{"ip":"187.246.108.10","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,491 bytes sent","bytes_sent":2491,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-14T13:47:23","last_seen":"2026-07-14T14:38:01","events_24h":0,"events_7d":0,"geo":{"country_code":"MX","country_name":"Mexico","region":"Sonora","city":"Hermosillo","lat":29.0593,"lon":-110.8172,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-HMO-CGN-108-10.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-14","count":12}],"recent_events":[{"timestamp":"2026-07-14T14:38:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�!�y(�\r֚\"5ԑ7�\u0002�cy��[�;\u0010|ۗ�\u001b�y\u0006��Xu��\u0012ik}:C(�Wң8��}�\u0017\u0004w��|\u0015\b��9DRĀ��a�!�$�S�>�M���w\u0012�\t�=Jb[��;�[J�]�͈���\u0006\u001f���m�JQZ�\u001abp3�de��\u0013h86��G�d�R�\u001d����\u0018\u0014�D8v�\u0012x\\E���\u0001�GX5�\u0005�\u00140NT�ٷ+NG���_\u0007�;\u0015�\u0002\u0017/�8[�Q��J\u0006�E��\u0014pm�?��/�R�Y~�G\"�","payload_hex":"e821fe7928ea0dd69a2235d49137f6029e63797f82835bb33b107cdb97f31bd87906f18b587580c712696b7d3a4328d757d2a338dfd37d90170477ebb17c15089aaf394452c480a1b961f421dd24df53f23ed64dd8c19577128f09bb3d4a625bb9dd3bd75b4acb5d83cd88b3f0ae061fa093f26da84a515ae71a627033f7646593ac13683836b69147d364b652c11deba2e3aa18148c4438768e12785c4594f5f2018a475835db05b814304e5489d9b72b4e47a98c9f5f07da3b15a702172f9c385bbe5180d04a06954581f814706d983ff7a02fb05296597eaf4722d2","method":"","user_agent":"","ja3":"","session":"8e1bcab8-4264-4e0b-961a-5327773384f3","seq":1,"duration_ms":100,"bytes_in":221,"bytes_out":14,"enriched":{"digest":"01d8c7ab03148a6d","strings":["ik}:C(","=Jb["]}},{"timestamp":"2026-07-14T14:36:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-9v65.2FSBm90","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d397636352e324653426d3930","method":"","user_agent":"","ja3":"","session":"6244d205-030e-4c01-ad7f-aac5f6ad566f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0f6f61df2f6a4f3b","strings":["BitTorrent protocol","<-qB5200-9v65.2FSBm90"]}},{"timestamp":"2026-07-14T14:35:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Í���m0�3����\u0005�16\u001a(ꖇ(��&�\"��\u0000�\u001c��\u0007 0���? 0,YÑ�>�[�T#(�\u000b����!�\u0017��[��il�y�C{�Q�5����f7j�5��j��_\u000bp��튼\n���u�R(w���u�SE\u0015\u0013\u00078�vܹ}��kf'��\r=8;��\u0017�\u0006Y�\u0013�Y�\u0005?���.����fV{p�X\rm\n��(\f37����JE\nN\u0011U����:�\u0003e٤9&\u0007'�ھ�\u001d�\u001c�\u0007P\u0003p�_��>K�\u0000\u0013\b�\n�\u0018%3Sm˦\r�O�\u001c���W̙N�D?��!9�(\u0018\u0017�$\u000b\u0002\u000b;�����\u0000Ybh�\f6��;���?�b�0��\u001f�mv.�k�t��\u0001� ��\r����Kݬ��r�%��U\u0011���I�\"��\u0013�\u0019E�DZԩ�\u001bv}�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"28435c8b-81ab-461a-a9c5-7f5fea61441e","seq":1,"duration_ms":101,"bytes_in":340,"bytes_out":14,"enriched":{"digest":"1c1126bbc910d202","strings":["? 