{"ip":"189.217.80.44","total_events":52,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["52 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,094 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,094 bytes sent","bytes_sent":10094,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-13T19:52:00","last_seen":"2026-09-15T20:15:16","events_24h":0,"events_7d":26,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Cuauhtémoc","lat":19.4177,"lon":-99.1644,"asn":28548,"org":"Cablevision, S.A. de C.V."},"source_domain":"customer-189-217-80-44.cablevision.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28548","label":"izzi telecom (AS28548)","category":"isp","url":"https://www.peeringdb.com/asn/28548"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":52}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-13","count":26},{"date":"2026-09-15","count":26}],"recent_events":[{"timestamp":"2026-09-15T20:15:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6ONvwtmCg*c_Wh-Iq)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644364f4e7677746d43672a635f57682d497129","method":"","user_agent":"","ja3":"","session":"13b33bdd-f55a-49f7-a0f6-d54af0145652","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ce2986bd7d7627d1","strings":["BitTorrent protocol","<FD6ONvwtmCg*c_Wh-Iq)"]}},{"timestamp":"2026-09-15T20:14:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"_�Eّ�ሌ�.�\u0013��\r��s!\\#=��zݓ�%��՞Fܔ�`��\u001c�>�t�~����$\u0006�J\u0007Q�i��`��\rd\u001d�>�\u001de����m�\nF��)�����\bB�r\u001au��\"��b@���T��\u0001\u0017o��z�6������=F�\u0011�,wAI�(a�ɧ��\u0017��.���f�$�]TG���\u0012yM�\u0001�R��\n�7ɚy�?�-V4 t�?\u0002���HZz�d�\bIV�_��(��+�_��\u0005��=�\u0018g��M܊W~�P4�ի�>�BH�iL]\u0014��\u000en�\u0006�yL��m������/T-�\u0002$[\u0011GV�\u0003\u0000�+\u001eϱ浟{l1M���G^�\u0000�OSg\u0003��$�y�㱯�hՒ�+�D�.dg\u0010��0\t�S1��깎xA�n��U�Ke7�~��\u0003\u0011e�6���r��\u0017 ��;Q���8�l�1~��\u001cܚXD\u0001S�}X\u0006c�j��\u0013�>\u0012A���\u0019�4RIB����&����\f��\u0003�`�8","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0addd10f-93f8-417d-a17d-60322612701d","seq":1,"duration_ms":100,"bytes_in":416,"bytes_out":13,"enriched":{"digest":"d38eefc226c38a98","strings":["s!\\#=",",wAI","-V4 t","{l1M","4RIB"]}},{"timestamp":"2026-09-15T20:12:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6LUe2P3yhd0R!7-4dR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644364c5565325033796864305221372d346452","method":"","user_agent":"","ja3":"","session":"ba605745-7113-41eb-b36a-aa92c40f531e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1da3ed7e60498ada","strings":["BitTorrent protocol","<FD6LUe2P3yhd0R!7-4dR"]}},{"timestamp":"2026-09-15T20:11:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������S�\u0017-RQ��uaڤ�?P!���l�!-\\�f���I�X[��O�r;TN�\u001f\bF��Z8��,]:�\u000f��+���M���~��oYv�\u0013�j�jCu\u001f���ԫ��o^��]�tGS4��g̅-�-��/���5�\b1y�pZ\u0018��Vo���\u001ab,\u001c��E�K��\u000b\r%��R�޹�юF�:�\n�J��\u0000�xdw�\b��J�-�{P\u001b0�=�\u0015�\u0011O������d\\���\u0002525�kp��s'F�8L�b\u0005b\u001fxp�y\u0013�m,�>�\u0011�\u001d\b#ԙ\u0007\u0012���i��–퇫G��\u000f�\b�E�;R���]7LE�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d2d1303d-4a52-4e03-8481-5af8fb8a83d9","seq":1,"duration_ms":100,"bytes_in":272,"bytes_out":13,"enriched":{"digest":"81b4ae957b36f275","strings":["r;TN","tGS4","]7LE"]}},{"timestamp":"2026-09-15T20:10:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6gDa7yYM~gYLxQmhqn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644366744613779594d7e67594c78516d68716e","method":"","user_agent":"","ja3":"","session":"bfb18a95-2d1d-4394-bcd5-b696958e3dab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e1569d67d08b0b05","strings":["BitTorrent