{"ip":"177.245.252.232","total_events":167,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["167 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 11,356 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"11,356 bytes sent","bytes_sent":11356,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-06T19:52:02","last_seen":"2026-08-17T03:54:17","events_24h":0,"events_7d":117,"geo":{"country_code":"MX","country_name":"Mexico","region":"Guanajuato","city":"León","lat":21.1276,"lon":-101.6759,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-LEON-CGN-252-232.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":167}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-06","count":16},{"date":"2026-08-07","count":26},{"date":"2026-08-08","count":8},{"date":"2026-08-14","count":41},{"date":"2026-08-15","count":49},{"date":"2026-08-16","count":16},{"date":"2026-08-17","count":11}],"recent_events":[{"timestamp":"2026-08-17T03:54:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����3S�V{cI�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b89ace3353e7567b6349fb","method":"","user_agent":"","ja3":"","session":"1e8b46fa-dc32-4049-841c-0e7d5e632109","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"60e420ebb64a5428","strings":["BitTorrent protocol","<-UT360W-","V{cI"]}},{"timestamp":"2026-08-17T03:47:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��qY.Dҏ+?��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b871592e44d28f2b3fabde","method":"","user_agent":"","ja3":"","session":"a346fe54-bab0-448d-9ffe-1ce10b74aee7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1727f08ec1da823c","strings":["BitTorrent protocol","<-UT360W-","qY.D"]}},{"timestamp":"2026-08-17T03:42:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����\u0013���'��J","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8fd99139bf1952795d74a","method":"","user_agent":"","ja3":"","session":"a83222cb-cea4-4cd7-968b-ab98176df71b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"8bbb7f93ecbe3513","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:39:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���#�K�J�R��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8be23944bcd4a9552a980","method":"","user_agent":"","ja3":"","session":"8a141bf2-51ac-4f09-b7e9-0651e830d717","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d98dc7772a7532cc","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:37:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��p��̗n\u001b+&�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87087b2cc976e1b2b268a","method":"","user_agent":"","ja3":"","session":"f4a49127-313b-402d-ac6e-661297512645","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d463182015c2ddcf","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:35:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��$���o�\u0007Ŝ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b824ccd7d36fa67f07c59c","method":"","user_agent":"","ja3":"","session":"fa08de04-78b6-43d0-958a-047ef30af315","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"dc95f62d23d35138","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:33:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u001e���/;x��i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81ef1a9d82f3b78e0b969","method":"","user_agent":"","ja3":"","session":"9e829e94-5505-4908-bde6-083fceb8cdeb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"2bcc638c13df9fe9","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:30:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0010e�\tڔ���w","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81065cd09da94ec9acf77","method":"","user_agent":"","ja3":"","session":"1b640310-498e-4a0d-9994-b7a5cb8eab75","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c3520259e66d0f0b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:26:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��;\u0013��ӓ@V\u0003�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83b13f88fd39340560384","method":"","user_agent":"","ja3":"","session":"c12999da-6958-4c58-b631-f6da07da83b6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"03362d7c17eadb58","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-17T03:24:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��C�ޫ�\u0014\u0006\u000e��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b843bbdeabc514060ef6d1","method":"","user_agent":"","ja3":"","session":"53f8fe68-735f-45ae-a357-2139d98c0458","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"02d94b43569020b2","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:27.859283+00:00"}