{"ip":"201.173.67.163","total_events":81,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["81 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,294 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,294 bytes sent","bytes_sent":18294,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T02:36:32","last_seen":"2026-09-04T05:31:10","events_24h":0,"events_7d":6,"geo":{"country_code":"MX","country_name":"Mexico","region":"Nuevo León","city":"Apodaca","lat":25.793,"lon":-100.253,"asn":265594,"org":"Television Internacional, S.A. de C.V."},"source_domain":"201.173.67.163-clientes-izzi.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":81}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":81}],"recent_events":[{"timestamp":"2026-09-04T05:31:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD60WGN(oPDnEcN6JP0K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644363057474e286f50446e45634e364a50304b","method":"","user_agent":"","ja3":"","session":"9310dc45-dc10-45fb-a509-3ffe3600a424","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3de8909272e96a4a","strings":["BitTorrent protocol","<FD60WGN(oPDnEcN6JP0K"]}},{"timestamp":"2026-09-04T05:28:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0016���A����\u000e��meQ\u0005O�r���1�<厥�����Fh��0�Ղ�{�U\b�Y��[�/\u0007� \u0015�CX���y>n'\u0014|\b�\u00195B;��\u0013�\\�O�\b\u0019O�\u0011\n��\u0014�I%B���y�c��\u0011���ЪOa6)\u0012��\u0006R:�|xU{ݫ\u00198�;heM9�\u000e$k`���\u00014DS4r>��\u0018�k�\u0013�\n�dd$����m��+\u0013\\Rt�0O;\u0005�LP�T{��c���0'�C\u0007���~\u000f%��c�N\u00102�*3���7ut\u0003�r��\u0019�{�@��\u0003&�[\u0016˩��F��j�q\u0013�8��+�*��\u0019�AA\u0002�L��� �c�\u0017�R\u0014���w$w\u0019��T��Z�`W\\i\u0004y�ݜy������FD-G:[��n�ػ'ɇ��@'a\u0015�\"b.b�\u0012�<'Pk����\"��b\u000eܫ�rI�s\u000bK\"B���\u0002���^P\u0011�ؗ�k9�P��ۻ\u0010t\u001b:6�7T��=w\u000eqm�N��s\u000f٢�Ob�=\u0015W\u0014\u0017\u0006�>{q\u001c\u0002\u0005%�mK�S\u001f�\u001d��\u0014\u0016\u0013��VG%��\u0010���\u001c��ɺ�h\u001a\u001d#���^KLM >�u�|��f[�m�\u001e1\u00173t��m��z�P\\}����\u00159�.��Ȯ\u001fe��[���~t���D�J8pJ~6`�Eo�O8*U������Sy���fq�=\u001f�WowB��^\u0016l\rEv�a�o�*�d��\u0019��u��\u0016�y��\u0012�� ","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"036b2768-1b26-45a1-ab0d-ef917a0066f1","seq":1,"duration_ms":100,"bytes_in":595,"bytes_out":14,"enriched":{"digest":"888138756fb7e966","strings":["y>n'","Oa6)","|xU{",";heM9","4DS4r>","`W\\i","FD-G:[","\"b.b","<'Pk","^KLM >"]}},{"timestamp":"2026-09-04T05:26:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6EA-6h!VVL_0)lhPoE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443645412d36682156564c5f30296c68506f45","method":"","user_agent":"","ja3":"","session":"90b36a83-4d09-423c-99ae-f829033d6c7c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bba28ca7e34b5eeb","strings":["BitTorrent protocol","<FD6EA-6h!VVL_0)lhPoE"]}},{"timestamp":"2026-09-04T05:24:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\\�0-ןz^�N�G�q+�-�X��\u0019o�k�ɻ:$�d�k�6��.Ix��P�%y���\u001b�\u0001��_��]�Oi���Z�o��#K\\�\u000b;��Œ��^4b�t�a�\u0014f%d<.^��c�\u0012�r_�i�ɌQZ�:I�\u000ez����{�L!�\t�[>H�;���M\u001dLηz��\u0006��\u0015y[H��\u001b���'�\u0002�'X�.T��e>��U\u001a���%\u000e�\u0006�\u0012Q���F��7%\u001f��X\u0017�G^*D�T���ݾ���\u0010�\u0014�\u001fj�o\bj\u001e[0�R����s\u0013?#�Hd?C���J��켄�\b��8^ц�m�=W*E\u001aP�`B#\u0014'2<�=o��\u0017��Y��ӔB A�V��#\u000b�\u0000�%k7��c��B��q(�n�^Z �A��4��a3�8�C\u000b?W\u0019\n�u��+�#G�1��\u0015���'Hi1-��vߝ�\u0014C\u001dA��Y{��v  \u0013O\u0010\\�a��&�\"/I`Z(}���}\n�W�r�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c358c770-d254-4579-9b06-429c52b70c9d","seq":1,"duration_ms":100,"bytes_in":405,"bytes_out":14,"enriched":{"digest":"4ddc7a37c4022392","strings":["f%d<.