`+K����\u000e��y�\u0015K�G�j�������#ѝ�����\t���T�%x�!�g\u00175�\u0018aJ�kT\u0002�=��,\u00002��p�L#R�D��b(\u0015�nB\t�\u001b*��\u001bjR2�D���(Jk\u0007n/�Da\u0017\u0014S\u0000�|�p�\u001f\u0005����\u0018�x>0\u001d\u001eZ�e�'�p\u001dX�YWg\u0000ڑ\u001aLx\n�\u0018���H�\u0006B�\u0016kdR��\t��c���\u0006x��:�Z[��F��%U�vb��h\u0001����\u0017R�CQO��IM3�2\u0011\u0018\u0012�)���Mr��*�\u0011�y�O�\u0015G}�Q���\\뤷a}YٵR�4���[\bb��\u0012Q��&t��O�C\t����|mN����5�ڔG�h�p �gD�������f)�]ܟ�5s�#\u0000؍\u001c��\r�Dg��E����|�i\u0013�Sm�/ѓ��\u001a�\n�\u001b5�&A���������\r�;�-%\u000f\u0014AN�J�\u001b�G����X\u0016`=���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d6ec7fbb-7a69-44d6-9348-d42c2f10cb32","seq":1,"duration_ms":100,"bytes_in":390,"bytes_out":13,"enriched":{"digest":"d10134259ac82d97","strings":["L&H`+K"]}},{"timestamp":"2026-10-01T23:50:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-)-jW2z.UT(pH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d292d6a57327a2e5554287048","method":"","user_agent":"","ja3":"","session":"beffb835-fc35-4ab4-88b2-0d9dfbc3d577","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6be940d9fce2aa07","strings":["BitTorrent protocol","<-qB5240-)-jW2z.UT(pH"],"iocs":{"domains":["jw2z.ut"]}}},{"timestamp":"2026-10-01T23:49:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0002��\u000e�\n��i�ayw���dh\u001b�RX�pj�=Mk�B^`QR\u0004��#�\u001d\u0006��\u0014����@4�\u0002��\u0015 �S�\u001f=Q�\u0019��^�G�+\u0010\u0005Ъ�A)�]��\u000e���\u0019�o��\u001fR�8���\u001b����e3 �t�T�$��M�k�0�@g|�\u0005�M�&�g�����y�:m\u0011yO��\u0002\r�v��)/�˖,\"�~\u0006�É�?�(@9p�V��b\fKF�\u001d���O�0�\u0007x����F�(��.�������\u001d+��M��\u001c����\u0015c��\u000b`\u000eCfT��]c�d+q�xD���ŧ\u001dl\t�\u0011\u0000\u001dد��\u0013xɉH�,\u0015`�\u0007#ǖ\u0007\u0010��N�Y�q_�K�Br�0��l$b��[��\u0011\u0006����cզ��\u0013�6\u001e�Y��a��Z�)�\u0012ԥr=Q\t�\u0004��\u0004��N\u0017$\u001aԞ�\u001axqW�����������P�\u0004Y�a߂�8�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2b586969-3dc9-49d3-b18c-602f7a007e4d","seq":1,"duration_ms":100,"bytes_in":377,"bytes_out":13,"enriched":{"digest":"a09b1e7f4aa58e9b","strings":["B^`QR","(@9p"]}},{"timestamp":"2026-10-01T23:48:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-1Sr0p4Ndx((e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d3153723070344e6478282865","method":"","user_agent":"","ja3":"","session":"27844d95-fc71-4b8c-93bd-24a01325fb39","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"076038cc55777556","strings":["BitTorrent protocol","<-qB5240-1Sr0p4Ndx((e"]}},{"timestamp":"2026-10-01T23:46:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001c����i\u0012�\u0002��k�\u0003/�9z+�����rB�3N�S>!9�n\u001b�\u0018��@ \u001f_��$���J\u000b/\b��ə.\u0003��\u001f�Rf_\u0007�Q���N_�#&��xnG^�\u0019� �\"�}�o����\u0019\u0012!'�h�2�.�ޠ(\u0019Z\u0016/���Aχ\u0013�\u0000�=�j0��i�@��T��er�9�T���>Id0��g\u0019���\u00039\f�\u000f!qK�^\u000e�%�y1��v#�\u001c�\u0018�9\u001a~�;�\u001b��8�Ql���F�t$�\u001a�\u0013v�\\��EK����\u0016�\u0018��0o��؋��3��s�\u0013��23\u0002u���\u0000���X���i惣$W�b\u0016�\u0012�\u0016�g\u0005�\u001b�h�ӛ� ���\u001eo#�\f9>�>�\u0015\u001b^�4�)��\u000b\u0001��-]\u0001�r���\u0007�g\u0011-\"\u0016\u0013i���$�ue�\f�P�/\u000bg���\u001c\u0010��]��œ%�e��\u0014�\u0004�\u001e���}����\u001e��h<�@���\u0005�w��\u000541�N:�m�\u0004�\u001b�?�|��[����)x2RG��`���Ⱥ\u001a�Tc\u0019�G���[�\u0000.�`\u001c�c��<�b&�@�XE\u001c�:�����\u0005I��-�","payload_hex":"1c93aed4c06912eb02bfc86b93032fe2397a2bb3d6d0fcf77242d6334ed8533e2139f46e1bc7188bdc40201f5fa9e5248786e64a0b2f0898d0c9992e03cef91fd452665f0794519bc5d04e5fe32326c186786e475e8b19fa208022a37df16f97e5c3e1191221279168cd32aa2ea9dea028195a162ff18c9b41cf8713b400923d836a30b0fb69e640acff54fece6572cf39cd54fea6de3e49643085f267198197cd03390ccf0f21714bdc5e0e8725af7931c3ef7623931cb518b2391a7ecc3bbd1bf6de38fd516ceeb0d646bf7424e41ae91376b05cd8e5454ba3e3f89f169718f0a0306fac85d88b86ed33e7aa73c013d8db3233027589ffbd0082f08d588ed8ce69e683a32457af621694129716ac6705e71b96688cd39b8820f38eec1e6f23fe0c393ea83ee2151b5e8234f7298bf40b0196fa2d5d01e472a8e38e7f07f267112d2216136993969724fb7565910cce50f12f0b67b7c0f61c10eacd5de3fcc29c25e365d0f414f904c31eeee6f67dd0febf9b1ee3d9683cc3409af1a205cc77e1f1053431c64e3aa26d8504f81ba63fbd7cbbec5b9efbb09a2978325247ffda60afc5f6c8ba1a8b546319d247b699895be2002e87601c8d63c0b03cdb6226c840a758451c833abdc9f981fd0549d2f42d98","method":"","user_agent":"","ja3":"","session":"b4343dac-3d7f-4ce5-9867-3e0eed9268d3","seq":1,"duration_ms":100,"bytes_in":466,"bytes_out":13,"enriched":{"digest":"34ad1fdd3253edf9","strings":["S>!9","xnG^",">Id0",")x2RG"]}},{"timestamp":"2026-10-01T23:45:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5240-~BVri-Hw0OkM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353234302d7e425672692d4877304f6b4d","method":"","user_agent":"","ja3":"","session":"33c778d2-ff88-40e6-bb92-018a37939e0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8d9f0976447c983e","strings":["BitTorrent protocol","<-qB5240-~BVri-Hw0OkM"]}},{"timestamp":"2026-10-01T23:43:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��o�\u000f��\u0000�����i\u000b�\r���\u001b\"2���C���v���\u001f�S