{"ip":"189.217.107.147","total_events":833,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"833 events across 1 port(s)","confidence":"medium","network_type":"residential ISP","why":["833 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"175,665 bytes sent","bytes_sent":175665,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-13T20:04:07","last_seen":"2026-09-21T05:25:18","events_24h":276,"events_7d":778,"geo":{"country_code":"MX","country_name":"Mexico","region":"México","city":"Naucalpan","lat":19.4692,"lon":-99.2974,"asn":28548,"org":"Cablevision, S.A. de C.V."},"source_domain":"customer-189-217-107-147.cablevision.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28548","label":"izzi telecom (AS28548)","category":"isp","url":"https://www.peeringdb.com/asn/28548"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":833}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-13","count":55},{"date":"2026-09-19","count":196},{"date":"2026-09-20","count":360},{"date":"2026-09-21","count":222}],"recent_events":[{"timestamp":"2026-09-21T05:25:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��Y\u001f�\u0015�\u0017儨U��0��\u0017�zz:���hyS*$?kR�e�\r6b[)�RikYY\u0018�wk��\u0004S,\u000e>��\u0018�����\u000b����-��-\b����O�K�'\u0010�\u0006e\u0013iﷂG\u0006f�P\u0011W_\u0013i�ٸ��{\u0000Z�͓@#�~�)�F-�\u0001��š],���\u0015� ȃ\u0002Gsmqt:�m�\u0014&4�ʶ��\r�R��`ַ��\n�\u000b��v\u0000�/��I�\\��B���}F\u0011�H|��e\u0002��iL�-����|�ԥĞU;?��(\b`��$s��Ff��'_f�Ka�\u0010Ic�1J��N�X\u0000ƈ�Ig","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d8e49e58-1be0-444b-9a51-9bab7cdb0733","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":15,"enriched":{"digest":"ff067cf2dc0145b1","strings":["hyS*$?kR","6b[)","RikYY","Gsmqt:"]}},{"timestamp":"2026-09-21T05:22:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-(mXBKSYR9TAT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d286d58424b53595239544154","method":"","user_agent":"","ja3":"","session":"bd7c5bcc-7abb-4682-896d-93e5bb552962","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0caca2db8a8d32d9","strings":["BitTorrent protocol","<-UW160N-(mXBKSYR9TAT"]}},{"timestamp":"2026-09-21T05:20:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":".\u0015ո8���Eky�q���^F�{4F��\u001b����îC�ğ�\u0005�p�b]{�C8�0�ۨ^w'z6;�\\�E��+DY��!5/�\bj�����/l�JZ\u001d��G�\u0005b@k\u00040�19�U\u0000Z��n��˜�\u0013W�A:\u0001��\u000e=ۧ)hn\rO�pf���\u001e���P45aQCV}��␥@�FpRM]�%����iH�&\u0006~��d�h�f\u001a�<�0����&�5��/���\u001c�T&-5C�\b\\l�%��ʞ�f���n�w~yn����<��ۿ^\r�\u0014�_9�\u0011`�K}ŸJ\u000bY-��\nH)�\u0019","payload_hex":"2e15d5b838cdfcbf456b79f7719c9da45e46e37b3446bca01b97ef8dffc3ae43cbc49fc205d370b4625d7b934338ee30f5dba85e77277a363bea5c8b45aab12b445992fc21352f82086abba8fc81832f6cab4a5a1daf8447980562406b0430a431398e55005aa8bd6edaddcb9ca91357d5413a01beda0e3ddba729686e0d4ffa7066f484dd1ef7b6b7503435615143567db898e290a5408a4670524d5dfe2598ffe29b69488826067e90dd64ec68e8661aa83c9030b083f7a026af35b2f02fa4ff941ca554262d3543d5085c6ca925a9aaca9e9966bab5f36e85777e796ea290a79a3cea90dbbf5e0d9114f45f39f61160914b7dc5b84a0b592dc0fc0a48299f19","method":"","user_agent":"","ja3":"","session":"47093f3c-68f8-477e-b0ca-02301ef83ce8","seq":1,"duration_ms":101,"bytes_in":257,"bytes_out":15,"enriched":{"digest":"3269929fcf56ec37","strings":["^w'z6;","P45aQCV}","FpRM]","T&-5C","w~yn"]}},{"timestamp":"2026-09-21T05:18:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-bev3Qq!zwm7q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d626576335171217a776d3771","method":"","user_agent":"","ja3":"","session":"4fd7215d-eb1e-4050-ac06-926e9ea5b76d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d65b883685daa162","strings":["BitTorrent