{"ip":"177.239.80.110","total_events":181,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["181 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 37,387 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"37,387 bytes sent","bytes_sent":37387,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-05T03:55:22","last_seen":"2026-09-05T07:59:21","events_24h":0,"events_7d":181,"geo":{"country_code":"MX","country_name":"Mexico","region":"Chihuahua","city":"Parral","lat":27.1277,"lon":-105.694,"asn":28509,"org":"Cablemas Telecomunicaciones SA de CV"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as28509","label":"izzi telecom (AS28509)","category":"isp","url":"https://www.peeringdb.com/asn/28509"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":181}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-05","count":181}],"recent_events":[{"timestamp":"2026-09-05T07:59:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�rlV\u000bɦ�|@�\n=\u000e�\u0019C�+:jv��}�<\u0003�UI�M,0b3.X�$�ƨCh��x�\b`��,�Rq#��M������k$��\u000fR)Ki�\u0005u�Z��h1��<A��Im�l�*N�\u0003sfR\u0000<\u0000�>��W���W�{�-޿-�9\u0007㿞bz�I\r)�eQ/��B\u0004\u001f�i��Q�\\t���\\�\u0014�nj�`�8F��5��\u0006\u0005���=c0ѩy�tؠ��T�\\\u001fM�u\u0016���\u0018�\u000f\bm~���\u000b\bڬ\u0010�ܡ��\u00163)����}\u0010�\t:|ɺ��H�j�~z\u0017O�\u001f\f\n;�\nӰ��^:�U��\t\u00193�*J8\u0013Z��\nl���`��-�nt��i����CNr�M-��_O��\u0011���cϠ߈��\rˇS�4�,�","payload_hex":"ef726c560bc9a6e97c40970a3d0e9e1943902b3a6a76f4db7d9e3c03be5549e54d2c3062332e58a924a0c6a84368c09578ab086083cf2cd7527123b8f44db9a8a7f19e856b24baf20f52294b69ad0575c25ab89968319b9d3c419888496deb6cec2a4efa03736652003c009e3ec6d857baacb857f17b982ddebf2d853907e3bf9e627aff490d29d465512ff1f642041fed69b9bd51b25c7487f5d15ce614f76e6aa460fd3846c0e735f59c060594eaec3d6330d1a979ac74d8a0ae9754935c1f4d967516f5b9a118cc0f086d7e978eaa0b08daac10fcdca188ba163329abf3bbb97d10b9093a7cc9ba929648d26a8e7e7a174fb81f0c0a3b800ad3b07fc0d85e3afe55a986091933c72a4a38135ad8f50a6cede6c960eb912ddc6e74adab69beb98ec0434e72a24d2dd6e05f4ffbc611c1a0bf63cfa0df88b3a10dcb8753d934ef2c8e","method":"","user_agent":"","ja3":"","session":"74b256a6-20a5-45a5-b048-e51df3e46489","seq":1,"duration_ms":101,"bytes_in":323,"bytes_out":14,"enriched":{"digest":"05f798697aa15628","strings":["+:jv","M,0b3.X","R)Ki","sfR<"]}},{"timestamp":"2026-09-05T07:57:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-TG-IGqUnJ*_G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d54472d494771556e4a2a5f47","method":"","user_agent":"","ja3":"","session":"61299120-ff45-4074-8533-eed82eec3daa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e52a264dbdcdfea1","strings":["BitTorrent protocol","<-UT8360-TG-IGqUnJ*_G"]}},{"timestamp":"2026-09-05T07:55:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0011y\u0001,\u0016ر \u0016��\u0010\r��xݣ7SFI}�$$�R�#��'����{��ۉ�fGA��\u0003�����\t\u0019Ȋӧ�\u0017�y_E�\r\u0017���\nd��c�m7�����X~B\u0001B�Vu0�ͼ]��\u0018:�b���/\u0014:`��\u0017�tOqR�{��+�ɱ�c�u�|$���=i��D�Sx!\u0015iƼ6k���Fٚ\u0015�\u0012�D���V�p�n= ��h����aP�R��F�\u001e��rY{8���|�a2��F\u0019�d���b���m\u001f�\u0011W�Y\u000el\t#��&D\"Tu���@���m��\u00114\u001d��\u0003Z3 �\u0003���`��XD��8�~\u0017�\t�\u001d\u00063����S���������G�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2f7cec58-b5ea-4a59-a0cb-6a87fa680ce4","seq":1,"duration_ms":100,"bytes_in":290,"bytes_out":14,"enriched":{"digest":"b60d8bf3f402a785","strings":["7SFI}","tOqR","rY{8","&D\"Tu"]}},{"timestamp":"2026-09-05T07:54:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-wqicaDnV~0co","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d7771696361446e567e30636f","method":"","user_agent":"","ja3":"","session":"b3b85f31-705d-4e1b-b88c-7bca3a80f2f2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"58cdf67c9f84ebf4","strings":["BitTorrent