{"ip":"193.30.14.140","total_events":214,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["214 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 44,160 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"44,160 bytes sent","bytes_sent":44160,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-14T17:15:00","last_seen":"2026-09-21T01:08:33","events_24h":18,"events_7d":214,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Manabí","city":"Manta","lat":-0.9444,"lon":-80.7356,"asn":263238,"org":"Eliana Vanessa Morocho Ona"},"source_domain":"host-193-30-14-140.fibramax.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as263238","label":"Fibramax","category":"isp","url":"https://www.peeringdb.com/asn/263238"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":214}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-14","count":73},{"date":"2026-09-19","count":51},{"date":"2026-09-20","count":72},{"date":"2026-09-21","count":18}],"recent_events":[{"timestamp":"2026-09-21T01:08:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"u`�P\t�\"Ǥet��\u0006#L�h(\u0007���>�Û�?t�?�H\u001c돜�K+\u0007\u0019\\'^\u0001'��;�y�N;��jI�c\u001e�ѐ��_����� aZ��8֚��!�Z��Rɤ�������<��","payload_hex":"7560be5009ce22c7a4657489d906234c876828078abcaf3ee9c39bec3f74f53f86481ceb8f9cfb4b2b07195c275e01278f9c3bf079f84e3b8af76a4993631eb2d190a6c65f92fb9eddfa20615ad9f538d69a80e921fa5a81b352c9a4e0c4c1e392c0a03cecb9","method":"","user_agent":"","ja3":"","session":"c0995487-a6a1-498f-b2f1-6d8ff3cc0cc9","seq":1,"duration_ms":100,"bytes_in":102,"bytes_out":13},{"timestamp":"2026-09-21T01:07:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-w6((aKRCqXW*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d77362828614b52437158572a","method":"","user_agent":"","ja3":"","session":"fd503000-4480-4531-ad6d-4a57366b5f7f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a51585174db20d5e","strings":["BitTorrent protocol","<-UW160N-w6((aKRCqXW*"]}},{"timestamp":"2026-09-21T01:05:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"u�\u0005q�/\u001d�\n\u0010\u0010�����\u001f��\t\u0018��B\u0018�1�&�']�� ��?͏�!�\u0005a�_M\u0018\u001b\u0007#\u000b��p\u0000p%)�W�\u001d\u001d^U�hl*��1��W��7��5T�N1�\u000f�)�A���;��\u000br��\u0003\u0004�\u0015�<�f�ׯ�}r\u0019\u0001�\tX{?L\u0005]?��/\u000eo�<�u3m\u0005���.���J\u0004�%�2\u001e�ᑣ,�+\u000eA\\B�uT�b\r��Ӫ;>\u0002��<\u0002�I.�P���c|��c\u0019Tj\u0012\u0015a�hA�J3\u0018����Ұ\u0019��\u001bb\u001a�C��J��$�\"�@�\b�����\u0003���qR\u0012\u0013��kȩ�0�J\u001a�V���Rקq��g�M��ޗ-�BN\u0011_~��\u001a8�\u0012��\u000f֍\u0014�wGb�J��?B]��)�aίD\u0013�IՆ����u��P�[�^\u001b�����\"f\u0005��z��؟���\u001a/(.�\n*-���G���aE���s���7�\u0019��]H�\u0003X\u001d�7�i�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c3e0f45b-eac9-4166-bd6c-9ed07d8dea95","seq":1,"duration_ms":100,"bytes_in":395,"bytes_out":13,"enriched":{"digest":"ee5ab2767fe0382e","strings":["X{?L","pp%)"]}},{"timestamp":"2026-09-21T01:04:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-ra45k)Cuh.Ga","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d726134356b294375682e4761","method":"","user_agent":"","ja3":"","session":"c5181262-a254-4e0b-b84b-a04b0dcc3374","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"731a7a3f4ad4d068","strings":["BitTorrent protocol","<-UW160N-ra45k)Cuh.Ga"],"iocs":{"domains":["cuh.ga"]}}},{"timestamp":"2026-09-21T01:03:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005l�Ȋ��\u0004F�\u000f��[)�?Z \u000f���\u0010��p�\n�x8�̎(͠�����>��H�N���3E1=2<g*�{�p��x��o\t�P\t�4P���(�<������\u0015�uU[�S�\u0005�/���m�}��&�\u0001��z�dI85��\u0002�\ncX�\u0007�W���\u0004���\u0001#G9�@7J\t�jH,L���8@Ok}�\u001c�-�\u0016^3����\u000b�Z�\tcCS�\u001bV\u0001��\u0012C� i&�J�\n���,��B3��\u000f��\u001d:�@��z{�X�/Jv�|�9��u�Rw�9L��|e_�N޷� \"\u0004]\u00136>c�cO�\u001d)��3\u000b���_5p��jǾV��_+����J��\u0001UvP�\u0014s�_�R�{[\u001c����S\u000e�7��?