{"ip":"73.211.48.165","total_events":127,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["127 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 27,211 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"27,211 bytes sent","bytes_sent":27211,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T21:09:51","last_seen":"2026-09-10T14:56:37","events_24h":7,"events_7d":127,"geo":{"country_code":"US","country_name":"United States","region":"Illinois","city":"Maywood","lat":41.8812,"lon":-87.8457,"asn":7922,"org":"Comcast Cable Communications, LLC"},"source_domain":"c-73-211-48-165.hsd1.il.comcast.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as7922","label":"Comcast","category":"isp","url":"https://www.peeringdb.com/asn/7922"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":127}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":86},{"date":"2026-09-10","count":41}],"recent_events":[{"timestamp":"2026-09-10T14:56:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-uzO!7oqaOtRv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d757a4f21376f71614f745276","method":"","user_agent":"","ja3":"","session":"b2fbdaef-d16d-45ba-9c29-20deba98f65c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"da56b41e87a6768d","strings":["BitTorrent protocol","<-UW160N-uzO!7oqaOtRv"]}},{"timestamp":"2026-09-10T14:55:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u000b�\u0004�D6\u000ffƍ�/��\u0002�yȁ䛑�ܙ\u001f��kք'\u0006�y\u001b\u001e,��Q�wEw��\t��\u000bo�\u0017�¦\u0004\u001b��_bQ�\u0011 �E�pk|��=�\u001b��/�+��\u0012c�4�8�ʹԸ��/���0/\u000e\u0013�p��)�\"�\u0017!e9��wy�\u0015��\u0013�Tv����XM��\u0014���]�7���C�oc�\u001a#��&2�\u001eW\t\u0007@O�Z4�^b>a��#ڴ�\u0005�WA�.�[�\u001b銵nF������Q�>1\u0001+\u0010G�j���\u0011\u0002w:�*�_��V���0�b�{us�\u001dP�'7�\u0017��\n>��DY��؜U���3�\u0001��\u0006����,��\u0014","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d97a10a8-d704-4d28-92e8-2f563c78e53c","seq":1,"duration_ms":100,"bytes_in":275,"bytes_out":13,"enriched":{"digest":"108b760fc4d7b9a5","strings":["^b>a"]}},{"timestamp":"2026-09-10T14:53:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-_o3x3NdTa-AS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d5f6f3378334e6454612d4153","method":"","user_agent":"","ja3":"","session":"c2c30324-088c-43ff-9aa3-05152f831bc0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a9afa7b4016bf36b","strings":["BitTorrent protocol","<-UW160N-_o3x3NdTa-AS"]}},{"timestamp":"2026-09-10T14:52:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001c\r-z&_�GYy��\u000f��J����\n+�\u0017�=���\u0004��\b���Dq񙁶�Ӝ�\fS)=A\tD�\b�����|5סn\u001c)/�s��\nl��\\���Ŷ�\u0013\u0019}D\u001c��k''��'\u00004�t��\u001f\u0016lG單�H�z�U��R@b������ԇo\u0016(���\u0003�\\C~���\u001c.D��\u001a\u0007���84yx�2*���D�b9J�\u0000еu:��;���\".A�W�r�.���bʷ�\u001e�\u0000$Ը,<��K�54�-�}��e\u001cI���m��������+����\\ͭ��e��n�gv+!�Nt��Om�GVZb\n�ϥ��J��<\u001b����oq���\u000f�5���)\u001e\u0019��*\u0017���t��\u001f�X�N��7C���ͤ��\u0013�ƍ#\n���+����\u0005Q�_��\u0004��F�.