{"ip":"189.223.81.89","total_events":361,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["361 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 72,964 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"72,964 bytes sent","bytes_sent":72964,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T20:32:39","last_seen":"2026-09-28T04:38:59","events_24h":0,"events_7d":361,"geo":{"country_code":"MX","country_name":"Mexico","region":"Baja California","city":"Tijuana","lat":32.4336,"lon":-116.9607,"asn":8151,"org":"UNINET"},"source_domain":"189.223.81.89.dsl.dyn.telnor.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":361}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-27","count":155},{"date":"2026-09-28","count":206}],"recent_events":[{"timestamp":"2026-09-28T04:38:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0003�\u0013|\r\u0004Q�\t2\u0014�Į]�\u001aê�+\n=~���M�:P��aT�,�����\u001as*�\u0000�,�0X>\u0002�p�G{u�ک�p\u0018Xj�\u0019\b\u000b�G��yD0\u001f��4 �L���B�\u001f�\u0007s�z�6S�L��?��\u0012kE\u0012��\u0006^t\u0002�\u0017����(��\u00075�/:��3�T(ㅿ��d�>i|���\b0����\u0002��]�m͒ɋ����R�*}���@@�Ogݘ�\u00048@��s`�z��VY�\u0012��\u0011/gp�\b2�Z�Ch�E�\u0013i?=��^\n�#}nZ�K�Lj������4r�����\u0003��\u000bA�\u001b��?9AuQ�\u0018\u0014\u0018F\n����EM�\u0012x�\u0000<v����qӮX?WZ���L�G�/��?'�[�-0�ˉ�T$\u0010�5P���t�4�>\u0004�T��\u001cd\u0017B\u0001Y1\u001cغ�F2\u0017K���~؄��Lm�]\u0019�q�\f'ȶ�$��Z��w�zP�\u0011��_��g�w{�(��S���\u0002���\u0000��m\b(N�y%","payload_hex":"e003e2137c0d0451bc093214a2c4ae5da71ac3aab92b0a3d7e969a954d953a5099de6154942cf6f795aba81a732ac900a42cfd30583e028770bb477b75a9daa9c17018586a8819080bea47bfc87944301feb9b3420b64c8bbad642991fab0773f17aea3653914cf8b03ffbc4126b45129ff0065e7402a317eafef9a028d1ee0735f22f3a8bfd33a85428e385bf89a664ff3e697cf2f7810830bafaee8f02aecd5da56dcd92c98b9eb3e9de52c02a7da6c1994040dd4f67dd98bf04384092f87360ba7aece65659d212989f112f6770fd0832f95a904368e145fa13693f3d9e9a5e0ad9237d6e5a974ba9c788b9cac4dde8df3472f79d9e9fc8038ff00b41801bbadb3f39417551a5181418460ad9eebee7454de61278c9003c76acb0cad371d3ae583f575ae7b4d84cc547dd2ffc953f27a25bc82d30dfcb89df542410af3550cdc6c774ba34ff3e04b154f0bd1c6417420159311cd8ba8d4632174b85c8eb7ed884cbfe4c6d855d198a71ee0c27c8b6f124a5b45aacd4778d7a50f8119aeb5fb2ed67a0777ba728d5d35388ed8202b1d2eb00c4f86d08284ee07925","method":"","user_agent":"","ja3":"","session":"2a44fb86-86e7-4e20-97fd-29146574afc5","seq":1,"duration_ms":100,"bytes_in":412,"bytes_out":13,"enriched":{"digest":"5c28733e4a9b5fbe","strings":["#}nZ","?9AuQ","X?WZ"]}},{"timestamp":"2026-09-28T04:37:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YHU_GtdSQ1Lv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5948555f4774645351314c76","method":"","user_agent":"","ja3":"","session":"db941e21-3d17-452b-a553-592df132309a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e926daca8a53358e","strings":["BitTorrent protocol","<-UW160N-YHU_GtdSQ1Lv"]}},{"timestamp":"2026-09-28T04:36:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�sO�V�ɖh[�ž�\u0017\u0000yS\t�\u0017\u0004/U�\t�7[n��K�s\\g��jB�����--�Z{��\u0018�نV���m~5_DQ9�i�\u0004��խ������E\u00196�I�\u0007e����x�Ǜ\u0013�;ݩ.