{"ip":"201.133.199.18","total_events":201,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["201 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 41,950 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"41,950 bytes sent","bytes_sent":41950,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-08T18:43:12","last_seen":"2026-08-08T23:10:37","events_24h":0,"events_7d":201,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Xochimilco","lat":19.2728,"lon":-99.1225,"asn":8151,"org":"UNINET"},"source_domain":"dsl-201-133-199-18.prod-infinitum.com.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":201}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-08","count":201}],"recent_events":[{"timestamp":"2026-08-08T23:10:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-lcL.nXPqTYx2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6c634c2e6e58507154597832","method":"","user_agent":"","ja3":"","session":"379e6a4b-96a4-4e4d-aada-001305a55a7a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"33559334d18dad5f","strings":["BitTorrent protocol","<-UW1605-lcL.nXPqTYx2"]}},{"timestamp":"2026-08-08T23:09:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0003N�Mg\u0016Vp�\u0018�b�r\u000e�o���<�%4�l��\u0014\u0006�D��/Ӈ�k\n�p+,3�v�����D-ͼk^��ɢ�f>6j�Y�a\u0014�d\u001f0�bg\f���Mp�p.\u0012�C��/��U��\u0001W�b̼�X��z�/(��\u0012�Eb�'�C��GWć�)���$�\u0010i�u}�\u0005��t�kp[L\u001b\fSO�A�\u0000�<�z\u0003[�Mͮ#�����.7\u0001%���ݦ;\r?\"�:��ݽ�\"�jU�\u0003jQw����\rM�\n6 ɤH��*9�/|�,\u000e�X�\u0006�{��'v� �o�[ͣSx.�M����m�ȋe`t�)�\u000f�dA�\"�J/�~�\u0015�-�C\f���\r3�\u001b�u�\u0011\"�|\u000f�F��QJ1c���\u0011�(l�)n�SW\u000b��kZ\b8];�(\u0003�ɏ�->�l!*����\"\u0017���4��\u0002m\r�\f��)����k����@�^\u0013\u0003\u000fש��L�hޥ�\u0015{\u000f\u000f9��p#��kt{Ϩ��j\u0004`�Q ��ⴢ,�ӥPBX-UYU\u0005\u0014\bp\u0011\u0013�S���6\u0016��r�1�\u000b��Ĕ�9�]Y","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"53e46ed0-1d93-4c71-bc08-8b9d3caafcfb","seq":1,"duration_ms":100,"bytes_in":457,"bytes_out":14,"enriched":{"digest":"5b0672a13a85d3dc","strings":["p+,3","f>6j","kp[L","QJ1c","PBX-UYU"]}},{"timestamp":"2026-08-08T23:07:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-j7Yv12K74t6f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a37597631324b3734743666","method":"","user_agent":"","ja3":"","session":"23ee0b4a-8718-4ce6-95fa-feeb0ba44541","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f1c829471c2b851d","strings":["BitTorrent protocol","<-UW1605-j7Yv12K74t6f"]}},{"timestamp":"2026-08-08T23:06:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�*����V\u0012\u0007B�j�5�l.O�\n�\u0010�c����4�\u001c�;&��`t����c�j�\u0015O�����\f���_P{�.�\b����R;E6�LZ�XE\u0000����ޜ@�l3\u0014\"e\bfZB��\u0017�iv\u000e{��\nf","payload_hex":"e92ab0b580f356120742cd6add35f96c2e4f8c0a8e10ec6399e9e0b834b21cd53b26daea6074dde8ed9463f26ae9154f9ac7e5f19d0c8fd7ef5f507bf12e8508b4eab7dd523b4536e14c5aca584500ff84efa4de9c40e66c3314226508665a42988717fc69760e7bc1e00a66","method":"","user_agent":"","ja3":"","session":"60d66ec1-45fd-442f-90de-06333aaa5752","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":14,"enriched":{"digest":"6a2fd02a2b2e2cec","strings":["R;E6"]}},{"timestamp":"2026-08-08T23:05:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-iz!TGjdjp.Si","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d697a2154476a646a702e5369","method":"","user_agent":"","ja3":"","session":"e5cb4e45-2617-4048-a960-42e3dbc2e92a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a594e5317bc05d3a","strings":["BitTorrent protocol","<-UW1605-iz!TGjdjp.Si"],"iocs":{"domains":["tgjdjp.si"]}}},{"timestamp":"2026-08-08T23:03:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0006�7\u0000�n&�p��ij�a~z�\u000e\u0014��t8\r4�j2]�a�ߔ\u0018}�%�z\u000f�*�qQ�c����u��?