{"ip":"189.216.149.137","total_events":26,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["26 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,768 bytes sent","bytes_sent":1768,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T01:56:57","last_seen":"2026-09-21T03:21:32","events_24h":26,"events_7d":26,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Gustavo Adolfo Madero","lat":19.4841,"lon":-99.0957,"asn":28548,"org":"Cablevision, S.A. de C.V."},"source_domain":"customer-189-216-149-137.cablevision.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28548","label":"izzi telecom (AS28548)","category":"isp","url":"https://www.peeringdb.com/asn/28548"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":26}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":26}],"recent_events":[{"timestamp":"2026-09-21T03:21:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u000219�=\r�\u001bu","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ab023139fd3d0deb1b75","method":"","user_agent":"","ja3":"","session":"1046a1fc-1d80-44e0-81ad-14639149f91a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"aabc35cac99437bd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:14:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����\u0019�\t�T�\u0012�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d0c9198809a254e612c2","method":"","user_agent":"","ja3":"","session":"cb7f14b6-fe82-44ba-828d-c8c22cb78e34","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e97c1eda59a48de5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:09:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���υU����Nf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b6cf8555dfc1f2d24e66","method":"","user_agent":"","ja3":"","session":"c5700dd8-1d24-494a-98d4-c0e27267899a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4eef899a4f8406a9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:07:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��L��}/�\u001b�-;","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84cecb97d2fc81b8a2d3b","method":"","user_agent":"","ja3":"","session":"b5e90cb4-4fec-4a49-9d23-8b82d594d604","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"2a760be215f9e05b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:04:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��O!\u001b�\u001f�r\u0011�p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84f211b801fc572119870","method":"","user_agent":"","ja3":"","session":"532263f8-560b-4ba0-8a8c-c5d056a9086e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f997feeefa5315fa","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:02:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�� ��� |jP��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82086a6a4207c6a5095c6","method":"","user_agent":"","ja3":"","session":"cc4d4398-5bc4-4b0e-8751-a9c66d1cd7d7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a0228ec5c9e21bd3","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T03:01:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���^~2T�+�J�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b88a5e7e3254aa2bbc4aa3","method":"","user_agent":"","ja3":"","session":"401d6377-8acd-4d97-ba10-dfe2d1a38763","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a65e9e9c1a59ec2b","strings":["BitTorrent protocol","<-UT360W-","^~2T"]}},{"timestamp":"2026-09-21T02:59:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u001e\u0007:[W\n�O�y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81e073a5b570ad34fdf79","method":"","user_agent":"","ja3":"","session":"12694cb1-0cbc-4478-9f53-004201494765","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"6f8bad1546e89ec4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T02:57:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���}��vF���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8b17d967f8b76468bb2bf","method":"","user_agent":"","ja3":"","session":"72c0b8d7-028f-41e7-960d-a5b11f43f676","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9153197eb579cd49","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-21T02:56:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��A��\\A}����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b84182f55c417d8b8ab4dc","method":"","user_agent":"","ja3":"","session":"fba2b469-fa24-47e3-9d29-71cbc86f8096","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"94b852859b087c72","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:58.921098+00:00"}