{"ip":"201.173.66.167","total_events":295,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["295 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 63,621 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"63,621 bytes sent","bytes_sent":63621,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T02:12:23","last_seen":"2026-09-09T08:13:16","events_24h":0,"events_7d":295,"geo":{"country_code":"MX","country_name":"Mexico","region":"Nuevo León","city":"Apodaca","lat":25.7718,"lon":-100.2489,"asn":265594,"org":"Television Internacional, S.A. de C.V."},"source_domain":"201.173.66.167-clientes-izzi.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":295}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":295}],"recent_events":[{"timestamp":"2026-09-09T08:13:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6upFwvU3B.gq*DUvkJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443675704677765533422e67712a4455766b4a","method":"","user_agent":"","ja3":"","session":"28c84d97-1e89-4c06-bfb3-73bd2087d4f7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0ecf0e8cf388aada","strings":["BitTorrent protocol","<FD6upFwvU3B.gq*DUvkJ"],"iocs":{"domains":["fd6upfwvu3b.gq"]}}},{"timestamp":"2026-09-09T08:11:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E��0o�\u000f�f3X���W��Ϙ�\u000e��j5�����o�V���e(�b�b�Mg��h\u001c��\u0000��\u0012nb�!�<m�)��&*)I\u0006M\u000e�o�\u0002dw�����\u001b\u0016�Yo�:�%�\\&y'%�\u000e,�7����\"�Ll��\u0001`\\���(\u001bߴM�MZ�M�r�`V��e@�O*�A�����RFoX\b�9���*I�� O�p\u0007�_=ռtˬ\u001b��Y�","payload_hex":"e045c4fa306ffc0ffa663358b8889557c8ffcf98980edff96a35d6daf5f5f06f9156b2ffce65289f62c662a24d67aeda681ca59e00f1ec126e62b221f93c6dc72983b5262a2949064d0eed6fec026477c5d5cfd9f01b16ab596f9e3ae325c95c26792725d90e2ca837b498feac22b64c6ca98b01605c9f999f281bdfb44d964d5a894db672ae6056f0956540bd4f2ae141def7aba29452466f5808e139c9f9a52a499c8cc2a04f887007c55f3dd5bc74cbac1be69859fe","method":"","user_agent":"","ja3":"","session":"d5bd7668-3339-455c-9679-d8dc1a85f77f","seq":1,"duration_ms":100,"bytes_in":183,"bytes_out":14,"enriched":{"digest":"fbfbd7ce9428b1c9","strings":["&*)I","\\&y'%","RFoX"]}},{"timestamp":"2026-09-09T08:10:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6u46US9(o_)vBc61CU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436753436555339286f5f2976426336314355","method":"","user_agent":"","ja3":"","session":"73dd381c-4e5c-4d31-bc7c-dc6e627a2534","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"170c8b0f368071d4","strings":["BitTorrent protocol","<FD6u46US9(o_)vBc61CU"]}},{"timestamp":"2026-09-09T08:09:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��G\u000f�g��ĉ��7{���\u0015I��߈e� ���N��Z/ �R\tV$�#��\u0004p��:��8 ���\u0007����;\b4��D}�Z�S.���Nx�o�\"�3ʩY\u001e�a�tO\r�_�f�+�!b�S�h曭f\u0003w�R��O\u001f\u0005��5\"���K9�\\\u0016\u0011����Ow+��\u001c�x|\u0001+'x@���Әs�\n�+8L\u001c��h�Râ���~�\u0006Pȶ\t{Ǵw\u0001�ik����N�\u001aQ��~7\u001cS��8� -=O\u0013����Q����~\u0005hi�\"4)\u000bH��;:w�z�8�L��\u0001���rc���\u0012�X\f,�p�p���,T�^����b�~$�g��vfJp��5�n>\\{.䚲f�;\u001a\u001e�����L\u0014�m�6�(�ހ�^Zu��\u0003H_F\u000f�3x��\u001b\u001b@�\u0005��+N�","payload_hex":"d5fb470fd767cedec4899db2377bb697ad1549fcfcdf8865bd209cefc34e89ce5a2f20fb520956248f2390a20470f5ac3adafe38209fa39707f8c190863b083490ba447dfb5a8d532eb2b1ff4e78c46fd6228133caa9591e8861a8744f0dcd5f8b66a62bac2162ec538068e69bad660377a052bfe94f1f05c7f43522be9b834b39825c1611818aa3de4f772bb8d51c9d787c012b277840c0c5d6d39873a80abe2b384c1c96e2689d52c3a297b19b7ea90650c8b6097bc7b47701f8696b95a4ecca4e831a51e8d97e371c53e9ae389d202d3d4f13bd9184f651b2abb79d7e056869cd2234290b48eca73b3a77e87abf38da4cabe001c1eafc7263edb0be1298580c2cd870d270c0afeb2c548d5ebbdfed8e62c87e24b367beef76664a708eea35e96e3e5c7b2ee49ab266c13b1a1e838381f2e04c14d36d9436c32895de80d45e5a75ced87f03485f460fa3337886d31b1b40b505ea8f2b4edd","method":"","user_agent":"","ja3":"","session":"cb40f63c-2247-4ed3-b321-93c592066708","seq":1,"duration_ms":100,"bytes_in":345,"bytes_out":14,"enriched":{"digest":"b68adb00114ab6b4","strings":["+'x@","vfJp","n>\\{."]