{"ip":"201.141.17.240","total_events":86,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["86 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,643 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,643 bytes sent","bytes_sent":17643,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T20:34:53","last_seen":"2026-09-19T23:27:50","events_24h":0,"events_7d":86,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Azcapotzalco","lat":19.481,"lon":-99.1869,"asn":28548,"org":"Cablevision, S.A. de C.V."},"source_domain":"customer-201-141-17-240.cablevision.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28548","label":"izzi telecom (AS28548)","category":"isp","url":"https://www.peeringdb.com/asn/28548"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":86}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-19","count":86}],"recent_events":[{"timestamp":"2026-09-19T23:27:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��I\u000b\tuGVϭ���O)�\t��\u0004\r\n\u0005��\u0019���6@�t#�'\u001cu\u0010���C+<��kv�MY���7�./\b,�\u0011�\u0004���8?J#s\u0019�\u0007�/\u000eB��4WET\u0016�x�?r�p\u0011�\t�\t��Քs�_��,{T����p\u000eq]��I�mwŻ-���gwz��o_P�\u0004k��m��c\u001bg3FU��C���$��(s��c�%<0�`\u000e;O�aA�`����踠;�k[w�\u0002�lg]�&����݃0\u0000�O�E`!h^\u0019\u0019\u0006yB�V�\u0003�\u001a���\";`��\u0012;�\u0007,Α%4�B#bݭ7s�v���}%\u0014^69b<�HA��xRW5γC6�B\u0019|�/\u0012\u000e�\\O�_�,\u0012;�dd���\u0014x�\u000fϨ��6\u0010Jk�w�\u000f�J2�\u001f�\r\u0005�'1�����\u001d�W�3�ц�0q���W|\u0010�����n\u001d!���] ��'��� Vi\u000b�\ts\"��o)TR2\u0016��B\b6��\u001d�tK�)��(X#��^\u0018��������w��0=�����\u000b\u001dΐ\t�\u0019�\u0003p5��;-V�Bu����,յ�\b3��xS.�\u0011�\u0003���1[\u0013�y �T\bș���,��cJ��=��&\u0017��W�0�*����=X���x�l�~n��L-�ݶ5��\u0015�]��\u001d�a�F�S��?�����\u0018,t�فA�\t�-��zڜȏx�N\u0016\f�Y�f������h\u000b�\u001b�x�љ�����G","payload_hex":"98bf490b09754756cfadb3dceb4f29ea09abd6040d0a05e6ae19f99fba3640dc7423e5271c7510e4eddd432b3c9f8a6b7f76e24d59a2f4d337a32e2f082c8c11d504a4d9f1383f4a237319ba07b52f0e42b2ec3457455416f278d57f3f72fd7011c809c209879fd59473f85fb2dc2c7b5480e4dbd1700e715ddffb49c36d77c5bb2da09ee667777ae7936f5f5088046b8c956dc5eb631b677f334655f3dd43c5c2ce24b4ad2873899563c7253c30d4600e3b4fe36141de60ddc183eee8b8a03bc56b5b77cf028a6c675ddf26ddd1e7e9dd8330008e4fb9456021685e19190679428a568003bd1a86d1d6223b60e284123bf0072cce912534a2422362ddad3773d176eff3ec7d25145e3639623cb04841f79e78525735ceb343369242197c802f120ec95c4ff05f852c123b836464a7a9e51478a00fcfa8e0e236104a6bbe77d60ffc4a32b01faf0d05b92731f8b281febb1d8d57e43383d186e83071a1ebd7577c10b7898ca4ba6e1d21bcc0cf5d2085f9279292c22056690bbc097322b1a86f2954523216d0d34208369bb11db2744b8c29aefb28582396b85e18f4aa86b8b5fcef8b7793ac303d84f792e5f90b1d7fce9009f3199403703594e33b2d56884275ddc4fece2cd5b5940833b0c278532ed4119d03cff784315b13fc7920aa5408c899fde08b2cc5c2634a96aa3dd1ff2617c18d57a330e82a84aabed83d58f88bb378d06cf87e6ef69c4c2dddddb635cbe515bd5da8a51d9661cb46bb53f0c23f988aaae2b6182c74d2d98141d909f12da7f47ada9cc88f78ab4e160c90598f66e08293a6a6e9680bde1bb778a8d199dfc7f3effa47","method":"","user_agent":"","ja3":"","session":"3d995f9f-1001-438e-9de6-481d93702820","seq":1,"duration_ms":100,"bytes_in":597,"bytes_out":14,"enriched":{"digest":"c01f7cff2ac9f7cf","strings":["8?J#s","4WET","E`!h^","^69b<","xRW5","o)TR2"]}},{"timestamp":"2026-09-19T23:26:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-99sLUo9.!2Xm","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d3939734c556f392e2132586d","method":"","user_agent":"","ja3":"","session":"66319f23-e7ae-400d-8101-7f04415f57fb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f427686c3fbfbe9c","strings":["BitTorrent protocol","<-UW1609-99sLUo9.!2Xm"]}},{"timestamp":"2026-09-19T23:25:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���aT�aNu\u001f}L�)2/�+\u00149��E��\u00042�E\u0007b�Ap�X5o�y\u0016R0%�t3���gI_�m\\�9\f�|*\u000f��xL�!9\u00056\u0002�8:�w��z�h��F��\u0014d��J�m�\tNj���ϸ\n�9p��WyX5H}�I!�u\t��y�s��id�e�6�F��VznpU��0}M\u0005�\u0019@�/\u001a�\u0016�Tj����L��ӡ\u001e��\u001a�>��܍#\u0018뺁\f�́��\u0006S��_P.