{"ip":"177.245.43.95","total_events":106,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["106 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-04T17:35:30","last_seen":"2026-07-05T23:32:13","events_24h":0,"events_7d":106,"geo":{"country_code":"MX","country_name":"Mexico","region":"Nuevo León","city":"Monterrey","lat":25.7317,"lon":-100.3311,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-CGN-MTY-43-95.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":106}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-04","count":35},{"date":"2026-07-05","count":71}],"recent_events":[{"timestamp":"2026-07-05T23:32:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-7*O*5Jzeix9t","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d372a4f2a354a7a6569783974","method":"","user_agent":"","community_id":"1:H7XExNtNhqxXSJxTAMoc9bkAG0Q=","ja3":"","session":"130ea491-c2d9-4500-b2d7-a649855ead7c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7c9dea6f159de383","strings":["BitTorrent protocol","<-BW1605-7*O*5Jzeix9t"]}},{"timestamp":"2026-07-05T23:31:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Q� 9�覡naљ�@�\u001dG|���<�7����\u0014��c\u001bx���\u001e�8���1�w��Nힸ�pH/,ľ���\u0005s�����d^���a��y�~��rںb��q5\u0015'�mQ_ \u0017\u0006���@����\u0004B1\u0016י�K�jZ��,4�Vn�@�p`��n9$MȧW�\"��5\u000bL{��i��v�s\u0011+��u2\u0014��dRּߝUԥ7\u0019�\u0011��8\b�Q�Si#\\�m9�-dP��e�%�Cq\u001d��u,U۹�l\tG�o�-���d\u0005\u0014���0I=^ۀ\u001fr9���\u000b���\u000b�F�J�{f⪤+\u0018Ē��SK6�\u000b?�M����-�\u001d�\u0006�s^�W����\u0013��)|�\u0018f<�\u000b\bS�\\\u001e\u00001\u001b�\u001aT$����D/�I�l\tX\r��\u001d\bK�j�0\u0007�,����y���`r��^8#��R�\u001cT~&]\u000b'��jj�\tGj=\n��s^��������>�顣\u000f>:�=��.e�lʥ����W�\f��57\u001b���Xo��\\7r&���\t8˭'Q&VrK1�0[߂�\u0015Z\u0003l��\b[�1\u0006����{�$�]�@\u0019�u\u0000","payload_hex":"51ee203996e8a6a16e61d199ab40d61d477ca8b1d83cbe378cfdd5fc14e5a9631b789299d91e9638c2e3f531c777ede04eed9eb8e970482f2cc4bebc81f0057397b28be58a645edefa9c61dccd79847eaf9772daba62edba71351527db6d515f201706d8fe884091f597c704423116d799ef4ba16a5affed2c348e566edd40c3706097866e39244dc8a7579a22e5e1350b4c7be59b69c19f769873112b91d3753214e0af6452d6bcdf9d55d4a53719ca11fddc38089b51f15369235c926d39d12d64508ff465e125da43711db7b1752c55dbb9f76c0947db6fd02daaa7dd640514f5f6db30493d5edb801f7239d6ebba0bd5d07fcf0bf6468d4a917b66e2aaa42b18c4928b82534b36a40b3fbd4d85c5cada2de31d800688735e8257b890bae513fab9297ca718663cd60b0853925c1e00311bec1a5424fe91bdb6442fd949866c09580d8af81d084b936aa130078b2ce396f8db79d0f5f86072a0a25e3823a5f352ba1c547e265d0b27b9ab6a6af909476a3d0adfef735eb0f38bc1e89af1983e8ee9a1a30f3e3abf3d90e62e65846ccaa5afa0a7c157bc0cfac935371ba0f48c586fa4b15c377226e9c1bb0938cbad27512656724b3190305bdf8283155a036c9c82085ba53106b7c4e9a87bf624cb5d824019d97500","method":"","user_agent":"","community_id":"1:9xQNg9vWDHWw1YCWCEksBqVH5a0=","ja3":"","session":"46f66324-6572-4a52-92da-fecc75b3a11b","seq":1,"duration_ms":100,"bytes_in":471,"bytes_out":13,"enriched":{"digest":"8851b3a801a4ce5f","