{"ip":"187.241.128.106","total_events":193,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["193 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 40,339 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"40,339 bytes sent","bytes_sent":40339,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T21:12:41","last_seen":"2026-08-15T00:51:53","events_24h":0,"events_7d":193,"geo":{"country_code":"MX","country_name":"Mexico","region":"Sinaloa","city":"Salvador Alvarado","lat":25.4192,"lon":-108.0737,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-GM-CGN-128-106.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":193}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":146},{"date":"2026-08-15","count":47}],"recent_events":[{"timestamp":"2026-08-15T00:51:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-C)S*I5JD~9hK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4329532a49354a447e39684b","method":"","user_agent":"","ja3":"","session":"3d6ceca1-0c20-4522-bdf1-f146d41b2352","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"002e1ba02460525a","strings":["BitTorrent protocol","<-qB5230-C)S*I5JD~9hK"]}},{"timestamp":"2026-08-15T00:51:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-C)S*I5JD~9hK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4329532a49354a447e39684b","method":"","user_agent":"","ja3":"","session":"3d6ceca1-0c20-4522-bdf1-f146d41b2352","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"002e1ba02460525a","strings":["BitTorrent protocol","<-qB5230-C)S*I5JD~9hK"]}},{"timestamp":"2026-08-15T00:51:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-C)S*I5JD~9hK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4329532a49354a447e39684b","method":"","user_agent":"","ja3":"","session":"3d6ceca1-0c20-4522-bdf1-f146d41b2352","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"002e1ba02460525a","strings":["BitTorrent protocol","<-qB5230-C)S*I5JD~9hK"]}},{"timestamp":"2026-08-15T00:50:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0013v6\\V`e�S\u001c����z\u001f�Y��n�\u0001�\u0018�\u0013�ӥd���'�KH�;=��K���\u001b�\u0002�|ƫ�a\"]\u001d�[��\u0007�U���r�\u0003.�*\u0012ᨀՒ�f6m�em�X�v���\u001ao�/V�@�'�\u0017�A���x>�Ԝœ\u0004�gR>C�\u0014�lX�\u0010��B���z��\u0014\u000b�\\��\u0013���!�S��9&+�#��6rdv�K���2���$��m�����ņA����,\u000b)+�J�gn��PTt��饜&p��W�\u0002Y?�\u0003ט+�;�\u0005P��ߝo*!?zW�\u0013���_\u0014�Q;��L����W�N\u000f\u001fW�(:�\u0017ِIF�����~�2H����\"U˱\u001f\u000e\u000e1\u000f�\u001f�~CKb�V\u0017�=\u0003;d�{��J���\u000b\u001fjչ\"��9�t�\tE�{/\u0011l�]\t\u001f�C","6rdv","o*!?zW","~CKb","\"P:#Y","*mGDH*o"]}},{"timestamp":"2026-08-15T00:46:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-3x4Of(BSOvG7","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d3378344f662842534f764737","method":"","user_agent":"","ja3":"","session":"5957a81e-2e78-4f20-8503-dd9aaf8b555c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"feb6d07b98e1c20b","strings":["BitTorrent protocol","<-qB5230-3x4Of(BSOvG7"]}},{"timestamp":"2026-08-15T00:45:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ў麗�~�\u0013=J�Z�$SE�\u0006\u001e!�$�X:fb*\u0001�tz�L�*�R�\u0006 �\u000e\u0018.��\u0010z#.\f��.�;����R(��\\\u001a�1�5�v\f{4oC,��ęU��D��\u001b\u001a��\r�\u0000���}S�P\u0017sL\"<\u001d,�)�B\u0004峢eٗ\u0001��o�\u0011���Ҷ����x��\b\t=�\\:\u0018kY�6v�\u0002�\u0004\u0001LE&#墛��\u0000X2*��\u0004tgo��\u0017߷���ɳM\u001a�L>�'l^��S�#S��ۜ���\u0016�`���\u0010�Q7OS�\u0006\t~�Y�qhna\r�V0��ɺmU���s���4�\u001c�m�;x���\u0007M��\u001f��9���#nsQ&K�\u001eE�N�x:I�\u001d�O��&�8�E� $8�\u001d$\bU\u001d����E��\u0004u&\u001a�F�+��LkC|\u0007�e�e\f����h7�R�k��������y.'\u000e,jÁ3t\u001e���\u0016���}����P�(�?���gV�����7ؐ\u0005��3��\t8W��3���r�2���\"��������TT\u001fG�\u0018����\u0012{�u'P��6�\u0012\u0010��]r\u001f'�|�>�})z�x����s�\u0012���'\u001b�,3Ġ\u0011\u0018\u0000�L\u001a\u0014^��Z\u0019�s\u0006�p��\u001a�ҍ2[:\u0001","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d8b539bb-36d3-435a-8d70-1586f493170e","seq":1,"duration_ms":100,"bytes_in":509,"bytes_out":15,"enriched":{"digest":"ff23993233f3c7ba","strings":["X:fb*","{4oC,","sL\"<","LE&#","Q7OS","qhna","#nsQ&K","LkC|"]}},{"timestamp":"2026-08-15T00:44:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-h(LF3iWnmDXi","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d68284c463369576e6d445869","method":"","user_agent":"","ja3":"","session":"37a0c823-c4a5-42d0-9beb-6548952249d1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ff09014e9bb18c05","strings":["BitTorrent protocol","<-qB5230-h(LF3iWnmDXi"]}},{"timestamp":"2026-08-15T00:43:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"T�F`�\b�\u0014)�\t\u0006�kˬ]�O\u001e�\u0003��k�\u001e�c\u001c\b4����i����Y��uۗ� ��۷���p�/{\u0015#b�����p??\n\u0010�ñ�'��4]\u000f\u0002[M]*~��X����,\u0019L�0�pg���r���(�|\r�=R:M��!l\fz�j��pA����\u001c]���\u001e����\u0014�p�2)����z�����\u001a��ƚ,\u0017\b�Y�\u000e!~��\u001f�32\u0003��U�uP