^","G^*D","Hd?C","'Hi1-","\"/I`Z(}"]}},{"timestamp":"2026-09-04T05:22:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6L-3uQqbWNlAV3m9rF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644364c2d3375517162574e6c4156336d397246","method":"","user_agent":"","ja3":"","session":"7729fd80-0cd2-4d17-a21c-a5a2821716e3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f5314aa66fe41e8e","strings":["BitTorrent protocol","<FD6L-3uQqbWNlAV3m9rF"]}},{"timestamp":"2026-09-04T05:20:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u0004_�)\u001e'����Y����\u0003�����\u0010�\u0017\u0014��h�q��M��G��٘pYa�_����h�E��\u0001�T$\u001c\u0017\u0013���IxhJ\u0000�X0��1ߒn�?�\u0006�Ċ����\u000f�\u0002�u=�A{��\u0002\u0002�n\u0002��\u0016�6����TJ�,�����a\u0016�<L\u001c�j���5¤\u0015+\u001b0�\u0003�(�p�p}���\u0007�?t�.08�\r��!\u0002�\u0012��41�t�S��1\u0001P)\u001cx�w\u001a��8B��2���K\u0019fޭ4@��{�1v���i%��Kp��G\u001c�","payload_hex":"8ebeb6045fea291e278d81b4cb59a9aab6a7038eb0f5fbc910811714819c68a67189894d85de47dcf9d998705961c65f92c0f88b68e845b89f019554241c1713c7f39c4978684a00cb583088aa31df926ec63fb806fdc48ab6b8b0a20fba02f4753d9a417baa870202da6e02f8c916b4369985cde6544a9f2ce0ede39bda6116913c4c1cf96ae883ce35c2a4152b1b30f703d1288870be707d91e69b07bc3f74ea2e3038940db8be2102db12e3fa34318e749453b9c3310150291c7893771aee833842a3f332ced3f44b19667fdead344087897b9b31769ff39769258aa54b70fc92471cf3","method":"","user_agent":"","ja3":"","session":"4e3e3e4f-1c4a-4d02-b506-7f8c0d044603","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":14,"enriched":{"digest":"9cdfe617f960935b","strings":["IxhJ"]}},{"timestamp":"2026-09-04T05:17:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6!tB0qC*E)UI!OW3QB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c4644362174423071432a45295549214f57335142","method":"","user_agent":"","ja3":"","session":"187ab9dd-ee30-432d-8c67-ddce395a3383","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9c7e77f35536aeb3","strings":["BitTorrent protocol","<FD6!tB0qC*E)UI!OW3QB"]}},{"timestamp":"2026-09-04T05:15:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0018+�\u0002ξ�f(��u�\u0016B���ė������@�\u0000��|���]�e�i�\u0016un\br��:5�(\u0017���\u0014��k��\u001c����Ɇ�s�Gπ\u0012���-�)4\u001d���\u0014#;\u00123M�\u000f�\\�����\">���EUpR�\u001et���4�P�ܼ��","payload_hex":"9fab182b8202cebe9e6628f6e775d11642e0f1b2c497e3fdf0b1b0d7408f00e4fe7c84bb905d8065a4699e16756e0872fb8d3a35e22817a7bdd11493ef6b9a811cb6fdede7c986c5738f47cf8012b8a7b82dba29341d9c94eb14233b12334dfe0ff15c997fa7f7e0b7223e9aa5cd45557052921e74e1ff8334e750b7dcbc92cc","method":"","user_agent":"","ja3":"","session":"29f843c1-5ccd-45bc-9745-52b7e7c9d623","seq":1,"duration_ms":100,"bytes_in":128,"bytes_out":14,"enriched":{"digest":"e7eae3692ed72dcf","strings":["EUpR"]}},{"timestamp":"2026-09-04T05:13:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<FD6e4WV9_D8LrS7Z1Czj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c46443665345756395f44384c7253375a31437a6a","method":"","user_agent":"","ja3":"","session":"4739f5a8-fa07-413e-8858-26adf40e027f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"40374d5799a650cd","strings":["BitTorrent protocol","<FD6e4WV9_D8LrS7Z1Czj"]}},{"timestamp":"2026-09-04T05:11:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"hi�\u001b���[��\rg���\u0014���\u000f�qǀG��\u0010\u0013��F�4H\u0018�\\��W5-�+\"��\u000eU�\u0017\u001d�� ��Y���w`�����\u0002ǴC�����\u000f\u0000\b���\u000e\u0011\u001e\u0007��gG��\":U\u0016�U����p�S\u00143\u001d,���k\u0013��^)\u001d\rA\u0014~�\u000fA\u0018\u000e.*��\u0000�\b\u000fcE�\"*:`�\u001d��N��7��\u000e\nA����׊$�e���ԓ��cE��HT�","payload_hex":"6869bc1b8d91985be0e40d67ede5f01485e9e80f8071c78047e78d10139fdc46ba344818955c80cf57352df02b22d7ec0e5588171dd5f9209ca559ff85d177608ab09ec19a02c7b443a2afdffccc0f00088ff2a30e111e07a7886747a5f0223a5516c755c0f6e1a3708e5314331d2ca88de96b139ed75e291d0d41147eae0f41180e2e2afa9d00e9080f63459f227f2a3a60911dade04ee2c937a1c30e0a41e9d4f4b5d78a24e765bac7e5d493e2f46345a89c48547faf","method":"","user_agent":"","ja3":"","session":"30a37d2a-218d-4667-8f31-71bdeb3fe9bf","seq":1,"duration_ms":101,"bytes_in":183,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T05:20:24.106988+00:00"}