{"ip":"189.203.105.132","total_events":289,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["289 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 19,652 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,652 bytes sent","bytes_sent":19652,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T04:18:11","last_seen":"2026-10-02T01:17:52","events_24h":0,"events_7d":289,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Miguel Hidalgo","lat":19.4499,"lon":-99.1731,"asn":17072,"org":"TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V."},"source_domain":"fixed-189-203-105-132.totalplay.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as17072","label":"TOTAL PLAY TELECOMUNICACIONES AS17072","category":"isp","url":"https://www.peeringdb.com/asn/17072"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":289}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":273},{"date":"2026-10-02","count":16}],"recent_events":[{"timestamp":"2026-10-02T01:17:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�}�z!�(\u0010�˃","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb97db07a21c82810f5cb83","method":"","user_agent":"","ja3":"","session":"7c3a2409-34f9-42ed-aa33-cfbd53f2a1db","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9e90112cc7aa5222","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T01:11:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�F��'�g\u000e$q\u0005","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb946faaf27c9670e247105","method":"","user_agent":"","ja3":"","session":"8803d340-aed8-4c76-aef1-e44af0e66481","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9398793b0f9725ac","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T01:06:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��+�Ǚ\u000e�_��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9f42b8cc7990e875fb9b8","method":"","user_agent":"","ja3":"","session":"1439a215-90d7-40a8-9d09-2b4fd60543aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b8fd473b3c8a9f65","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T01:03:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�s����R\u000fLw�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9739b89b2e9520f4c77b4","method":"","user_agent":"","ja3":"","session":"0b4c34a4-6f11-4b20-90e3-99981fcac64b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b5af5457c027f943","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T01:00:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�A��O\u0007\\~�FU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb941abd44f075c7e914655","method":"","user_agent":"","ja3":"","session":"9eb4813d-1ac0-4fda-b152-004f875ba43c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"48ee32092a248f57","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T00:59:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��\u0007���'���>","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9f207e59af727b0f08b3e","method":"","user_agent":"","ja3":"","session":"642fb842-f5f9-4b48-9bc1-5bb95001fc1e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d5efc519cadef06a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T00:57:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�_?���L/dc\r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb95f3fcdf6b14c2f64630d","method":"","user_agent":"","ja3":"","session":"2ea3837a-96ef-4cd3-b231-54a0a2e49147","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"31d0c926a53ecf9f","strings":["BitTorrent protocol","<-UT360W-","L/dc"]}},{"timestamp":"2026-10-02T00:56:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��ۙr��P}҆","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb98adb9972b2a4507dd286","method":"","user_agent":"","ja3":"","session":"be34cc1d-77da-42ea-8369-ee54d1f5a679","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c09b3a50aa4b9e22","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T00:54:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e��ـ6�\u0006��G�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb9fad980369f06ef8147a8","method":"","user_agent":"","ja3":"","session":"d474e451-dfd4-4d84-aea2-387ec5a63202","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b3ebf28a2f6943a8","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-10-02T00:51:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-\u001e�k���,^\u0004f�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d1eb96b89c6f72c5e7f046692","method":"","user_agent":"","ja3":"","session":"b182400e-cf95-4630-aa36-e2188e964597","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"501ab2b0c0445fdb","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-04T22:07:47.531919+00:00"}