�\u0007�_pU �a�ѲE\u000b2���T�Q��M�hc��7�h\u000bG@��P�Zo�\u001f����.�ܓA��\nG�\u0005��\u0005��uZ�\u001b\b\u0016vbP\u0002U5�\u0017[��\fH,T�\u000b1����8��7��Qf\u0000�\b��\u001e���\u0012U�e��\u0005��̾R\nӢhȸ�\u0001n���\u001bzϧ��5޿R�j=\u0004�\u0010�v��\u001eT�\u0004a>ZԨ��\u001ceŘ�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c543521d-3149-493c-8709-a96b9d61195c","seq":1,"duration_ms":100,"bytes_in":411,"bytes_out":14,"enriched":{"digest":"492b0319324e2dde","strings":["WyX5H}","VznpU","0}M\b�\fD����N�\u0011V\n30�fwB\u0005\u0005_'�w�\u0004�U葲0�HQ\u0002�x\u001em��\f�\u001fi�쟃R��ʼ��0�`V{x\\�k��\\Ȓzi��\u001bD �{\u001d$/ͩxШ\u0007f\u0015\u000ewp\u0007\r^��e����qi��G\\o�s\bĠ���\n+��6N���,x�����|4�����d�t�y��1B�a7\u0016b��~>N�[�\u001c}�͟�\f�sd�LeT���G�̟\u001a!ݲ�Z����;\u0010M�r�����<\n�~#͂kW\u000f\u0011\u0017���\u0015dO\u0010|��\u0005:\u000be","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0d8873b5-239b-413f-88ea-bcff344a8464","seq":1,"duration_ms":100,"bytes_in":273,"bytes_out":14,"enriched":{"digest":"208db2a423a39838","strings":["\\jP/","`V{x\\"]}},{"timestamp":"2026-09-19T23:20:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-qfsKYBkBjOwl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7166734b59426b426a4f776c","method":"","user_agent":"","ja3":"","session":"49308c75-a1bc-4be0-8095-b049d4807819","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2312a420c889c48c","strings":["BitTorrent protocol","<-UW1609-qfsKYBkBjOwl"]}},{"timestamp":"2026-09-19T23:19:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��p+\u0018��H̝�\u001d��C��M8\u0011\u0011��\u0002\u0012-����%�%@��0���8{�D��mr�Q�D�\"�\f�k\\���\u001eI3z�GQ\u001b�VH�@���Ѝa�\n\"K�4Ky>�\u0013pr�~�{��lK���'8'J�f��=i��\u001b�a�����+7U����/��9\"�|~��j9J4c�f����e)\u0019�$s���\u0001�ף\u0001?�%hn�k\u00077��e����N���f��~@|\u00189�a\nK4.��k\u0013�[᚛�\t9��'��\r���h\r�?�����|��\u0010\u000b�a�ߝ��c�x\u000f�[�?��1�q>��ig>�r��\u0017���]T��8�Q���c�r,c����q��\u0002m3H+��3�\u00025;��4醺K��-� ]52^�-�q������\u0010�m)�4��\r��&���c���\u000f\u0000t�7'ȡ��\\D\u0011�^O�7���8F=խF;C�:��7G|mם��o�=�-b/L��\u0007�ls!'-(!�ͪl�z���\b����[E[�^;r�vz8��D?�n-��V�<�\u001e\u0011l�Q�\\E��.��wl\u0017�AN\u001cHj�4VxqX��t�G�\u001b0S��\\��k%'2��-47j$(mb�S\u0016a�4�\u001a\u0007#�\u0012�m\u001b��h�9����\u0000�1ųkVxL\u001ad{�����y.6�\u0016���S�\u000bφ֎�2����'�\u0005��\u001c\b\u0007��k�ix�}«b\u0001\u000b���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8c692709-920e-4b4a-99d1-ab806254071a","seq":1,"duration_ms":100,"bytes_in":591,"bytes_out":14,"enriched":{"digest":"cd39dde14a51b4fb","strings":["4Ky>","'8'J","j9J4c","m3H+","]52^","7G|m","-b/L","ls!'-(!","4VxqX","k%'2"]}},{"timestamp":"2026-09-19T23:18:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-TUDsrWWbGoMN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d5455447372575762476f4d4e","method":"","user_agent":"","ja3":"","session":"3af0bc65-e821-4fce-9ac9-03572d515610","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9df5ac600992303b","strings":["BitTorrent protocol","<-UW1609-TUDsrWWbGoMN"]}},{"timestamp":"2026-09-19T23:17:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"t%\u001e[0���\"�W��W����يz�]��Sb\n�yG#�s~#�\u0018�\u0015\u0004�\u0017'9\u0017ђ�pT���\b�\u0019˼���\n������H\u0001�]�\u001aw�<��\u0001\t9b\u0004G��|ݫ\u0015c��-|�(��J\u001d����[\"��>�]\u0007~=ܷ\u001f׀\u0011G����\u0002|�k\u0015��-B�:F\u0014DU� g����\u001b�1�v\u0012yO\r6�p�YG\n ������'���S�qM���b=","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cb170667-30e7-4b87-9f87-7792ea9e4255","seq":1,"duration_ms":101,"bytes_in":327,"bytes_out":14},{"timestamp":"2026-09-19T23:15:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-w(AvXNkX9n7F","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d77284176584e6b58396e3746","method":"","user_agent":"","ja3":"","session":"5eb92405-4fa1-408f-af49-d19cab7eda9b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d67bca44f1d367ea","strings":["BitTorrent protocol","<-UW1609-w(AvXNkX9n7F"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:41:40.862776+00:00"}