protocol","<FD6gDa7yYM~gYLxQmhqn"]}},{"timestamp":"2026-09-15T20:09:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000fk�\u0017�ߚ�s[�T�*dzJH lu%D䑟h��\r�\u0007��H#_��S�����P�\f�\u001f/�j����%��\u0017���or�dۣ��\u0015,Y�\\w8��N\u0017E�Y�Ձڼ^\u0003�z;=�&�$���U,���h��U������閌��>\u0006fg�^o��cI\"��\u0000Z�4`��İ�Qe�j\u000f{�Nt\u001e'�����3\u000b�82\r�������c�\u0018\u0016���5X�g�\u001e�Ċ\u0007���/=C�ܵ��<\r�����\u0007nRFo�e���պw��3�\u0005NǓ�[we�*0�\t�E\u0006*�8��\u0005�e{�E�O��\u0004Q�\u001cq.�L���wA��o\\\u0011\u001a��u�\u001e�$\f>��\u0007�؁�؆���\b-\u0005�\u000fXj\u001a�_1\b$\u001a\u001a\u000edh^es�\u0017�i��\u001e\\X�k7�2���Hi�]�\u0016�`����\u0015�T\u000e���B\u000f��t@3�\u0002�\u0011\u0018\u0011�n�����P�Y�p+�2�<]l߿d\u0015%�%�+��:���!=��1z�b\u0014��nl���s�>�,�\u001au�����j\u001d*���\u00119�gB׭�#v�n�l�A��\u0007|��4͙�\u0004>��m\b��\u0015\\�OO���g����)�*D�����{!�\\�ڠš.BU\u001e��30�\u0012\u0019C;�\b��4�XlE!�'oE�us[�I%�]J\u000e\n~����!\u000b^\r,��\u0014Vd\n�Sy'�p�l�P�~\u0005�����[���V���\u0001�\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"fdb7ca75-8106-44b1-91bd-3e123bc15fd1","seq":1,"duration_ms":100,"bytes_in":592,"bytes_out":13,"enriched":{"digest":"02937cc7b690d210","strings":["*dzJH lu%D","nRFo","dh^es","XlE!"]}},{"timestamp":"2026-09-15T20:08:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6QEW2UlF-19d7dEOv8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443651455732556c462d3139643764454f7638","method":"","user_agent":"","ja3":"","session":"54bda802-ae07-496b-bb17-a1b95d215907","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c16b375cbdd8e46b","strings":["BitTorrent protocol","<FD6QEW2UlF-19d7dEOv8"]}},{"timestamp":"2026-09-15T20:07:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1ё��\u0005�͂J�e_\\�\u0016s��\u0000��]Z\u001e��]�J������`F\rW*n�\u0019�\u0014s\u001bܯ��l\u001d+�$u&\u0006汑[�N�p���\u001f�\u001cO�+Ž\u0003����6��G{�%\u0002V\"�\n�\u001e=�v,]Y��SX+5V�cX4���\u0007��\u0018#","payload_hex":"31d191a6ef05abcd824a99655f5cd31673ccc8008aea5d5a1ee99f5de34a8b8c80f29ca5607f460d572a6ed119cb14731bdcaffec56c1d2bc924752606e6b1915bfd4edd70d8e9961fbf1c4fd32bc5bd03a1ab88983685b2477bfc25025622f30af91e3d8b762c5d5998ac53582b3556f96358348adbf007e0fc1823","method":"","user_agent":"","ja3":"","session":"39f610ad-a3b7-497b-8c2c-f49fc5c3e082","seq":1,"duration_ms":101,"bytes_in":124,"bytes_out":13,"enriched":{"digest":"63b3e70ee3b98da9","strings":["v,]Y","SX+5V"]}},{"timestamp":"2026-09-15T20:06:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6~9mVkI*f4ew)8Xg_*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644367e396d566b492a66346577293858675f2a","method":"","user_agent":"","ja3":"","session":"eaeade26-9480-46bd-a8eb-8c3ea4554e9a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"3970dde7fa2368a6","strings":["BitTorrent protocol","<FD6~9mVkI*f4ew)8Xg_*"]}},{"timestamp":"2026-09-15T18:19:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6KF3_1!Ib~4BcrgYqg","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644364b46335f312149627e3442637267597167","method":"","user_agent":"","ja3":"","session":"12bd3b74-9bf5-4380-96a5-c3737b109e1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a5ba3a5e5928c4e9","strings":["BitTorrent protocol","<FD6KF3_1!Ib~4BcrgYqg"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:41:14.838213+00:00"}