strings":["pH/,","n9$M","Si#\\","0I=^","T~&]","\\7r&","'Q&VrK1"]}},{"timestamp":"2026-07-05T23:29:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-nY3s3S4Ku)EU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d6e5933733353344b75294555","method":"","user_agent":"","community_id":"1:1x9Yi0XGeZvN4rWSdRHC6sIH22M=","ja3":"","session":"c2da1e28-f6e0-4dde-95de-8b72a21e41f4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7648f06d05fcd5f5","strings":["BitTorrent protocol","<-BW1605-nY3s3S4Ku)EU"]}},{"timestamp":"2026-07-05T23:28:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\rΐ#PFR��\u000b��\\\u0013�Nk�q��*iD��-ڟ\\�j����s���|�,\u0012&�����\u0018Wt����`�П\u0016��3��0�YL�\u001fa����k�*\u0010���8��֝�(���ځ��W\u0017�[���\u001ah@��Q\u000fޟt\u001d\u000b\f4\f�f6���\u0013�\u0017(`\u0000%_N�;R�J�&O\t���\u000f5Z\u001f`���\u001f�WM��\u0016�#/�\u0013\u001b�*\u001c��!\u0002\bN�>Zq\u0003;�\u0012��¸f��,V~\u000f�[�Y\u0007tшD!�S�E��\u0015�\u0013�sd�3c��KS�\u0004�?��\u0019x�\u0014�g+���\u0019�]\u001c\u0004B��V\u0000r��f\u000b\u0007\u0007HB�\u0004½�\\���\u001c\u001e�j�^�x\\ѡ|��\u0018�Cm�","payload_hex":"40702492d9afdd5273352e0327e3799de2f5a6873f37d55602bb54de3d2c3826bb04092a16e03e8c83e10f355a1f60ad91ac1f95574db7fa16cc232f81131bf52a1cb2e22102084ede3e5a71033bcc12afa2c2b866eadf2c567e0fcc5bb7590774d18844218a53a145dfe315e413d97364983363f6a94b53cb04943f95f61978f314e4672b92babb19fc5d1c044298b0560072a692660b070748429304c2bde55ca9fe9f1c1ef46ab95ed4785cd1a17c9f9118a1436dcc","method":"","user_agent":"","community_id":"1:5d9TyR/7l9yzlN8uMsYEUkRoLyU=","ja3":"","session":"efca5c9e-5f63-4c97-ae2a-fcfc96c31f5d","seq":1,"duration_ms":100,"bytes_in":183,"bytes_out":13,"enriched":{"digest":"9aa9444ab3d63215","strings":["Rs5.","=,8&"]}},{"timestamp":"2026-07-05T23:21:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-l1oY4NA9FQWl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d6c316f59344e41394651576c","method":"","user_agent":"","community_id":"1:j2zdGeU6K9W9IUhlm+Sr995VgTs=","ja3":"","session":"a458c756-ac31-4531-9e1b-e6f66b0f1991","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ca944ba33550d49a","strings":["BitTorrent protocol","<-BW1605-l1oY4NA9FQWl"]}},{"timestamp":"2026-07-05T23:20:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000e�\u0010����!���8\\��='�\u0013\u0004���_(:\r\u0005��h��\u000eͩ�,Za\u000fޘjk�\u001c5W��p��\u00199$\u001fA,E���*\u001f��K\f�������Lgz��� �1[�R�J��I\u001dr�]b(t�V\u0003P���","payload_hex":"0eb410ad85e5a321e887fb385cfbe53d27b713049b9b8d5f283a0d05babd68f8c40ecda9e22c5a610fde986a6bef1c3557cef9709efd1939241f412c4592abb82a1fc18f4b0cf0efccffd8ede64c677a96aaf820e7315bbd52e94af1c2491d72fe5d622874f9560350e784d8","method":"","user_agent":"","community_id":"1:c+Zft3A6qTPa2AdxZmeEAJ8V3+E=","ja3":"","session":"1c47452f-3164-48b5-a14d-678b764e5122","seq":1,"duration_ms":101,"bytes_in":108,"bytes_out":13,"enriched":{"digest":"cdf3db5db74e5a0d","strings":["]b(t"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-07T10:26:44.111812+00:00"}