\u000fi�\n�+4y\u000b[!�8�\u001c���F\u001ax9�\u0017Ry@ՌbT��Ȼ����\u0014~���\u0004�Q�=��[�\u0011�T���[\u0019��O�<L6)\u001bf6�.2�ԍ�Y!+C7n���� d��[���D����X�\u000b�/��H���܋lo\t���l�[���ܴ�X���\\\u0010T","payload_hex":"ef734fc856e5c996685bbdc29eb117007953099f17042f55e609b7375b6e9cc64ba9735c67b5a66a42c5c1b0a1c22d2d975a7beeaf18eebfa7c5d98656d2f0ee6d7e355f445139c169e004bfdad5ad98b5c5cec6e6451936bb49b10765b0f4a3ce78cac79b13df3bdda92e0f69d30ae12b34790b5b21b438a61c86bc8f461a7839a617527940d58c6254fe8ec8bbc8cde1ec147eb5b5d604c551ee3dacab5b8111c054a2a7da5b19a9ea4f903c4c36291b6636cf2e32dfd48dca59212b43376e95a7c5f6206498dd5bb2abd744eecfc2f758bf0b842fd8fc4897f1fedc8b6c6f0981f8d26cdd5b8da593dcb4fc58abf1ce5c1054","method":"","user_agent":"","ja3":"","session":"4b82b5f7-7fcb-44fb-a4d7-6cc3aec72bdd","seq":1,"duration_ms":101,"bytes_in":244,"bytes_out":13,"enriched":{"digest":"dcec9b0bda23c470","strings":["m~5_DQ9","<L6)","Y!+C7n"]}},{"timestamp":"2026-09-28T04:34:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-ZiNiaA9VdAKa","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5a694e696141395664414b61","method":"","user_agent":"","ja3":"","session":"58aabdff-5e20-49eb-a37b-9279050bd9fa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"821e8f89d22a61f1","strings":["BitTorrent protocol","<-UW160N-ZiNiaA9VdAKa"]}},{"timestamp":"2026-09-28T04:33:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��/k惀($��EY�A*&=!Eg9��\u0016\\\u00047�t9�Y�HZ�6m\u0007*'��\\�.�!�\u0000q[��\u0018\fcѓ\u0014\u0011����<I\u0001fb\u0018ገ�H\fgټ\u00030a�nS�1�}�w(��>3\r<x,��\u0019u�l`SG������D�ј�4����c҅��\u0006\u0018u\u001c��{�PT\u0004��D���\u0006�(��p>a��4�yL^��a=6����ʵ\u0006\u0004g�\u0006+�\u0010\u0005\u00033STTl��#N��\u000e������V2\u0016\"��[��aw\u0018u�w�3\u0005���[�1jS�\u001d\u0014�\u001e�$�l��f�Ɇ(��`ms�\u000e׺Y��B�6�H\u0001w�\u0019���?��G��}q�!���s�^i2�0���V��e����i\u0016@\\�E�Y\rPb","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ecc7273a-6774-48bf-a2e4-646b200baabb","seq":1,"duration_ms":101,"bytes_in":312,"bytes_out":13,"enriched":{"digest":"a7cfaef0c5a5ed9e","strings":["A*&=!Eg9","l`SG","3STTl"]}},{"timestamp":"2026-09-28T04:32:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-gn5Mfjn(5O-y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d676e354d666a6e28354f2d79","method":"","user_agent":"","ja3":"","session":"81f101eb-1efa-4252-99e1-bfb3127844c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a9ecee91deee2a0c","strings":["BitTorrent protocol","<-UW160N-gn5Mfjn(5O-y"]}},{"timestamp":"2026-09-28T04:30:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�aUvG_�A�$��} <���_F���B�Q����W~Ů�BD��$0屷\u0001�\u0004�6�{����\u0011\u0018[\u0012�&�t6\u0013�>J�Ag!X3k4�\u0014���խ��\u0015���r�\u001e�u܁��\u0019�hm;�ǣ��ʬ\u001e�п\\�\u0010��x��]�8�2F�C�\n��bԖ\f\u00179�\u001ca\b��f�RzR*��\u0005��v\u000b�}_J��\u0010\u0011�V:Y@���ŷ%ND��h8�\u0003X�BuÝZ�*�\u001c��C�.