0,Y","fV{p","%3Sm"]}},{"timestamp":"2026-07-14T14:25:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-SzlHr)4rHhyY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d537a6c487229347248687959","method":"","user_agent":"","ja3":"","session":"3ac8f141-a2ca-46fd-a848-b99cb6629101","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"714c690136590bd3","strings":["BitTorrent protocol","<-qB5200-SzlHr)4rHhyY"]}},{"timestamp":"2026-07-14T14:03:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����\"/4�Y\u001c,���BAf��\n4���J��:��K€��*x�2\u0018�P��tmXy?�X+�S����]\u0007�\u0002��vsC\u0001�lr�HK��\t|hn0�z\u0012'�2�o)\u0002��=T�\u001f�&��RT\u0011~V(.8�d��x¿^�2IR��r�\u0000���`�B\u0013�����\u000e+K��}��M���@���q\u0003���ѹ��\u0018}2)F \u000bs���(v�\u0003j��v#�˟\u0003d�z������c�\n\u0015\b�`\fB��h\u000fo\n��6����sƞ\t�\u0005oA`#�L��x��\u001ct�\u0012���-B��u�Wc�Aa���\u0016�\n~���\b\u0019��\"w\u001e�&›h C㰪\u0001I�:�\u0006��i�'D_۔�\u001f����!5\u0010�,)��B\u0004�Oڈ�Em�K�B�(r\bj3\u0018�K_̮�χº�\u0014\u001d�\\/#\rK�:\u0006�RӒٶ9v��Rх�,>�Nʟ���-�?\u001c7\u001c%�ʠxIK�*�\u0017���u�����lI��ŜGG�+�>Oռ߄19C���=�]\u000f{~�r\u0012��4���\u0000�,,���X#�AL�َ�������\u001c\u0005�u��x�z��KH\n��46f9����%_\u0000\u0007V�\nu�`M��a�Нw��:�c�\\�x7�u9��nC�\u000f|���p+胾$��Yq�P\u00147���̡e վ\u0017cn�_�m\u0019˚�g�h�\u0010��\u001e�TU\u0017","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d9d7104d-19f0-4f04-ae95-69fd277493f2","seq":1,"duration_ms":100,"bytes_in":574,"bytes_out":14,"enriched":{"digest":"991f611bca7bc31b","strings":["tmXy?","|hn0","~V(.8","}2)F","oA`#","46f9"]}},{"timestamp":"2026-07-14T13:53:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-Hr!jJ.yqJFaU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d4872216a4a2e79714a466155","method":"","user_agent":"","ja3":"","session":"7123f1be-1249-4f44-82b6-7885680afd3d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"72c6499648917445","strings":["BitTorrent protocol","<-qB5200-Hr!jJ.yqJFaU"],"iocs":{"domains":["jj.yqjfau"]}}},{"timestamp":"2026-07-14T13:52:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�I L\u0004�V#(����>�l\u0007\u001b\u0015h�Z�P�D-�/JO\u001aU`5)�����wGt[���X�vs\r�+4\u00197j��x��I\u0016,��\u0015\u000b�3^�Fa>��\u001f�S��fjt/4L�\u0005o~jF\u0013\u0019\u0016�i\u0010\u001es���Ż�@!��/�;l�j����@Ej����n{\u0015����Z���ݺ�v+�m�\u000b�����{���#�\f�����k��YX%�\u0017\u0018U���N�x�j\u0005P�w\te���c�����,�;��������\u000b�:��_ �Ϛ:�8\n\\�K��䆾�������\u001b���潧yU\"�\u0004�cnVB�Wͻ>��?��B�5�\r\u001cһ��(�\u000b�\u0018ʉ��v3�e/�昽;dB=��}үK&OE�|R��!