{"ip":"189.137.208.16","total_events":399,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["399 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 87,129 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"87,129 bytes sent","bytes_sent":87129,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T07:39:37","last_seen":"2026-08-13T05:30:20","events_24h":0,"events_7d":399,"geo":{"country_code":"MX","country_name":"Mexico","region":"Guanajuato","city":"León","lat":21.0905,"lon":-101.605,"asn":8151,"org":"UNINET"},"source_domain":"dsl-16-208-137-189-dynamic.prod-infinitum.com.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":399}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":350},{"date":"2026-08-13","count":49}],"recent_events":[{"timestamp":"2026-08-13T05:30:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-.lUwu6Lz).rN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d2e6c557775364c7a292e724e","method":"","user_agent":"","ja3":"","session":"5c36c7ad-4c11-42d4-8e44-e256d67fb6d9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ea8aaa9514513a82","strings":["BitTorrent protocol","<-qB5140-.lUwu6Lz).rN"]}},{"timestamp":"2026-08-13T05:28:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"B�\u0014P\fC�փ\u000e?\u001f\u0011��M��)�:+m%_\u0003Ü�\u0016ȣf��Q\u0005$�H\u0003���\u001a�F��fd\u0010�2��\u0015�y\u0013,4�.�m��\u001fN'p��\u0015\u0005|��ѥ�\rW>\\Uo�\u0019��������u[���ߊ��r{\u001b\b�9�q�\r�%{�w1��~���\u0012|�(�/S�,e�\u0001�\u0007��#�\u0006SZ��<�ں��]̶�p@�D\u001f!\u0011�,չ���c�&:�����gBs��`\u001dW��\u001e��\u000b�߆K��\u00077^�\r��7\u000b�d��DF�\u0013'7���3[�:U=��\u001ck��=\u0014��:��\u0013)��\u0010s7޶�\u0016-Q!uR�\u0014Wܶ}FN���(��)?'f��A\u001bb��k\f�\u001d��\u0007u��jL�G%�\u0005�IOQ\u0000\u001b�'S��\t\u0016�ٞ�EJ\f��B\u0011��͢\r�\u0016�=ϼ\u0019�\tv�:��;��xa��v�;FU\u000e\bʠ�nDDrY�gY\u0017\u0012oq\u001d�,ø�� \t�����XU����$�\u001cKf\u001biS��Ϝ�#��zJ�","payload_hex":"42e314500c43d6d6830e3f1f11a0b64da3b729f03a2b6d255f03c39cb816c8a366ba93510524994803e9c1941aa946e8d8667f641091329fb715f479132c34972ec26d8a871f4e2770f8a515057cdfc5d1a5d60d573e5c556fd1199194aff8bfd9f6b9755ba7cceddf8adee2727b1b08da39c671e40dea257b9777319aac7ef3cac7127c8728962f538c2c65eb019b0785c323dc06535ab0fe3caedabaa6d85dccb6a77040fe441f2111e82cd5b9bebcd763bc263a9cb2cdeae467427381e6601d578bee1ea9f80ba1df864ba0c107377f5eff0db8a8370bbc64bce34446fe132737a38e8b335bdb3a553dabc41c6bcce33d14d7c53a88f41329a5de107337deb6d3162d51217552c21457dcb67d464ed8e29728a6d6293f2766ef7fe3411b62e6f86b0cb11d95900775d8da6a4cbc4725920599494f51001bc627538fc80916ebd99ed6454a0cf7f34211e4accda20db416eb3dcfbc19e50976d03a83ce3baadd78619ec176bb3b46550e08caa0ff6e44447259c4675917126f711d8e2cc3b8f0b1200987e8d4d6e55855dbd2c1aa24841c4b661b6953afaccf9ca523f1af7a4a80","method":"","user_agent":"","ja3":"","session":"590b0113-8daa-45fa-ae1d-e3a4e681e283","seq":1,"duration_ms":101,"bytes_in":418,"bytes_out":14,"enriched":{"digest":"63933c472663f9ab","strings":[":+m%_","W>\\Uo","-Q!uR",")?'f","nDDrY"]}},{"timestamp":"2026-08-13T05:28:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"B�\u0014P\fC�փ\u000e?