protocol","<-UT8360-wqicaDnV~0co"]}},{"timestamp":"2026-09-05T07:52:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�@�)��A����D\f�s%u�\u000b��Y��+������c\u0010�\bk��-\u001a��N�$�}\u001c������)o|l�2\\/��K��\u001f(j����\u001e��\u0002�c��˖�h�f�:��4���84�'�xKò�\u0016\u000e��<aJ���\u0013\u001a��u�p����b�&��o�C\u000b�`����D�����","payload_hex":"9740e929bbef4187ab8787440cb0732575e20baef359b8fc2bdcffb0d6c0be631086086b91a92d1a9c974eee249e7d1cfbdbdef6fde9296f7c6c80325c2fa2ae4bae9f1f286a9eb295cc1ef5a0028763a5d3cb96e46898669e3a84a93496d8fb3834a127d0784bc3b286160e94af3c614ad6efc6131ae58675c670a97f8fd3cf627fd126808e6fef430b8a60a8f88b8c44c9e3d9feea","method":"","user_agent":"","ja3":"","session":"6f612ea1-5631-4e73-8065-b9596a485d2a","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":14,"enriched":{"digest":"4943628d483e4809","strings":[")o|l"]}},{"timestamp":"2026-09-05T07:51:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-1Yt.DO5kXiea","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d3159742e444f356b58696561","method":"","user_agent":"","ja3":"","session":"dab472f6-db2d-49d6-a6fe-a23e5330f4c3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1394f09f3e965bfc","strings":["BitTorrent protocol","<-UT8360-1Yt.DO5kXiea"]}},{"timestamp":"2026-09-05T07:50:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":">��(��ޛ\u001d���:\u0018���\u001f�\u001f���s���\u000b�\u0011\u0019\u00062^������U&\u001eb�\u0014�Y��95�\f�0G�����hug7X�\u0015��\"JR\u0016\u0007��?/GEQ�Fy�\u001e�‹��{\u0015ӣ�0\u0004���\u0014�\u0013ٸ\u001fi-\t\u000e��iY\t�1m:|��J�U>�V���\ngc(�*\u0015�[�.1k�\u000b\u0006n����\u0010~3<\u0000����Y����p¥�d��{4LOY��<C�jZ�\u0012��}�\\��\u0015�;i��f��8�\u001d\u0010�\u0013��P��{v�.ki�ē�\t��\u0005{�1`�9=\u0010f\u000b��\u001d4��j��\u0003\u0017F�\n�䞎�V","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e40a08ad-b27e-4ca1-b043-4b2386988cb0","seq":1,"duration_ms":100,"bytes_in":261,"bytes_out":14,"enriched":{"digest":"4c850b04d3bc0147","strings":["hug7X","?/GEQ","1m:|","{4LOY"]}},{"timestamp":"2026-09-05T07:48:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-mbEL~-kt0dsw","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d6d62454c7e2d6b7430647377","method":"","user_agent":"","ja3":"","session":"e5c2587c-fcf7-4f54-be28-7eef692b7684","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4bb50e3e8d4220c0","strings":["BitTorrent protocol","<-UT8360-mbEL~-kt0dsw"]}},{"timestamp":"2026-09-05T07:47:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R�\t��4I\t1i*t\t\u0018���\u001d\u001et�?��'���s�|3[?Ve2��,\u00061ܪ����0\u0016z��\u000b��\u000b���ii�Xp�H՘\u0016�����΍�\u001e|�t��l���b�\u0015��W\u001e���ՠ�\u001f�A�J�\u0000�\u0015.\b\u000b/��{M���\u0012 �p���Z5\u0016ZGF�\u001c\t�nUy7[�]K�ԉ\u0002/�x�x��\u0018���{6 �6�2\r�b\u000e�^%�6\u000f�O�ɤm��>\b��q�{���ob��Fk�'��o������\u00166��\\߳\u001e��V/e\u0004�<��8\u0014�\"m`B8�\n����\b|��!ẹ-�s��\u0019'\u001f����Cu8��|�'ĩ\\w��og\u0005�*��\u001e����\u0012�ˀ\bف�X\u0001q\u0001��C{T@����J�����-T�\u00101q�Ԡ�m\u0000<","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7922b29b-31d8-4094-9dea-6166d91600de","seq":1,"duration_ms":101,"bytes_in":332,"bytes_out":14,"enriched":{"digest":"fb466132a27fbd0d","strings":["1i*t","|3[?Ve2","nUy7[","\"m`B8","C{T@"]}},{"timestamp":"2026-09-05T07:45:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-KgDTPxyE.H2P","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d4b674454507879452e483250","method":"","user_agent":"","ja3":"","session":"3991ec51-421d-438b-a710-5ec07490e918","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"013a1272093e6860","strings":["BitTorrent protocol","<-UT8360-KgDTPxyE.H2P"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:34.368772+00:00"}