{"ip":"189.216.149.9","total_events":23,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["23 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,564 bytes sent","bytes_sent":1564,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T19:43:17","last_seen":"2026-09-17T20:44:23","events_24h":0,"events_7d":23,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Gustavo Adolfo Madero","lat":19.4841,"lon":-99.0957,"asn":28548,"org":"Cablevision, S.A. de C.V."},"source_domain":"customer-189-216-149-9.cablevision.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28548","label":"izzi telecom (AS28548)","category":"isp","url":"https://www.peeringdb.com/asn/28548"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":23}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":23}],"recent_events":[{"timestamp":"2026-09-17T20:44:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��p��5�(nk[�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87084fc35b5286e6b5bc0","method":"","user_agent":"","ja3":"","session":"c9166b50-9ce6-41f8-9d0d-9618f6e42998","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f2b77f7ab9d54a2d","strings":["BitTorrent protocol","<-UT360W-","(nk["]}},{"timestamp":"2026-09-17T20:37:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����t��\f+ϟ\u0005","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89bff74a2f90c2bcf9f05","method":"","user_agent":"","ja3":"","session":"3a6bcb7f-7d8d-46e6-ac8b-7f006c85d067","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"103a7eca09e1dda2","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:32:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��)\u0013.4Ա�3�\u000f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b829132e34d4b1e533b30f","method":"","user_agent":"","ja3":"","session":"8c916fc5-f2cc-4e33-adbf-8ba850977eea","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8ac8614c93bf9a2e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:29:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��t\u0004A!\t�d�ե","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87404412109f964ccd5a5","method":"","user_agent":"","ja3":"","session":"faafb852-0165-4e0b-a8a5-aeab79804e4a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2a8b86a4d1bec75e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:26:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����\u000b��U�<'","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b899f2dc0b90d755dc3c27","method":"","user_agent":"","ja3":"","session":"d7528b3e-0d95-434f-a2e3-c59a9828cb4e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2ca692d2307452e4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:24:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��.\b��\u0017|���D","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82e08c5f8177cc3e2ed44","method":"","user_agent":"","ja3":"","session":"6f9e1094-d107-4328-944c-2585abd311aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"12161e3242860f8d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:22:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����\ro�m\u0016��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8cbe1c00d6fe86d16e3fb","method":"","user_agent":"","ja3":"","session":"10c10309-d2db-470c-8f65-19fc7d010d3c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"48e1a3b4183020c6","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:19:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���M����l3@Y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e94d99b1b7816c334059","method":"","user_agent":"","ja3":"","session":"03e62692-2409-47f0-b308-adf6cd1eba53","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"306d3a9f8c69309b","strings":["BitTorrent protocol","<-UT360W-","l3@Y"]}},{"timestamp":"2026-09-17T20:15:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���ڜ�E��\n��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ddda9cc545b1f90ab38b","method":"","user_agent":"","ja3":"","session":"c8c75175-aa23-4a7f-9875-af7003b44259","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b59e5acadd1ebc74","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-17T20:13:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��)��v�W�i<�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82994a276ae578d693cc3","method":"","user_agent":"","ja3":"","session":"f9585f13-dbb2-4601-b14b-76c235126826","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1ad73f30fbb14320","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:41:39.646472+00:00"}