\u001f\u0011��M��)�:+m%_\u0003Ü�\u0016ȣf��Q\u0005$�H\u0003���\u001a�F��fd\u0010�2��\u0015�y\u0013,4�.�m��\u001fN'p��\u0015\u0005|��ѥ�\rW>\\Uo�\u0019��������u[���ߊ��r{\u001b\b�9�q�\r�%{�w1��~���\u0012|�(�/S�,e�\u0001�\u0007��#�\u0006SZ��<�ں��]̶�p@�D\u001f!\u0011�,չ���c�&:�����gBs��`\u001dW��\u001e��\u000b�߆K��\u00077^�\r��7\u000b�d��DF�\u0013'7���3[�:U=��\u001ck��=\u0014��:��\u0013)��\u0010s7޶�\u0016-Q!uR�\u0014Wܶ}FN���(��)?'f��A\u001bb��k\f�\u001d��\u0007u��jL�G%�\u0005�IOQ\u0000\u001b�'S��\t\u0016�ٞ�EJ\f��B\u0011��͢\r�\u0016�=ϼ\u0019�\tv�:��;��xa��v�;FU\u000e\bʠ�nDDrY�gY\u0017\u0012oq\u001d�,ø�� \t�����XU����$�\u001cKf\u001biS��Ϝ�#��zJ�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"590b0113-8daa-45fa-ae1d-e3a4e681e283","seq":1,"duration_ms":101,"bytes_in":418,"bytes_out":14,"enriched":{"digest":"63933c472663f9ab","strings":[":+m%_","W>\\Uo","-Q!uR",")?'f","nDDrY"]}},{"timestamp":"2026-08-13T05:25:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-fNJSKh7mxdY(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d664e4a534b68376d78645928","method":"","user_agent":"","ja3":"","session":"3f79f923-7655-4400-b19e-f76ef1d77445","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f7242824611f2417","strings":["BitTorrent protocol","<-qB5140-fNJSKh7mxdY("]}},{"timestamp":"2026-08-13T05:23:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�D���\t$$��h�\u000f\n\u0013���E�[ ���&]\u0005�v��]\r���8���q�����\b�p�� �/��)z[u�\u0012�\u0013�q����-�Ğ��W@�3�-\u0018\u0006.�\u0000bf%�\rF��?\u000f]��}\u0001�����9F{hY�������ߊ�B\u0006zBe��\"��Wz\u001dFh:�Ӝ�����\u000bT`��J2�W1��iL�b��%����uȈ|sq�y�S3�V�Ͱ�\u000e�\fZ-�,�懙\u0017T��\u001b��i~U\u0010ʁX!�d���BS�k�3GmX�\u0015�o�?���[�E\u001f\f\"��\u0012V\u0000�$��K��M�1\t�%�SJh��\u001e�Β6����\tԾ��n�\u0004�\u0019��\u0017���\u001eb��d�?�H�\n��}��\u001a��R�Q�$\u001e���MUR\u0001`NقMW!�\u0018��s{���\u000f\u0005{��\u000bF\u0004\b���\rO\u0006�W��\u0016Z","payload_hex":"e744abcaeb09242486b768f00f0a13ae99b8459d5b209de4f4265d059f76a9a35d0df8b4f23897e89b717fa6d2cbcde2088470c9db20ed2faff7297a5b75a512b3138271b6b08ef72d98c49ebdfc57408033b02d18062eba00626625a60d46d1cf3f0f5d82a27d01fdf3d8dfcc39467b6859acf6c9e089a5fbdf8ab442067a4265eeb722e0bc577a1d46683a8ad39c8afbf8a9f40b5460d7d44a32995731bcce694cc36297ee25ae94ebfa75c8887c7371bc79f05333e256f9cdb0c40ee60c5a2d8c2cb3e687991754a1fa1bfcba697e5510ca815821e964e3f9be4253b96bf633476d58fa15bd6f8c3f89b7b85bbd451f0c22aa92125600e124a9eb4bf2f34dee3109e725f1534a68d8c81e90ce9236d4dcced209d4beff986eda04ed19d4ef17d4ebe51e62c3cf64ce3fab488f0ae7857df7f41aec8852d451d5241e8eacb94d555201604ed9824d57219618ebcc737bbe9c8f0f057bddda0b460408cce3ac0d4f06f7579ecb165a","method":"","user_agent":"","ja3":"","session":"94ad2ac5-93d2-448e-afa9-2f4fce5ee646","seq":1,"duration_ms":100,"bytes_in":361,"bytes_out":14,"enriched":{"digest":"e382eb3dde4e3567","strings":[")z[u","9F{hY","3GmX"]}},{"timestamp":"2026-08-13T05:21:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-VHvvtsMlAuVH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d5648767674734d6c41755648","method":"","user_agent":"","ja3":"","session":"7fcc53f2-afe8-4d66-a66a-11f501a00afa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"81b4d2a3fbf68e30","strings":["BitTorrent