}},{"timestamp":"2026-09-09T08:08:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD64uCS0CXg9BT(sp(K!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644363475435330435867394254287370284b21","method":"","user_agent":"","ja3":"","session":"19f42ba3-51b8-4c32-a7fd-1d8cd37209fe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"613317f4871e3d2b","strings":["BitTorrent protocol","<FD64uCS0CXg9BT(sp(K!"]}},{"timestamp":"2026-09-09T08:07:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"$Հ�O�\f\u0002�\u0007E�kT�A4\u001d�\\��K��=Z�Ԥ߹����l�^���u��FTӏ�E\b�\u0019K7\u0013g�2��\"�M��;n���Y��5.Pc���M�8�\u001f�\u0015*�^��x�\u0004Q\u001e�/�'g�`�7�I�OU�4��J\u0004c��MJ�d\u0002�\u001f��:\f̉w\n�s�1��֛���\u001d��D®M��g\u0004��\u001d���\u0007 ���:מY\u0018���W���2��˭r\u001f��X\u001f��4�<�=�B��-��\u0007����\u0019�z^��n?bM>��\f���.?r�\t6�q���|E�6��\f\u001a_�|����\u000e�b �'ɯ�\u0011�.�A�x���<.{U-�/�gr����*�d��\u0010G;�U_�!�ԛ`]���=�;6��(�\u0012��eA���l����^�{\f\\�\u000e�2��RXJ�\u0003�\fI�ƢC��ӪŦ\u0011\u0002N\u001d܊�I>j\u0014J}����\u00062�����AS}$���,ý�nj\u0004SZM!��u%_GH���>&��4�\u0014G�\u0001\tO`�w�4","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b7b7ab6d-14a8-4a69-9896-7c1a8455274f","seq":1,"duration_ms":100,"bytes_in":434,"bytes_out":14,"enriched":{"digest":"dd8f8b6347776c62","label":"Redis (RESP)","strings":["5.Pc","n?bM>","<.{U-","AS}$","SZM!","u%_GH"],"iocs":{"domains":["5.pc"]}}},{"timestamp":"2026-09-09T08:05:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6anDbOy!Od4mi4(j9k","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c464436616e44624f79214f64346d6934286a396b","method":"","user_agent":"","ja3":"","session":"2a2c401c-12b7-4679-9e4e-d219d61e03a5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2901e8955f707912","strings":["BitTorrent protocol","<FD6anDbOy!Od4mi4(j9k"]}},{"timestamp":"2026-09-09T08:04:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���)�J��6\u0016�W��\u0018���^>%�Mw��s\u0017��9�#��зL+��$�\u00153ig<�k�F J6L9���W�ںlr/��_K���\u0015��Ȕ��xE������@����Z\u0002$Mg}p����!vܤW��L��\\YN\u0010\r��_���c\\jɥ\rk*��\u0007��������x>D\u0005U=���iܰ��\u0007XV\r\u0006J^Hd\u0011=��S�p\u0010\n��1\u0014�l��\f�n��)�2�h�3)��SqA,\u0005���6c^��r\u001f[�rӖ\u001d��F�FdS0{��[��6V�2��)�H�Xw.\u001a���9��\u0012��S,�7~��˓\u0006�#�\"�-��=���lf]U�f}0h\u0006�_�Jo\u0012�`���2��.�V8�sa��Ǿ�4�B\u001b㖲�\u0005��\u0012\r�d-ϰ�Kb\u001aY���4m��Kr\u000f�oR�+��R�n�f}�\u0013VvȌ\u001e�K(ӹ�\bP����y�[�XA?�\u0003\u0002��ޝh�\\�t��(\b\u001d`�Cɇ\u0019:�J���\u0017I\u001f�޵Io\u0013�\u0006K\u001fC���g��t������>-\u000b1�n<�+Z˅�@o�߅Eݽ(��6��k\u0001=_\n�nqՊC\u0016���8�6+��;�U���͒�#��I{��<�9v�{w;\f��E;>�7O��J�,\u0018-G�)(�O'\u0011W�ԁ�\u0011�X���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0335f218-1f54-45dc-8230-521d4ca51380","seq":1,"duration_ms":100,"bytes_in":553,"bytes_out":14,"enriched":{"digest":"b2d3787b0dac2d55","strings":["3ig<","F J6L9","$Mg}p","J^Hd","SqA,","FdS0{","lf]U","f}0h"]}},{"timestamp":"2026-09-09T08:03:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6MmfvFChAwulZRn*SM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644364d6d66764643684177756c5a526e2a534d","method":"","user_agent":"","ja3":"","session":"dfa23e92-4061-4a07-b5c6-5c8b46c83e12","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7b9de6e6c235eccc","strings":["BitTorrent protocol","<FD6MmfvFChAwulZRn*SM"]}},{"timestamp":"2026-09-09T08:02:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�m܉�\u001e\u0004���h\u001c��\u000f�\u0006s�w7�%0�Ƭ s\u000f���F=,��)K\u0014?�+�N}m\u0013\u0014M��פ+�D�+KV���Aq�S�\r:K���òكĻن���'!���T�\u0002y","payload_hex":"ba6ddc89f51e04bfcee4681c81bd0fa60673dd7737db2530efc6ac20730f8692eb463d2ca5f2294b143f9b2ba44e7d6d13144da99fd7a42bd5448e2b4b56a5c6e04171cf53f30d3a4bbd9cfac3b2d983c4bbd98695a5ad2721c6fad154ae0279","method":"","user_agent":"","ja3":"","session":"f8531203-b2ae-409e-858d-9bfc5fb291cd","seq":1,"duration_ms":100,"bytes_in":96,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T05:23:54.333939+00:00"}