|��������\tX�2�S��J�i\u000f(\u0003���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ea94fa01-8506-4385-9b80-a7a5a40a8dd1","seq":1,"duration_ms":100,"bytes_in":341,"bytes_out":13,"enriched":{"digest":"818c10a258c69065","strings":["3E1=2<g*","dI85","8@Ok}"]}},{"timestamp":"2026-09-21T01:01:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-r~JlWigNq-GP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d727e4a6c5769674e712d4750","method":"","user_agent":"","ja3":"","session":"bb78f08b-bb10-49c6-803b-a734466a4e47","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b880fe36bd7f0e82","strings":["BitTorrent protocol","<-UW160N-r~JlWigNq-GP"]}},{"timestamp":"2026-09-21T01:00:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005�PLkE�o9 v�P���S\u001c�jh����\t\u000f��;��/�S�\u000b�\u0010ֶ\u0013!\u0016�H�z�A`r���zP������l��L\u0012�m!J�z\u0014i�F`!d�\u001c0\u0016��է��\u0014ZI\u0004i\u0005k�vWn\"�쌅�ʛ\nM�np�s�.\u0003��Lm�\u0018\u001eM*�\u001f���%���|��.jЉ�C�0].�\u0015��HG�G��?5��\f��\u0004�̛�Џx���_\u0017\u0015 �\u001b�U���M�\u0011OS��m3��<� ,���P�\u0006�f~���n9\u001f\u0016� \u0006��ɻ�6�\u0016��]�LQUl��j�z�\u0014gR0\b����bo\u0001��Z.E�L�\\y���z�X\u001e�x ��\u001f��i/Ǎ\"bN/��\u0018�9ݏni,a\\yo��Iş4�G�X�{\u0000t��#�4{\u0004�h�Sc�j�\u001f�QhVF\u001f�/M���üV|7_�5K?j�\u001e�\u001b��-�/\nIz\u0001\u0007��T��\u0014�\u0006f����ұ�H�_�Q@\u0017��\r&�\u0001\u001d.h��r����U\u0017�\u000fI�qf�v�\u001e���ȣ�]p\r\u001b\u0001�\u0016ɱ��4��h��?&x�$�p?!0?aj\u0004\u0015ԇ��,#\u0001��\u0015*C_c�M{��r����5d?�����%��~\\�&@\u001dg\u0001��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7c164720-3e06-4b42-9240-e35a7cfc5e71","seq":1,"duration_ms":101,"bytes_in":506,"bytes_out":13,"enriched":{"digest":"84cf1cb630ed7841","strings":["PLkE","o9 v","F`!d","vWn\"","LQUl","\"bN/","ni,a\\yo","QhVF","V|7_","5K?j"]}},{"timestamp":"2026-09-21T00:58:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6_Hb0omi9fpU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d365f4862306f6d6939667055","method":"","user_agent":"","ja3":"","session":"8230e748-f9e0-4a0a-a9af-af3557c6371b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"3513b1e072b721fd","strings":["BitTorrent protocol","<-UW160N-6_Hb0omi9fpU"]}},{"timestamp":"2026-09-21T00:58:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���C�-K�Z\u0004\t-J�;3�Y�!�\u0005�{\u0014�\u001d���N95�:�\r%\t�K�Hw\n�0h�l=�^���o�*�2.��l�VU�€~�O����t�\u0014��]\u0004\\Κ��J\u001e�\u0010�X\u0003oĸֹ\u001c�D���Ey\u0006�Gu����\u0019��䆺<�\u0019 �\u0012A�ʕ�q�F\f��@���\"�I���\u0017�c�I���\n�yTކ�4�ޤ�]���\f\u0015�e@N���\u000fC\u001c��C\u0014@~�-\u001b�%tC�R�\u001d��+�6�֓ \u001bw�\u0016�,��q'\u0001��ʡ\u0006�\ruW���ȓ!�\u001d�O�rh2L����-U�\b� ��\u001d&��r�L\n���\u0005�S�F�e%8�_\b�vt6\u00150W�\u0013�N%E\u001d�4���W\u0006\bsɱ�b�X��O�Gn�j2�\u0004�\u001a1\u001ajA_�I#R[)69M0���_E�1���g�\u00114���\"","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"926985a7-7600-4ef9-841e-ce729a556d19","seq":1,"duration_ms":101,"bytes_in":359,"bytes_out":13,"enriched":{"digest":"9dfaa0e199ca7c45","strings":["rh2L","I#R[)69M0"]}},{"timestamp":"2026-09-21T00:57:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Dag2~KUFOU-*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d446167327e4b55464f552d2a","method":"","user_agent":"","ja3":"","session":"a3c050c2-dd26-4c65-9563-df40a67e6f79","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7be7948603cc3a72","strings":["BitTorrent protocol","<-UW160N-Dag2~KUFOU-*"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:55.985443+00:00"}