{"ip":"189.190.224.33","total_events":251,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["251 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,068 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,068 bytes sent","bytes_sent":17068,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-30T01:45:19","last_seen":"2026-09-29T08:27:26","events_24h":14,"events_7d":76,"geo":{"country_code":"MX","country_name":"Mexico","region":"Puebla","city":"Puebla City","lat":19.0324,"lon":-98.2001,"asn":8151,"org":"UNINET"},"source_domain":"dsl-33-224-190-189-dynamic.prod-infinitum.com.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":251}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-30","count":28},{"date":"2026-09-01","count":1},{"date":"2026-09-03","count":23},{"date":"2026-09-04","count":33},{"date":"2026-09-08","count":49},{"date":"2026-09-11","count":26},{"date":"2026-09-17","count":15},{"date":"2026-09-23","count":26},{"date":"2026-09-27","count":4},{"date":"2026-09-28","count":32},{"date":"2026-09-29","count":14}],"recent_events":[{"timestamp":"2026-09-29T08:27:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��?�\u001b�`s��\u0015","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9e03faf1bd36073d7fc15","method":"","user_agent":"","ja3":"","session":"a97a26b7-a4a4-43c7-9db8-14fe04efec94","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"01c689077aa9e8fd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T08:24:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�.R;L.�/02�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb92e523b4c2eaa2f303299","method":"","user_agent":"","ja3":"","session":"396f57ca-00d9-45f7-85ac-ecb4d2ae975e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1f193ff5d10b352c","strings":["BitTorrent protocol","<-UT360W-",".R;L."]}},{"timestamp":"2026-09-29T08:22:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�v\n\biy!D�X�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9760a08697921448658cc","method":"","user_agent":"","ja3":"","session":"bff1530b-8ac0-40d6-b6b2-f7d9ede16e0a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e7c77209e6240e00","strings":["BitTorrent protocol","<-UT360W-","iy!D"]}},{"timestamp":"2026-09-29T08:20:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e����F��m�/�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb997e5c1469a8c6d892fc8","method":"","user_agent":"","ja3":"","session":"4e3913dd-741c-42e8-858f-dc226c38fccb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e6ac32a6c789aa12","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T08:18:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�f�K��f�I+7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb966c04bff8d66b3492b37","method":"","user_agent":"","ja3":"","session":"a2b832ed-0fd8-4b99-8184-f1e65baf82e6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7f6cea4f52f89300","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T08:17:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��\t �C5��hX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb98d09208343359db56858","method":"","user_agent":"","ja3":"","session":"3e552cc5-ee49-44a3-9d46-249fd8b353b5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"22ba914dd27b0361","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T07:28:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�$\f�p\u0001R���\r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9240c867001528abb960d","method":"","user_agent":"","ja3":"","session":"75aba239-a5af-4d52-bde3-d8d73bfad816","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7bef51ae3c529bf6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T07:21:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�M\u0001^[�}� �m","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb94d015e5b9c7dd620936d","method":"","user_agent":"","ja3":"","session":"4b8aa3a5-11e7-4448-b2e7-29559a79e448","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"edf014ce5f143e70","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T07:17:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�'Vp�r׋\u001a4\u0002","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb92756709972d78b1a3402","method":"","user_agent":"","ja3":"","session":"c84fce22-f8d9-4229-8ab7-d331ba75078a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1a4d8a46a680a5eb","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-29T07:14:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�\u0005��ưT�\f�\u0006","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb905fbdfc6b054b00c9406","method":"","user_agent":"","ja3":"","session":"41f67d3c-f383-43b5-af6f-70456f6f8ceb","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6a0c70c9156db465","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:41.801397+00:00"}