{"ip":"187.246.11.70","observed":true,"total_events":226,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["226 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 46,870 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"46,870 bytes sent","bytes_sent":46870,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-07T17:19:48","last_seen":"2026-10-14T02:52:03","events_24h":0,"events_7d":189,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"MX","country_name":"Mexico","region":"México","city":"Toluca","lat":19.3769,"lon":-99.6527,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-TOLU-CGN-11-70.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":9,"protocols":[{"protocol":"udp","events":9}],"ports":[{"port":39131,"events":9}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-09T02:02:15","last_seen":"2026-10-14T02:51:53","recent":[{"timestamp":"2026-10-14T02:51:53","port":39131,"src_port":58973,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\rz�`K;\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00006I\u0000\u0000","payload_hex":"41000d7a92604b3b000000000000000036490000","sni":"","session":"d921b9ab-8e32-4dcd-abba-c457630c179c","bytes_in":20,"source_verified":false,"enriched":{"digest":"fcd5817cf6797740","strings":["`K;6I"]}},{"timestamp":"2026-10-10T02:17:50","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:\u001b�$J��B��}��#�\b��\t�79:info_hash20:!r�[��;�\u0016¥�\"���#]�3e1:q9:get_peers1:t2:\u0007S1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a1bfe244ad0e042a8987dae8323ab0880a309dd37393a696e666f5f6861736832303a2172f65be5e53bd116c2a5f222bce5c6235d8c3365313a71393a6765745f7065657273313a74323a0753313a76343a4c540102313a79313a7165","sni":"","session":"ee375506-e001-4436-ae19-1dd5bc19247d","bytes_in":104,"source_verified":false,"enriched":{"digest":"4d00b31473584807","strings":["d1:ad2:id20:","79:info_hash20:!r","3e1:q9:get_peers1:t2:","S1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-10T02:17:45","port":39131,"src_port":61409,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000$�ioI�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000d\f\u0000\u0000","payload_hex":"41002491696f49d70000000000000000640c0000","sni":"","session":"6dd2da04-ce62-42af-8226-340a14dd7302","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-10T01:30:21","port":39131,"src_port":54081,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�����B\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"41008d8fbfe1ab420000000000000000e1c80000","sni":"","session":"30a9c65e-efe7-40c0-9aaf-dcc85c45b8c1","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-09T02:30:17","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:��A�2Yh�����xc�\u0017k��M9:info_hash20:��B������2��)�������e1:q9:get_peers1:t2:B�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a8cb541a2325968f086b5dbec78639e176bb5964d393a696e666f5f6861736832303a8cb542ac82eac1cfe032b4a329f58599869afebf65313a71393a6765745f7065657273313a74323a4283313a76343a4c540102313a79313a7165","sni":"","session":"c880eedf-781d-40a4-8e9d-7878bc6b6b4c","bytes_in":104,"source_verified":false,"enriched":{"digest":"00b3fc23296ca5ab","strings":["d1:ad2:id20:","M9:info_hash20:","e1:q9:get_peers1:t2:B","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-09T02:30:07","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:��A�2Yh�����xc�\u0017k��M9:info_hash20:��B�=k\u0013�7R�DX{L�\\f��e1:q9:get_peers1:t2:u�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a8cb541a2325968f086b5dbec78639e176bb5964d393a696e666f5f6861736832303a8cb542bb3d6b138537529b44587b4cb65c66c7f665313a71393a6765745f7065657273313a74323a75d8313a76343a4c540102313a79313a7165","sni":"","session":"917daf2d-04eb-4c56-808b-583b10b60544","bytes_in":104,"source_verified":false,"enriched":{"digest":"47f64bd3b468bf1a","strings":["d1:ad2:id20:","M9:info_hash20:","DX{L","e1:q9:get_peers1:t2:u","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-09T02:18:40","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:��A�2Yh�����xc�\u0017k��M9:info_hash20:��AS�(P=���L(�aX#���e1:q9:get_peers1:t2:\u0003&1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a8cb541a2325968f086b5dbec78639e176bb5964d393a696e666f5f6861736832303a8cb541539328503dee9dcb4c28de615823f4e9ef65313a71393a6765745f7065657273313a74323a0326313a76343a4c540102313a79313a7165","sni":"","session":"2271cb3d-be5f-4ada-adf2-592cf0beb2e4","bytes_in":104,"source_verified":false,"enriched":{"digest":"e02dfaa852d150a7","strings":["d1:ad2:id20:","M9:info_hash20:","e1:q9:get_peers1:t2:","&1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-09T02:02:15","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:��A�2Yh�����xc�\u0017k��M9:info_hash20:��A�\u0012\\���!e�f~�PmT5�e1:q9:get_peers1:t2:z\"1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a8cb541