protocol","<-qB5140-VHvvtsMlAuVH"]}},{"timestamp":"2026-08-13T05:19:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"_\u0018�x���ԯz9�\u0010\u001d\u0016\n��Y �)[���u@�\u001e�X�\u001f\u001d��%��m,�\u0002\u000b[\u000b[����$\u000f{\u0010Ɛ��b�\u0002ҿM�09S�X�^�\u0018\u0010\u001b��\u0017�?�(\u0007�d'�\u0018����0���P\u0013\u0012xgV\u0015{�\u001b�~�P�T:B���تТ��<Ӟ�3\u0014\u001d\r�}n\u001d'ӲU�Tz+����w�\r��&�?�&�˸[\u00068�5hn2�-\u001e�\u0007�^P%\u001c`���+_���&08\u0000U��]�v=\u001b>���ͪ�4N�v�9$��c\u001ba�ļ�.\rW3��$[�=e&������^eC\u0018��\u0018�\u000f\u0014t��$�\u000be�\\/�{�U�,�ƪ�>��C�!\u0010X\u0011��a��!���G�Ay�7\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7369c046-f6af-4c05-b353-4464628a57b2","seq":1,"duration_ms":101,"bytes_in":299,"bytes_out":14,"enriched":{"digest":"c2ec1ffe42237713","strings":["5hn2","&08U"]}},{"timestamp":"2026-08-13T05:16:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-zNuUVTekYfvl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d7a4e75555654656b5966766c","method":"","user_agent":"","ja3":"","session":"c0dbe826-6a84-44d7-aa46-649dc4b1a872","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"16f3725d95035c27","strings":["BitTorrent protocol","<-qB5140-zNuUVTekYfvl"]}},{"timestamp":"2026-08-13T05:14:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\tަi�\u0007qM9V!�އ7`8�Ҥ�W�%���������t�\u001e8�.dt\u0006DŽ�2�\u0011��p����q\\QE\u0001w�F���+��Ҍ}f������&����3F�;�l��\u0017�'��Z`�\u001d��z\nn�s+a�Yx��K��LR7�-�\u0006Di��3�10��\u0001��$�+�W��o\"'C!�B6`l�6hH�H�\u0002*","payload_hex":"09dea6699107714d395621b2de87376038bed2a48857d125baecc2f0d1edbfcafb74c01e388c2e647406c784cd32bd11b19070f2effea9715c51450177e4469eabfa2b9590d28c7d66b18d80edeab726a0bfc6e13346fa3b866caa9617a427ecea5a60e01da4de7a0a6ee1732b61bc5978b0814beabc4c5237df2de8064469f786338a3130b2e401a5f8249c2bf35795a86f22274321804236606c96366848a848d6022a","method":"","user_agent":"","ja3":"","session":"f8a82b5c-c251-4890-a607-ec77fc72847b","seq":1,"duration_ms":100,"bytes_in":164,"bytes_out":14,"enriched":{"digest":"6067ba9a3a8faf6d","strings":["qM9V!","q\\QE","o\"'C!","B6`l"]}},{"timestamp":"2026-08-13T05:12:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5140-zFKmR2NtuJAj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353134302d7a464b6d52324e74754a416a","method":"","user_agent":"","ja3":"","session":"1cf7884a-318f-49e1-a485-afcc9c9bea65","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4a738e64009740b1","strings":["BitTorrent protocol","<-qB5140-zFKmR2NtuJAj"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:05:36.039646+00:00"}