�p\u001b���\"�A\u001dJր����\u0018\u0018�>��6�\u0001�F�\u000fP\u0015������*�6�,�G\\\u0007�P�t���2ҕ���D05�\\6]�x�&>�&\u0013\u0019���#x/�\u000f���e` <�ݳ��4�*[���`�g�?A�\u0013���=6�Q\u001b\u001d��#3�}\u001aq��\u0017��3q-\tߛ/\u000f�o� z��#L!\u0010ҫ;\u0017\u0002� c�8m��\u0011�� ��Խ�`�]��޼.\u0005~ː��-0����ǘ�e�/_XY�i����\u001f\u0006�+ή�\u0016\u0014�h|\u001a�\u0007�GN��B�%dX����`%=�^+�q�\n����[\u001fʼnK�m��<g�����/�'�\u0017LG��q\u0014��\u0004nϖ���ʭ�9~ށ�~N\u001a���\u0011��Pr�\u001co�4\bQ�#)��M#�\u0004N/��~\th\u0007�k�\u001e�V����P�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1cce5a58-5fdc-4c22-9743-04e9278cdeef","seq":1,"duration_ms":100,"bytes_in":545,"bytes_out":13,"enriched":{"digest":"5243c88ba4d86624","strings":["aUvG_","Ag!X3k4","RzR*","V:Y@","e` <","/_XY"]}},{"timestamp":"2026-09-28T04:29:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6yx_P4lsPXMk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3679785f50346c7350584d6b","method":"","user_agent":"","ja3":"","session":"da4c52a9-abf5-4cb3-8377-e0fc07f19c83","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4b6036727b90ee92","strings":["BitTorrent protocol","<-UW160N-6yx_P4lsPXMk"]}},{"timestamp":"2026-09-28T04:28:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��(r\"\u0002���j\u000b\u000ej֟@�j\u001b�\u0016ur8\u0000�a��k�;Ib��\u000f�/\u0003&���1o�\u001a�����\u0018��l�\u000fHFlUKf�S\u0005Q��1���`�[m\u0010�#��%\u0013\u001a�\u0013\n5$b\u0010^���D��*�'\u001f\f��}��p�f�:�|\u001cm̎�\u0002��\u0019'�\u0004ᬫ͆#�5�L+��\u0015�T�xzN�\u0000�;?x���\r��4+\u0017L\u00165՞\u001d�f\u0011��a�\u0010\u0012�\u0004#˘���J� �\u001e\n)\"��=�Z������Š�P��=�W�J2`l�s���_\u001dh\u0012\u0019�L���M���dn�2[�s�>�.;��-�a���6��ƫ��JۏkqU��#V8u�\u000e9�~M:|&��1%��ϑ�śo�l\u0003�A\u000e\u0001�R��N\"\u0002e�n����\\b�0�L~�>�K��WJ�����y�tc\u0010���ظ3�<j6{]x�f\u001e\u000ew\u001b\u001d<1\u0019vX1�o\u0011�<�\t\u001d\u0000�y��\u000fv�\r��\u001a��\n(B����q��b��\f�\u0017ʶ�[\u001c�\u0016\u000fSֈ[pEe�?���l����ebU.�0w�\u0006!ba3*NFrc8�>M�a�\u001f\u0015��VA�A��\u001a�-���S\u001d��>�E�\u0018Q�K*g��V��8Ow\u0013U�H\u0011��\nW�c=t�\u00064\u001cy����\u0018wΠS�\u0003V[��N�\u0016���3T�/�B��\u0002�\u000b\u00176�f�\u0014\u0007k\u0013x&5�\u001d�(��j|V\u001c�X��\u0002>\u0002D��Xߣ\u0002��\u0014�l&׳��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"58224f42-42d3-4b82-9e0e-65003f17fccc","seq":1,"duration_ms":100,"bytes_in":597,"bytes_out":13,"enriched":{"digest":"9c489371ed898997","strings":["HFlU","J2`l","#V8u","~M:|&","<j6{]x","[pEe","ebU.","!ba3*NFrc8"]}},{"timestamp":"2026-09-28T04:26:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-WvGkuX7pKHk-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5776476b755837704b486b2d","method":"","user_agent":"","ja3":"","session":"b131e7bd-48c1-4ee2-85d1-a2a003d7e905","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a1ab31a81568b133","strings":["BitTorrent protocol","<-UW160N-WvGkuX7pKHk-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:37.474515+00:00"}