��\u0016�\rR���*���\u0002��<0#�V�q����й��\u001ek�6+��\u0004v�h$E\u001c��S\u0007\u0016\"`\u001e�\u0012\u001d.Ui\u00135�=��/�}\u0016�V�I�Y\u0005�S�\u000b#�I\u000b���[1�o��\u000eȓ�ŗ\u000f�x��P�1�� e�z�>�l\u0004>�@�R[|�\u001a-","payload_hex":"ef49204c04bb562328a2ba99bb3e836c071b1568c85ad950b3442dc42f4a4f1a55603529efe0ecf3f37747745b99b3b3589776730d832b3419376abcaa78d6d749162cffbd150bb2335ebd46613efeb51fc553fcd7666a742f344cf1056f7e6a46131916f369101e739eee86c5bbec4021ad882fa53b6c976a8bfe9ef840456aabf9b7b26e7b15dbd1fbdd5ab2fcf7ddbaf4762beb6d880b99a497e6ff7bb5b3ee23f90cfcfaaf9ea66b90fc595825fb1718558dc0a34eb078916a05508b770965b3bace63b7b4e5b4d02cc43bb5caffa2a284a99d0bc23a87eb5f20fc7fcf9a3af2380a5ccb4ba99ce486bebbd8f5a388c0a81bb5b5bde6bda77955228e0487636e5642a457cdbb3ebad43fb8d4428435b60d1cd2bb948028fd0bbb18ca89d9de763382652fbae698bd3b64423dbdf07dd2af4b264f45f97c52e58b21d8f316950d52a495e82a87abbb02a9b83c3023d8568c71cad7c1dad0b9dce51e6bd9362b8fba0476e76824451cf7b353071622601e82121d2e55691335d33dccd72f7fc77d7f16dc569649de597f05da53930b23ec490bc5d1c85b317fa26f9e940ec893d4c5970fec78f1f0508931f2b02065a57aa73eb26c043e7f9e40a7525b7cbe1a2d7f","method":"","user_agent":"","ja3":"","session":"1447d6b7-d6e8-4773-8f86-159acc6d8a1a","seq":1,"duration_ms":100,"bytes_in":451,"bytes_out":14,"enriched":{"digest":"79541ce242828213","strings":["U`5)","wGt[","fjt/4L","o~jF","cnVB",";dB=","K&OE"]}},{"timestamp":"2026-07-14T13:51:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-f)tFHEsxsf.i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d662974464845737873662e69","method":"","user_agent":"","ja3":"","session":"8936780a-9acf-4e6d-a6a5-04e42d359df3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5080bfd605129ca1","strings":["BitTorrent protocol","<-qB5200-f)tFHEsxsf.i"]}},{"timestamp":"2026-07-14T13:50:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0007�rr�\u0013��\u0017���'��\u0013�!Fj���\u0001@\f):vJ\u0005�6��D5��\u0013��ƅ�8�Lg)@\f\t6�j��D4�\u000fM�I�\u001f�i�\u0015M�\u000e_\u0014�a\u0016��Ñݶ�.��IL\u000e{�O��y\u0000,�aQ��ЬI�vK��\u0014sgɲ�;���ޛhE�>���Oc��\u001b(6\tE\u0005U���\u0015,�\u001d<1�j\u0002���� ","payload_hex":"ce07887272e413c0e217a58fc227f3f613e421466adbefe301400c293a764a05fb3691e44435f9ea139a86c6858738cb4c6729400c0936f76a93a74434b90f4dbb49ab1fbf69e6154df00e5f149f6116cac5c391ddb6972ebaa3494c0e7bcf4fa0e479002c82615187f6d0ac49d3764ba5bb147367c9b2d13b9ab697de9b6845f63ec8ebe24f63a1ad1b283609450555d6f5be152cd31d3c31c26a02b4a891af20","method":"","user_agent":"","ja3":"","session":"1f92a809-16d1-406c-b0fe-b6429eabc2e4","seq":1,"duration_ms":100,"bytes_in":161,"bytes_out":14,"enriched":{"digest":"a96e8c902383ff5d","strings":["):vJ","Lg)@"]}},{"timestamp":"2026-07-14T13:48:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5200-nXhjDhokAQfG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353230302d6e58686a44686f6b41516647","method":"","user_agent":"","ja3":"","session":"41f2dadc-aac4-41ce-8257-4051ee3bd392","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"53b8c718436fcf29","strings":["BitTorrent protocol","<-qB5200-nXhjDhokAQfG"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T02:18:31.307554+00:00"}