{"ip":"200.76.114.109","total_events":112,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["112 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 24,676 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,676 bytes sent","bytes_sent":24676,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T17:00:53","last_seen":"2026-09-15T02:48:02","events_24h":0,"events_7d":107,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Pichincha","city":"Quito","lat":-0.2309,"lon":-78.5211,"asn":263238,"org":"Eliana Vanessa Morocho Ona"},"source_domain":"host-200-76-114-109.fibramax.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as263238","label":"Fibramax","category":"isp","url":"https://www.peeringdb.com/asn/263238"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":112}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":5},{"date":"2026-09-15","count":107}],"recent_events":[{"timestamp":"2026-09-15T02:48:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"n����\u0014\u0011\u0014��CXp��ߏfOc��} [�\u0000���a3�\u0010�ǒ��\t:����Ҽ�\f�n���\nN?k���&�n�m���������Eq�������4{\"\b�W�]��\u0011�DL\u0000�)�rJ�ً��l�C9�ҭ��.\u0004[\u001bY�|�>:A�����d?x\\H\u0012�\r׏","payload_hex":"6e9a9ecfc4141114bbd3435870e5eedf8f664f63f58b7d205bef00b7cedb6133af10bdc792bf87093a8ba59c9ad2bcb00cf56ee1a5fd0a4e3f6bbccfd6268f6e8c6db6d0e3c0f3e094a394457186b387b9a4cbc8347b2208f457ce5da5f711bb444c00a429b8724a8bd98ba3a46c9a4339bad2addbe72e045b1b598b7c873e3a41b1a282c097643f785c4812e90dd78f","method":"","user_agent":"","ja3":"","session":"c5a210db-c865-4f31-811b-b5335a0b36cc","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":14,"enriched":{"digest":"c25f2094f444015e","strings":["d?x\\H"]}},{"timestamp":"2026-09-15T02:46:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-X50Ax4_6Hu0c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5835304178345f3648753063","method":"","user_agent":"","ja3":"","session":"36a7a1e9-0d5f-4a71-aa09-fc8f51fdeb82","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1fd3a7ca80b166f7","strings":["BitTorrent protocol","<-UW160N-X50Ax4_6Hu0c"]}},{"timestamp":"2026-09-15T02:45:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\"F\u0011x \r�\u001c��y(�rq%簷�\u0001�ݘ\u0001�v�\u0017\u000b����\u0000<\b��\u0012�y\t\u0016pq\u0019n�y��9\u0002���C���Č\u0016������5�\u0006�>�`��\bq9\u001a���cIW�=UI�@Ǩ��\"�v����H\u001f)9��̊Q\u001a��7�)A���\u001e��\u0018�\u0019\u001a(�0qi\u001f����ψKx�\u001f\u0001A��Q�+�\u0000�;�Ƒm��\u0002\b�ٳ\u0000\u0006���-\"\u000f�@\u0013\u001a`Js��G��\u0000��o�r\u0005F���\u0018S����f\u0004��d�\u0019�>���6aq���a&","payload_hex":"1422461178200d8c1c8bb77928ca727125e7b0b7d401d9dd9801a4768b170be1e996c2003c089a8f12f07909167071196e8479b5bf390291b38d43b292f6c48c16f29d87c0f18335c006c53e8460e3b30871391a91b7bb634957ca3d5549ef40c7a8b0a422d576b786bade481f2939b5a6cc8a511ab2a437e72941e6f7a41e83881881191a28d93071691f88e195f4cf884b7f78ca1f0141d0c751992ba900ad3bf0c6916d99850208a2d9b30006ed9ccc2d220f8540131a604a73ea9047f8f500d5f96fff72054689dfc01853c1a0b1f2660496fd64d6199d3eccfdf4366171f0f7b76126","method":"","user_agent":"","ja3":"","session":"060bf9b7-10ba-4d26-8a81-e575dca5e997","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":14},{"timestamp":"2026-09-15T02:43:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yiU4_2EEzTMv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d796955345f3245457a544d76","method":"","user_agent":"","ja3":"","session":"07ad5fc5-4783-475d-be41-a04e3ef5c16e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"af8d29133103d91a","strings":["BitTorrent protocol","<-UW160N-yiU4_2EEzTMv"]}},{"timestamp":"2026-09-15T02:42:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"I􃏺�P9s9qܳ�9��\u0011qZ���Kp\u0010A!