{"ip":"200.76.114.192","total_events":290,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["290 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 62,053 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"62,053 bytes sent","bytes_sent":62053,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-11T16:15:25","last_seen":"2026-09-14T23:15:24","events_24h":0,"events_7d":96,"geo":{"country_code":"EC","country_name":"Ecuador","region":"Pichincha","city":"Quito","lat":-0.2309,"lon":-78.5211,"asn":263238,"org":"Eliana Vanessa Morocho Ona"},"source_domain":"host-200-76-114-192.fibramax.ec","known_scanners":[],"scanner_tag":{"key":"peeringdb:as263238","label":"Fibramax","category":"isp","url":"https://www.peeringdb.com/asn/263238"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":290}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-11","count":132},{"date":"2026-09-12","count":62},{"date":"2026-09-14","count":96}],"recent_events":[{"timestamp":"2026-09-14T23:15:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-~C9-4ED)Ujsm","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7e43392d34454429556a736d","method":"","user_agent":"","ja3":"","session":"466acfbd-bbbc-4236-bdaf-9ee017d726ac","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"50695e309d45a2bc","strings":["BitTorrent protocol","<-UW160N-~C9-4ED)Ujsm"]}},{"timestamp":"2026-09-14T23:14:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"=K�0�C����ώf��o� ʪU8U�S�L�!�ܺ\"a��\u000bV\u000fp\f\u000f�\u0005݌S4$��~\u0017�f#�P0��s���:B�g��?Ǟ\u001d=�l�\u0013?ݦ��\u0016����μx\u0000B�Cb-#\u0004\u001e�y~\u0017f�f��#G��4Մ(eJ�$��ucn�\b\u0001�\u0003�x4)�\u0000Zx��\u0003ۯS<��M�l�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2c8ade01-3672-4dd5-9367-00ddaaeb53cd","seq":1,"duration_ms":100,"bytes_in":286,"bytes_out":14,"enriched":{"digest":"64ff554b40439a60","strings":["7]2;","zr|Z","x'YW","Xs.>"]}},{"timestamp":"2026-09-14T23:09:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-z3dKh-hV)FSU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7a33644b682d685629465355","method":"","user_agent":"","ja3":"","session":"c3fb2788-ead2-48c8-b6a0-60cd7af682cd","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"84d30467f8540dd9","strings":["BitTorrent protocol","<-UW160N-z3dKh-hV)FSU"]}},{"timestamp":"2026-09-14T23:08:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\\\u0013a��z�\r���y\u000f�a�\u0003��k1�\fpO3a]�Q\"��f������KD\u001b)ę�.\b!\u0016���L��ed��1_gq\u0017����\u0002�\b��a��D\u0010*G�9̜��������\u0012ۑ��5�\u0015�dӻ�lp���Z����X \nj)��$ΰ�m����\u001305�d­d\u0013Z[����\tE��N`��͹|\u0016\u000ex'��r��\tRA�D$\n�w\u00110RJ��\b{H�y� �J��\u0016!�CC\f�azq�\u0006�b�#\u0018�\u001d��Tb�Ƌ_�;7�(�X�ƳD7\u001f���\u0013\u0019Ţ\tK�`e�Q�y�n�)m��\u0007\t�u9T�o-Iz>�<NJʱ\u0017�\u001f�\b�' ��\u0012F{48 JMO�U��\u0010�\b�!�2�)<�3�M�X0��ҷ���\u001bU$Ў�=�T�1�c�E�@.\u00155`��]�\r1��H�K�\\�\fعK�Fݺ����\faa\u0019+�\u0004��\u000b\t\u0013D��2��\u001bQl�\f̓�hm��,_���\u0007���\u0011��ˡ��\u0001\u000e���|��<�P���㕫=�\u0010t�T�Y.���\u001e ��b�k|T�P:\u0013�}���.O$��P�cvs�2<\u0014\u0013_�\u0007ѷjV~�#w�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"60aac6f3-82f5-46e7-93a3-359bde5080e2","seq":1,"duration_ms":100,"bytes_in":510,"bytes_out":14,"enriched":{"digest":"b83b0a43cd1e9765","strings":["pO3a]","1_gq","o-Iz>","F{48 JMO"]}},{"timestamp":"2026-09-14T23:07:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-(L*3R1))g-G8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d284c2a3352312929672d4738","method":"","user_agent":"","ja3":"","session":"b9ed24c9-0cac-4694-9146-c5324197126d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"79d6cd60afd74c45","strings":["BitTorrent protocol","<-UW160N-(L*3R1))g-G8"]}},{"timestamp":"2026-09-14T23:06:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�>Jf�\u001e���\u001a�T���'%��\u0015>ߒ�p\u001dG^�\u001eZ�TK�E\u0000M�\u0006LpBV,�xmԱ\u0016��@q Nx�Mg$��ʣ�r\f`���_�Y0�3�ٮԀ�\u0001�9�ѯ����\u0019�umK\u0007�\r;�R6>�ͺ�\u0013�\u0003��\u001b�'\u001d*z,Ä�O���P�\u0017\u000e\u0007��$N�<_5�ɨ0�r�͟u�Q�\u0010��v�\u000e�j-�\u0015��}X�0�@D�7�@|��\u0011a���\u0011\u001cW���qRK\\\u0010ߢ�\u001f\u0018IB�\u0000\u0000�����ߣ��9�_J1�`��S\u0015^�\u0005t\u001a%@^�^�\u0003=`-H�91���\f\u001b�g�����v��SN\b\u001eQ�.�-�����Զ�_�1�o��\t\u0012��W�+\n\u0001Gv`��9'N�=","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e06d2da2-bea0-4ca3-945b-c4e893c994c9","seq":1,"duration_ms":100,"bytes_in":450,"bytes_out":14,"enriched":{"digest":"d8473382a9de91a2","strings":["hoas","xL%-","?/7)","w=bk","LpBV,","@q Nx","qRK\\","=`-H"]}},{"timestamp":"2026-09-14T23:04:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-xYyeD_HUUKIe","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d78597965445f4855554b4965","method":"","user_agent":"","ja3":"","session":"53a89f87-61a1-42ce-8f5d-1a141ba389cb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1b41d32ca96a163e","strings":["BitTorrent protocol","<-UW160N-xYyeD_HUUKIe"]}},{"timestamp":"2026-09-14T23:03:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":">�Qf�G���W��\u0012�\u0000\u001c\u001ef\u0010�m�Fn$�\u0018=A*\u000b�\u0005�K\u0007�yU\u001d�\u0007��l��rd�����\u000bc��%����9�ʆhG\f�a�\u0007\u001f*Z�uoL\f'8)S�\u0015� H݅'\u0013�l����2L<���IZ�\u0014\u0013��~��>��\u001f9��\u0001�a\u0017\u001b>�\u0017�)\u0011(���}��E>\u0014M�����UgN��;�������A�r�4���r\u0005>jvz(0\u0017�������-\u0001������\u0016l�p���M��9���\u0019:�dSz\rc\u00169��E���Q���m,фO��f��,�ͻ��\u0001�\u000b�4\nX\f�~\u000b��+\u001a9�\u0019� U؊\u001f��Tssjvz(0","Tss