{"ip":"177.245.215.184","total_events":164,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["164 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 31,635 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"31,635 bytes sent","bytes_sent":31635,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T20:21:04","last_seen":"2026-10-05T20:12:26","events_24h":68,"events_7d":116,"geo":{"country_code":"MX","country_name":"Mexico","region":"Jalisco","city":"Guadalajara","lat":20.6381,"lon":-103.348,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-GDL-CGN-215-184.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T20:07:56","last_seen":"2026-10-05T20:07:56","recent":[{"timestamp":"2026-10-05T20:07:56","port":39131,"src_port":49944,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�kU5��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�o\u0000\u0000","payload_hex":"4100fe6b5535fda90000000000000000e96f0000","sni":"","session":"b7171ff4-2e6c-477f-8cfa-c8fe4d136ea6","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":164}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-25","count":41},{"date":"2026-09-27","count":7},{"date":"2026-10-04","count":101},{"date":"2026-10-05","count":15}],"recent_events":[{"timestamp":"2026-10-05T20:12:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-779aTGyQRw8~","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d37373961544779515277387e","method":"","user_agent":"","ja3":"","session":"8c841eba-a22c-4c17-aac2-8d642db0fe75","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1be24ca7e661176c","strings":["BitTorrent protocol","<-UW160N-779aTGyQRw8~"]}},{"timestamp":"2026-10-05T20:11:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"u�����\u0013��+~��һ{\u000by\u0012=U�\u0014�����2��Θ�\u0016y��K\t6��k@���I�����\u0014\u000fj\u0003��D\b�2���K.VT����%�� �\u0006UR9��\u001f�-.��L��\u00183?�M�y\u0013]�\t\u0002�v'm�rf���,\u000e���d\u0012�ջ=VM��4���\u0016̷��K�jC�ۙ\t�8�_��i��E6ltF�h#����̊\u0014\u00119(��dQ�X��G�>>>��T��`�\u001c����\u0015�Z\nn|��\u0000#�\n;9�m|����(�g3�4\"\u001fr\u001c\u000e��i�6[j�Ǎ9a���\u000f|\u0004OzVO\u0010<*/}_�}b��l��ǜ칡v�,�OD\bⷱ`?I�Ë\u0010ڌ�\u001d�ZʂU","payload_hex":"d3ed1a0da7f3ad1e15e5efbf68507a1eb02c41dfb3a8817f49588d2f00160c8e9d47a00ae51f92e75a93e1429a8bc5c97cc7b336f76f9125261bdf7b3e848a54dddf60c01c95e9f6d315b55a0a6e7cbccf0023c50a3b39ba6d7caed9dbe128dd67338134221f721c0ee5a2699f365b6accc78d39618ebf930f7c044f7a564f103c2a2f7d5fcb7d62d9f46ce8dbc79cecb9a176d22cd94f4408e2b7b1603f49b4c38b10da8cc71d955aca8255","method":"","user_agent":"","ja3":"","session":"fc0b813e-ca76-432a-9c2a-06fbdf6c0a56","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":15,"enriched":{"digest":"bfb1d50bf1263e5b","strings":["OzVO"]}},{"timestamp":"2026-10-05T20:08:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-le!_e5Y-eVqE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6c65215f6535592d65567145","method":"","user_agent":"","ja3":"","session":"f59eab8b-afb8-4883-b20e-fd9e0f7e560d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c45469ce8d5e3454","strings":["BitTorrent protocol","<-UW160N-le!_e5Y-eVqE"]}},{"timestamp":"2026-10-05T00:12:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-ddaf1Q!d*l5i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d64646166315121642a6c3569","method":"","user_agent":"","ja3":"","session":"5f9f324d-eefd-4796-b687-a81cab769f9d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4525daa5e1df4290","strings":["BitTorrent protocol","<-UW160N-ddaf1Q!d*l5i"]}},{"timestamp":"2026-10-05T00:11:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\"/�)��f�\u0014,jS/�\u0015t֓\ti=�\u0019\u0013Z�K��$cK�1`鳔����#�&p\n�I\u0019Ϡ;@EL\u000e)��B+���\f�\u0014�SI:��G�y\u000b���\u001b\u001c\u0000�ƕ��4�<�F�h1M�ϡ\u000ed\u001e\u0017��V\u0004zN��_$mv+�ՑTp!\t�5~\t4R\u0013��\u0001�\u0019\u001f\u0012q��8>�%�\t��\u0002\u001f\u000bV��#Jm��>\u0000K���\t�@v�m\u0019$+\u0002n�H��T��j��S\u0004�n��j:bk[�?P��\u001d3�p�\u0019D�\u000e�;�I?\u0001:��\u0006�멮>���","payload_hex":"ef222fd629efdb66f6142c6a532fc11574d69309693df319135aca4bd2ec24634b873160e9b394fbf691a423e926700afe4919cfa03b40454c0e29e686422b968f9c0cd314c553493aa3fe47ef790b8d879b1b1c009ec69590a534a03c9546e968314dc7cfa10e641e17958c56047a4e8d8f5f246d762bb4d5915470210994357e09345213a3c5019e191f1271e189383eb525f60981c3021f0b56fbf7234a6dbab83e004ba59fee988b8209934076e36d19242b026ea548a88c5491866ae2f35304986ee99e6a3a626b5b843f50ffa91d339570a81944920ed33bfd493f013a85f906c3eba9ae3eeaeda3","method":"","user_agent":"","ja3":"","session":"103c4457-ff8b-4ca1-9983-13bd6a55dade","seq":1,"duration_ms":100,"bytes_in":235,"bytes_out":15,"enriched":{"digest":"b809cca662686d1f","strings":[",jS/",";@EL","_$mv+","j:bk["]}},{"timestamp":"2026-10-05T00:09:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-9Llfrp(r-3ck","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d394c6c66727028722d33636b","method":"","user_agent":"","ja3":"","session":"0f8ccb01-f332-4cd2-bd6c-98569c4ea2f2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1af2fe572e93bb1e","strings":["BitTorrent protocol","<-UW160N-9Llfrp(r-3ck"]}},{"timestamp":"2026-10-05T00:08:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��Kl����x�>\u0002QKH�\u0014�1f|���\u0017�\u0016%f���`7�q�����OݴM\u0004��P�e\f�o��P1q���ލ���\t\u001b�������\u0006��L4/��JI;�\u0000�\u0015�]��5�T\u001f�","payload_hex":"e8e24b6c8bb4bbd278d83e02514b48bd14f131667ce0c5f817ad162566b893e06037997189dadef9b04fddb44d04f6d15087650cbc6ff48d5031719198fede8d83aec8091baea4acc9decee006ae8a4c342fe8cc4a493b9b00a315fb5d887ff035fd541f8f","method":"","user_agent":"","ja3":"","session":"9a74719c-8995-42b5-9df4-721e51b49a60","seq":1,"duration_ms":101,"bytes_in":101,"bytes_out":15},{"timestamp":"2026-10-05T00:06:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-efiT_rS5(ETE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d656669545f72533528455445","method":"","user_agent":"","ja3":"","session":"713f3162-e21a-4cfa-8c36-ca4e008a8188","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ad0d79ecbefe0a1c","strings":["BitTorrent protocol","<-UW160N-efiT_rS5(ETE"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T21:43:10.286210+00:00"}