\u0003\"���q�X�p�gq�̬���9��\u0018I,+�\u000b�L\u000b���}FF>","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"651cf75f-f3da-4097-8305-ed5eb1ade9d9","seq":1,"duration_ms":100,"bytes_in":383,"bytes_out":13,"enriched":{"digest":"1c2723509223d079","strings":["-z&_","S)=A","84yx","gv+!","GVZb","}FF>"]}},{"timestamp":"2026-09-10T14:51:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-2h!gcqy0JG~r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d32682167637179304a477e72","method":"","user_agent":"","ja3":"","session":"2021831c-5915-43f5-b0e3-a72d5458839b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b3272b72d1894261","strings":["BitTorrent protocol","<-UW160N-2h!gcqy0JG~r"]}},{"timestamp":"2026-09-10T14:51:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�~z��hл&\u001e�2W|�%�#!�L6���NV��\u0004VE��Y4���\u000e��\u000fz\u0005E؜�os%a�\u001f]|\u001f�\u001d\u000bf�O��m\u001a\u001c��`*ƣ106=x8�X���iN�Ca7�\u0003z\r\u001fvs�Cn��k��\\���V��y��1��","payload_hex":"be7e7af2ff68d0bb261efb32577cdd25a823218a4c36abb8ba4e56eb8d04564580f359349fdbe90ef6d40f7a0545d89cf56f7325618b1f5d7c1fa31d0b66c14f89976d1a1c9da5602ac6a33130363d7838e258abe6d8694ea0436137a4037a0d1f7673c6436ec09c6ba6d35cbbf18456948d79ffdb31afef","method":"","user_agent":"","ja3":"","session":"e7ae4cad-86a4-493b-ac3f-cc86e60d727b","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":13,"enriched":{"digest":"f9d2de200a0dacaf","strings":["os%a","106=x8"]}},{"timestamp":"2026-09-10T14:49:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-)_3ZPOBNV(Sg","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d295f335a504f424e56285367","method":"","user_agent":"","ja3":"","session":"d3bfc32b-024f-46c8-82a9-bd5049508b99","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2372b80745609594","strings":["BitTorrent protocol","<-UW160N-)_3ZPOBNV(Sg"]}},{"timestamp":"2026-09-10T05:10:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000m7P)*]B���ۚ�\u0019�M\u0005>���������vbU=�,U��o�_�\u0002`x��D\u0000�\u0010f�_�������\u001d��c T��C�\u000e��P�j��a�v۵��5���\u0013�:�\u001f��)�\u0016�l\u0010�P�\u0001������y�*0�d��\u0018P\u0002�\u001f �G��joD$�4�\u0016'IY'���4nx�\u0018^�l�I4��J�H>�f*r\u001cHkW\u0014��~�c>\u001b\u0006��ƍO;�_��ۣ��>[J[J���w���y_dͧ��M?ok���Jڟ���j��W_����]�*�9\u0003�\u000b��[6!t�ɂ�b)4���Sj���v�ajQ�_\u0019Z�Ct\u0006h �f\u0012Q��\nBdz�9�,��l1\u0014_\u000e2�։�\u0010��%�w\rf�>9���%�d��r�Q�K�),eǹ��\u0006҈�2�\u0015ԗ6�}�� ��Z^\u0010�\u00111\b��g\b/(\u001aԼ�5\u001c�s\u001c��C�����V�\u001cl\u0000#3pC��\u000e;�l;\u0019�\u0002�A��\u000fŪ?PO��b�~o�\u000b;F|N%ܺ���]\u001e>�2(���\u0011͇\r��\u0012\u0019�x9��·%�+`_w�\u0014�\u001f�H�P�� Of܈�*�x\u0015���R\u001e&�;�Y\u001d\u0003d��F�$[�X���^)�\u001b�`#���bC5]�;��vI����O�d1-�;�\u0017]��#Ȁ\ft\u0002�%���r\u0001�m��\u0004�\u001b\r\"��\u00019�ͪ:����h�\u0013��\r@�\u0001�MR�]K�R��\u0000ף�����U\u0014\tPS��Bv+��I\u0000E ��<��1@�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0597722d-3b62-40bf-b044-8aaaa71e52cd","seq":1,"duration_ms":100,"bytes_in":541,"bytes_out":13,"enriched":{"digest":"2f5da5c6a26755d9","strings":["M?ok","[6!t","#3pC",";F|N%","+`_w","bC5]","l#3pC"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T08:59:30.671113+00:00"}