{"ip":"187.245.111.6","total_events":132,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["132 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 8,976 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,976 bytes sent","bytes_sent":8976,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T01:42:17","last_seen":"2026-08-20T11:13:43","events_24h":45,"events_7d":132,"geo":{"country_code":"MX","country_name":"Mexico","region":"Sonora","city":"Hermosillo","lat":28.7381,"lon":-111.348,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-HMO-CGN-111-6.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":132}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":87},{"date":"2026-08-20","count":45}],"recent_events":[{"timestamp":"2026-08-20T11:13:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��8�Q\u001d\u0002�����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b838c2511d029bf8c1d0cc","method":"","user_agent":"","ja3":"","session":"423d2e98-fe92-4056-bd58-e911470f3b36","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0bc3ff437e372bbd","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T11:07:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\"j�y}(�!�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8dd226ab1797d28a02196","method":"","user_agent":"","ja3":"","session":"ee7dd9b0-b094-4f35-ad97-335c4ad8fd65","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1b5c676d633c121e","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T11:02:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��1�k����\u000b��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b831b86baf9bb7b00b8f95","method":"","user_agent":"","ja3":"","session":"58e6a693-53fe-4bd7-b3b8-13fc206c66c4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ad411e351054e122","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:59:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���zQ�F��.]u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8af7a518946bc932e5d75","method":"","user_agent":"","ja3":"","session":"ba675fe0-5c1f-4c06-acc7-688c0e28c25e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"202377fbb61c7f24","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:57:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���֧�\u001aK�g{","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d0d6a7f91a4bf1677f7b","method":"","user_agent":"","ja3":"","session":"2a7cbe5e-ae90-4805-a7ef-d83c8e558d21","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"80ab9877f6ada585","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:55:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\nA�\u0002�����\u0017","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b80a41a402c5ee82daec17","method":"","user_agent":"","ja3":"","session":"617a71bc-aafc-4707-b8a8-06976a15f95d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1b589f50c83696eb","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:53:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��'�\u0013c`\u001e�\u0002Z�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8279b1363601e95025a89","method":"","user_agent":"","ja3":"","session":"0afd24c3-f8c0-490d-990a-940797ac2e5f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0fb6b5fd3aa0beb4","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:52:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��h�D��۔�U<","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b868e744f988db94e9553c","method":"","user_agent":"","ja3":"","session":"183491c8-16b8-4122-9c92-6eb3d5ffc50e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"ed56ead19b1a9710","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:42:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���U\b�G��z�I","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d95508cc47ebea7a9a49","method":"","user_agent":"","ja3":"","session":"46d44ca0-6a55-4ab5-8061-e442d53bcbfd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"9568a72699c26411","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-20T10:39:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��t��VfÙOԧ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b874d3ea5666c3994fd4a7","method":"","user_agent":"","ja3":"","session":"d546ece5-0b65-4423-9648-53daa1043c11","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b22cd975b6a56e17","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:27.152709+00:00"}