{"ip":"177.245.243.187","total_events":152,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["152 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,336 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,336 bytes sent","bytes_sent":10336,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T03:34:59","last_seen":"2026-08-20T03:56:40","events_24h":26,"events_7d":152,"geo":{"country_code":"MX","country_name":"Mexico","region":"Guanajuato","city":"León","lat":21.1276,"lon":-101.6759,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-LEON-CGN-243-187.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":152}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":109},{"date":"2026-08-19","count":17},{"date":"2026-08-20","count":26}],"recent_events":[{"timestamp":"2026-08-20T03:56:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u0006y�(\f*Y5�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8a10679be280c2a593593","method":"","user_agent":"","ja3":"","session":"4993effa-add2-4d0d-af23-4a9a2731c2a8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3708d260e333149b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:50:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��<D�k��T��\u0016","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83c44dc6b8fe554a7c616","method":"","user_agent":"","ja3":"","session":"ef6d7d33-885c-431d-b0f2-fa44b1a17c64","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"cc6453b1c03f3f2f","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:45:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��)%~p\u0014�l�&0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b829257e7014936ce72630","method":"","user_agent":"","ja3":"","session":"7a50b694-bde3-44c1-ab7d-2dddf24b5ec1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3345ec2f2ce4c398","strings":["BitTorrent protocol","<-UT360W-",")%~p"]}},{"timestamp":"2026-08-20T03:42:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��3 M�ԁ��z�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b833204de2d481c8eb7af5","method":"","user_agent":"","ja3":"","session":"1a8c3ed5-4198-44e7-b46c-1335ccca6af3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7a7650c8315c2d7b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:35:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��^�6\u0006��,�\u000b/","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b85ef13606fbbe2cad0b2f","method":"","user_agent":"","ja3":"","session":"ff6190c9-1e75-4671-8609-842c0d0394af","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"bf489b55e1b49216","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:31:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���l\t\th��s�L","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f66c090968e1b473fe4c","method":"","user_agent":"","ja3":"","session":"2bb2873c-c46c-4b33-9c24-9702dd81d39f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f274349efb1cc7e5","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:28:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����d\u0001�9\n�K�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f58d6401b5390a994be8","method":"","user_agent":"","ja3":"","session":"0773f208-4850-491d-8f86-bfa6af33e649","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9308cea75e7b77e1","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:24:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��X\u001a�#�1=\u0006^�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8581ae923e2313d065e86","method":"","user_agent":"","ja3":"","session":"46fc2426-aaee-4e32-8b90-aed48787e7bd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"82a4965af79867af","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:19:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��p�B��1�� �","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b870a942f2bf31ddf420ca","method":"","user_agent":"","ja3":"","session":"22f58fc2-c3ca-4c36-b894-4761f5fa4255","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"2db51f8c55952cbb","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T03:17:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���Cʢ�\u001e9ia'","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89343caa2a61e39696127","method":"","user_agent":"","ja3":"","session":"888b65a9-9bec-4b41-9aec-740c3ab01930","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a31b269c56a41e79","strings":["BitTorrent protocol","<-UT360W-","9ia'"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:40.562234+00:00"}