\u0004e�\fI\fix�#9U)N7>\u0012\u0000��+ƑH���cj}\u0004\u0007���A��\u000e-�ϟ��#�k����sP-cdN�K�����スRn\u001d�\u000f���\u0013��q\u0006\u0016���\n���\u0012�;\u0005M*�5�n�d����\u0016�B����L�\u0002\u001a�bQ�Uӑ�\u0002�\u001b��6w��:\u0017��RZ�'�{\u00060��Qm/�P\u0017���c�dז#�Nl�\u0001�_[g�Y���8)P\u0018�\u001a5�����\u0004�\u0018�3�[�\u0018���\r\u0015�\"A�����Bt��\u0001bm\f\u0014X��\u001a 蟬�B���}>��p{2j�Y���)�KT#e�#\u001eZ%��w��u\u0007\n��#�@��e�\u0018��\u0004�{����%���p","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ac7e3884-1d8a-48a8-b278-9701e888e287","seq":1,"duration_ms":100,"bytes_in":318,"bytes_out":14,"enriched":{"digest":"add31400a86a37b9","strings":["P9s9q","#9U)N7>","sP-cdN","p{2j","KT#e"]}},{"timestamp":"2026-09-15T02:40:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Hd9opT8*f(ct","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4864396f7054382a66286374","method":"","user_agent":"","ja3":"","session":"648abee4-1303-4380-b345-f14f9f4b95c3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"424ab503ca7a07b0","strings":["BitTorrent protocol","<-UW160N-Hd9opT8*f(ct"]}},{"timestamp":"2026-09-15T02:39:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�}�\f[l�\u0005e<a�|�\u001az�}�\"��mGe\u000b�A*��~\t�lP\u0013\u0013�p�O\u0006\f\u001e\r�0�<n�V\u0010:q\u0001���h\u0016\\=\"%cc�<�'��D��5�Q��e�d���ʯ(\u0017ǝ9^\u0006}\u0000��/[��.��Kdi�y���j֑�_�Q~\u001c��y����u�FW͉�|f\u0004\u001eS2_��\u001f��z��g�76�1�[��\u0000��","payload_hex":"987dc50c5b6c8105653c61b57cd71a7aa67d9a22f6a06d47650b83412a9efd7e09a66c501313f770f24f060c1e0def30c33c6ea256103a710183aebf68165c3d22256363a43c9a27998d44f6c535cb5190fd65c064fde3ffcaaf2817c79d395e067d00dfe72f5bfbe42eebdb4b64698979838cd06ad691e75f97517e1c94a979b3ac839075934657cd89fb7c66041e53325fbba21f9a917afce567aa3736ba31ee5bddeb0084ed","method":"","user_agent":"","ja3":"","session":"091b58b7-c811-4119-a31a-34e858d88d0e","seq":1,"duration_ms":100,"bytes_in":167,"bytes_out":14,"enriched":{"digest":"c76693c11cf25b2e","strings":["\\=\"%cc"]}},{"timestamp":"2026-09-15T02:38:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-W*3rL(1eu5bG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d572a33724c28316575356247","method":"","user_agent":"","ja3":"","session":"fa682ff6-ddc1-4958-9485-749f6e54793a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"50e2d287908d703f","strings":["BitTorrent protocol","<-UW160N-W*3rL(1eu5bG"]}},{"timestamp":"2026-09-15T02:37:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���?��Qm�D\t��B\r��W�e\u0015F\n\u0006�$l�w��\u0006��5mY�TO�\u000b=�_7V\u0000�e�{\u001a>}��Q3�ӍW��Src9\u0016W��_��\u0003��\u0012�H�*��Q\u000e�E�-ʇ\u0010�1}�@\u0004���O�<�Y1�A�\u001f�\u0019\u0012ŗ�\u000fѤ���������9#‡�\u0016o�г�\u0014\u000f.�f�3�\u0017CD�`���E��#J<�.G�BQ��D�\u001e�`���^�l�\u0019�M���;���3�\u0002d��F�k�����?\u0014~\u0018ҿ6��D/>Ix���x��zW+\u0018��a(\u001f\u0000\u000b�D��.��O\u001b�v{/��562\u000b���?zq\u000b��\b?�c��+[��\n1H�$\u000e�F�֩̀�\u001aD��\u001c�v�0��+�\u0014z\u0017W_bP<Q%�*��A<OM","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9ca3c561-04c8-433b-9059-fbf33d5cc751","seq":1,"duration_ms":100,"bytes_in":325,"bytes_out":14,"enriched":{"digest":"9ace80b4bb44dcff","strings":["Src9","D/>Ix","W_bP<Q%","A<OM"]}},{"timestamp":"2026-09-15T02:35:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-bfQJtRdNg3P2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6266514a7452644e67335032","method":"","user_agent":"","ja3":"","session":"8f3397af-11a9-41f0-b42f-2211892d8a8a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6205e72b06f4bd8b","strings":["BitTorrent protocol","<-UW160N-bfQJtRdNg3P2"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:09.432537+00:00"}