�!+U�Z��U\\.�s����O�`�D\f�=\u001fs5��g\u001bcծ\u0014}\bM�\u0003����7A\u0019'^�\f��jP�DYs��� �w�eҭ^;B�\u0010$\u0014�\\\u001c0�\u0006Iɪ\u001d�^Sۅ\u0000�H~�٧�B���9\u00172\u0011_�-\f(�]\"\u0012[&���\u0016(���\u0016�{F���Ͷ�а8��ʍ%�\u001f9�\u0010��\u00131| �\u0002�\u0018eq����9�̶@�\u001dd�$�?�hW<���m�ه-\u00064\u001e�ɡ�\u0014�PR\u0016�-���\u0017���`�\n'��\u0013\u000e$C9:i\u0005\u0015�*^�x��R/�Z�\u0003�\u0004&��U�n�+�[Zh{��\n�K�s%�R��oM\u0017�\u0010�hq�Π_揑\u0010��&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"209dce99-ffbf-4d0f-9f88-0af7a322905c","seq":1,"duration_ms":100,"bytes_in":344,"bytes_out":14,"enriched":{"digest":"a03f50037ce18a26","strings":["$C9:i","[Zh{"]}},{"timestamp":"2026-08-08T23:02:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(H.BRQSmsJJY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d28482e425251536d734a4a59","method":"","user_agent":"","ja3":"","session":"c5cf344c-c62a-4385-adcf-7d9964fd980b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4e3d52f0e1423987","strings":["BitTorrent protocol","<-UW1605-(H.BRQSmsJJY"],"iocs":{"domains":["h.brqsmsjjy"]}}},{"timestamp":"2026-08-08T23:01:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014�\u0002ך�6�\u001f��8o\u0011ݐ��wTb׳A��h`\u0019�9J��3�\fjO���\u0001����;�ɢ!@���\u0007m�t���I��{����û��\u0003\u0001��\"��\u001b���(\u0018��\"���q\\=�.�@��n:2Ctɞ\\M\u0002�\"Lg���>\u0014�\u0010�\u001e&�.i�+8RZ����o)�e\nN����>�~\u001d4\u000eT��\u0005�V\u0013̨Ru��i~����]�Z�=�Q~D��\u0015Y��\f�$eď����r�0 �-f�Un�h\u001d�_�P�t\u0012�3O]���)�V20F�&�\u0003G�z��n����+\u0004���{k\u0014\u000e�I�l��\u0010\u000f����!�c�/o��c��\u0012y�E�B���T\t_3/(h��x�߿\u0003}\u0003}E����\u001a?�PC�@��Tew\u000f�J�l^nd|��#l搆��\u0002�L�aD�\u0003������Jʡ�8\u0003�ʾ�\b\u0010��.ǻ���G\u0001ׇ[Ս\u0006���KM�:�!�E��m]_�M�I�Η2\u001eń��s���d\u0015/\r�c�����B\u0007B\n�V�ݝ�$ؑ�^/��&s�.@\u0005\u0002)_\t:3��K���`3O�LKì�_���V\tH/�rR�\u0003.�\u001bV8�yBۀ�\u001b\u0003\u000f���#�L��\\�,F{\u001f��&X}=2�\u001d�0�)�z��'��h�JB\u0012v�z�N\u0000R�x\u001d`�'�K\t䜊�u\tZ�5Ȟ<9���\u001b1�O`�X���y���9��E����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d8d6721a-59c6-42cb-953f-27fe4389fa5b","seq":1,"duration_ms":100,"bytes_in":598,"bytes_out":14,"enriched":{"digest":"00d88213b026383c","strings":["n:2Ct","+8RZ","V20F","_3/(h","l^nd|","&X}=2"]}},{"timestamp":"2026-08-08T22:59:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Kk4rbDHQRyOV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4b6b34726244485152794f56","method":"","user_agent":"","ja3":"","session":"3b6ee67f-5644-4894-a071-90db98e167fb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9505558835050a28","strings":["BitTorrent protocol","<-UW1605-Kk4rbDHQRyOV"]}},{"timestamp":"2026-08-08T22:58:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"T3�S숺\u000b\b\u001fﷃX��̱�\u0015Ӱ��n��ݲ\u0019~\u001d��b�G�>N�#7�\u0019<����\u0019��\u0013�\u0017C��sop�6��qK��Kw���D\u0011�ـ^�b��,�\u000b{�\b����\u001cy�}���H���Ia��ˇUt\u000f_\u000e�\u0000�[������h�\u0007�Y\u0006��Ǡv�|Sv0�E!-6^\u00112�J\u0007�ɢ]iN��6�D��LD��RvXft��7=���1��S�5rq�_\fu`/�_����2{رv��fz�=\u0018t�[�\u0001����?�2����N�˶�+��w\f<\u00136\u0013w)�OM\u001c�7nJ�}�#5�M��~\u0012\u0000p�\n��A��Uș=��Y8_M�ȑ*�}X�d�ţ\u0017�\u0017���V.����\u0016Ў\u001e�|g~t�u��Z\u0002GZ,S�\u001d���X��d�\u000f��\u0000�\u000e�\u0011�Vo����\u000b�_9\fRM�ӫ|َ\n��!m","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6e26cd44-30b7-45ca-8526-bb9de5d3ce48","seq":1,"duration_ms":100,"bytes_in":373,"bytes_out":14,"enriched":{"digest":"a44f6f8ce8979906","strings":["|Sv0","E!-6^","RvXft","Y8_M","|g~t","GZ,S"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:00:36.955726+00:00"}