protocol","<-UW160N-bev3Qq!zwm7q"]}},{"timestamp":"2026-09-21T05:15:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ii\n\u001a٤��n�.���sw���{\u001d�^YdT\u000f���;�B��w��>!�Cq+\u0018B9tf�B�\u0006c�q|1b'��]3> ���&��\u001f�)ՠ�\b2��4DpWY�H۱\u0000\b��.��a����\u000b/���\u0007a^m����=`�D����+�q{9��\tY����}�\t|�\u001e\u0014z�o�\u0000u\t���OLN�\fNi�\u0013\u0016��}߅1ӏ\u001f{]�rǠLz|\rm�h�؞-�\u0012��-���� Mzv��\u0001\u0010Ȇ6WBmY�\u0017�S�}�6�Z\u0006}����@�%��\t7[���#64��Z� �w���Q��\u0014�=Wצ��/o�~4L�c��C\nJ��^Q�e��\b������\\��)�g\u0007�\u0002E�v�$'\u0012uj�.Ud�.Y��d\nq���\u0007hB�����4X��y(-=\u0007�\r���F�\u0003����\u00104�����P|B��x\u000e��\\J-� \u001a,���͓��,꺥\u001b\u0004e�\n�\u0007>n�p@W\u0010Grj�ũ����.:���r2���y��\u0013�5#�u�����\u0019�\f;yu\u0013�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2cd0e706-306d-478f-a8b2-fa5d777dc238","seq":1,"duration_ms":101,"bytes_in":531,"bytes_out":15,"enriched":{"digest":"8cd79d772ad30677","strings":["^YdT","B9tf","q|1b'","4DpWY","6WBmY","y(-=","M^:����\u001c\u001dVd�U�T�V-�����\u0014��\u0006(if��-\u0007�ة��QS�#W�:�P��ԙ��\u001e]���\u0015k5e��){���:\\n3H)P\u0016�L�˯����\u000b)��$9!¼\u001au����g��I$\u000e�Q)\u0019\u001b�br(��q��%^�B�<\u0004wO\u0013MO�\u0010*pw��LT�\u001cB\u0017��w�\u0004 �\u0002","payload_hex":"9d6083ad90e711356963d3056f6f228c5b9d05bb715880831e4233f4e79e48545ffa26b24437e0ce544fc62713857bf3f11a52cecde2be2835db2605f3ccb2456984b1423308aa50305a233bf6569f2f9aed217c0babb3e047ce253bf7400e7a143dfd68c00ef67392e703b12292b28e64a99dab3ca18f26c8cdb37c7f7807846c5c2f10d5c4d4a3d916e7d2570839d212b97bbb50fba5fc80774758955f29a6ab76af9d35f208735e6ebb7ab9cdf87876adecc45e8b7d91ad954ff06c440538a203e1b71770a94114aeb5d06ac3b5e52ba83ff82c16d2bc62c32b6e01ee441a232d0e8629b062f2ff62501bb7ac92653602c7a2f162574364412c3442123aa523e7a249a6d019e405160f5cf716626ed17a675710de70cbb15c9a8ae6bf92feddb0848213e3cbcdc450db92da410a3e4d5e3af28ce8f31c1d56648355f254ff562de188e6f9af7f1483f40628696694ad2d07e5d8a9a6915153eb2357f13ac3508e9ad49981d91e5d82ceca156b3565febe297b8bedf47f3a5c6e33482950ee809816d04c81cbafc7c8eca2ee90b50b29dcce243921c2bc1a75ffaab7ac67e39a49240ee45129191be5627228b89c71afb0255e9142f23c04774f134d4ff4102a70779bfa4c54b91c4217989a77ad0420d102","method":"","user_agent":"","ja3":"","session":"47e24a0c-f312-4a81-8d11-752f87323c5c","seq":1,"duration_ms":100,"bytes_in":467,"bytes_out":15,"enriched":{"digest":"1d9f9f478f12fbec","strings":["P0Z#;","bWCdA,4B",">M^:",":\\n3H)P"]}},{"timestamp":"2026-09-21T05:04:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.iV970uOGcrB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e6956393730754f47637242","method":"","user_agent":"","ja3":"","session":"5f294b8c-74af-499a-b86c-f25d1eb53606","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"8364dcb3fab19d3f","strings":["BitTorrent protocol","<-UW160N-.iV970uOGcrB"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:10.632324+00:00"}