a2325968f086b5dbec78639e176bb5964d393a696e666f5f6861736832303a8cb541c8125cdccee12165a0667ec0506d5435e165313a71393a6765745f7065657273313a74323a7a22313a76343a4c540102313a79313a7165","sni":"","session":"17efd6fe-97a6-44d5-acae-15fab881d1ea","bytes_in":104,"source_verified":false,"enriched":{"digest":"01fad2a5a8c58fc7","strings":["d1:ad2:id20:","M9:info_hash20:","PmT5","e1:q9:get_peers1:t2:z\"1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-09T02:02:15","port":39131,"src_port":50887,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\"��bf\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"41008b22a6b662660000000000000000aab20000","sni":"","session":"845bd5d3-f541-4981-ab6f-4b8e40eebf2b","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":226}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-07","count":32},{"date":"2026-09-09","count":1},{"date":"2026-09-18","count":1},{"date":"2026-10-03","count":3},{"date":"2026-10-09","count":164},{"date":"2026-10-10","count":24},{"date":"2026-10-14","count":1}],"recent_events":[{"timestamp":"2026-10-14T02:52:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-9o~U-QvwEatL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d396f7e552d5176774561744c","method":"","user_agent":"","ja3":"","session":"1fcfb9ae-4395-4469-b541-29cf2d1cb7e1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0737b34ae8c5b946","strings":["BitTorrent protocol","<-UW160N-9o~U-QvwEatL"]}},{"timestamp":"2026-10-10T02:24:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-aQ2C1y2g*Exs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d61513243317932672a457873","method":"","user_agent":"","ja3":"","session":"420e0ee2-9298-482c-9b92-5a2d687346a0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"08a5575124f3df2e","strings":["BitTorrent protocol","<-UW160N-aQ2C1y2g*Exs"]}},{"timestamp":"2026-10-10T02:23:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����\u0016\u001d�w�-M͘\u0017m�4�)�����{&�,��)�H�u�E�_��o�g�E\u0011K�.r�g,Ġ�Z��,��\t��DBU���\u0001�bCB���OΟEV���\u0019G��`��h?=\u000e�j�k�L�$S\u0010F1�7K;ڲ�\u001a��D�BJ��;`�j��a%��\fD�e��?6�r�9q*H��\u0011\u001fcA$\u0004�|\u0010�\u001b��M�d�d�)U�0�x��5��^u��&d\u0013��\u000bB~�R�r�o~)��d�X�O� �\fZX�4\u0017�\u0013�","payload_hex":"f07f83dac7cd161dbf77dc2d4dcd98176dff348f29a88f8fa3867b268a2c8685299c48de75ef45985fbdb96fbe67f745114bff2e72b0672cc4a0be5a8cc32cc1f4099bbf444255aeccd101d5624342f8fdde4fce9f4556828a831947ecd460bfed683f3d0e906ada6bc14cf22453104631d9374b3bdab2881aede144b1424adefe3b60d46ae7c6612588970c44f265f6ea3f369e72ff39712a48b3a6111f63412404987c10901bfeac4d88648a64a929558030a7788e9d35f88e5e75e1f3266413b0900b427e8452fd72926f7e29befd649958a94f8b20ac0c5a58cd34179613ba","method":"","user_agent":"","ja3":"","session":"214e06c1-7b8c-4ef1-849b-97c8f0600c36","seq":1,"duration_ms":101,"bytes_in":225,"bytes_out":13,"enriched":{"digest":"5c897771ce293ef4","strings":["9q*H"]}},{"timestamp":"2026-10-10T02:22:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-AdD5Mwv3u7F3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d416444354d77763375374633","method":"","user_agent":"","ja3":"","session":"cab2281d-0070-42e3-a1c1-26494013e4cf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"13209b4342b0feec","strings":["BitTorrent protocol","<-UW160N-AdD5Mwv3u7F3"]}},{"timestamp":"2026-10-10T02:21:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"/\u0001����$u�w�\bt\u0015vp�v��l�,�H4L��m�\u0018��l��?e \u001a��ʱťP�?uȔd\u00034�D�&\u001d��\u001e�O�ޟ�}\b?y!�\n4��݈����\\�\f\u0004!�\\\u000b!n��Y�!�\u0004�����\n\u0014\u001f\n����P���4GY��N\bTS�\u0007\u000e\u001d0","payload_hex":"2f01e3d5d9de2475b877c60874157670e3768e9f6cb32c8648344c7f9ded6d961884976cd3ea3f65201a92a9cab1c5a550c43f75c894640334f844b5261df3e41ec04f80de9fbb7d083f7921910a34e6bddd88e0e6f0ec5cfd0c0421d25c0b216e96a659fd21ec04fdc1c3d2c30a141f0a96b48b93508ad0d1344759cdf04e085453ce070e1d30","method":"","user_agent":"","ja3":"","session":"0ad9f747-7374-4a92-ac7a-08d04d9d7f65","seq":1,"duration_ms":100,"bytes_in":135,"bytes_out":13},{"timestamp":"2026-10-10T02:19:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-wXTxgS8aL*FR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d77585478675338614c2a4652","method":"","user_agent":"","ja3":"","session":"0a1efd13-970c-40d3-bb81-56111ee96a13","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"07f3840c5f5b2e9e","strings":["BitTorrent protocol","<-UW160N-wXTxgS8aL*FR"]}},{"timestamp":"2026-10-10T02:19:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0018'��(e��}¦Q��\f�k\u001d\n��<\u0015�\n�I\u0017�g�+<��6[M\u001aT��L\u001c^��hSX\u0013\u001c�,�2\u0002��\u0004��bXU��\u0010i\u0004wbG�+*�'l��d��]�Nܨ�5C�t���\u0000��d�\n.�@}�\u0013{�e�kﾏ�����p�e��a>Oh<\u0011�Tzf�\u001dso��z�\u0016\u0014�#�\u0016 �@1��'Z�����\u0005\u001b�\u0004(�\"�\u0001~�p\u000eŴY��zQ�d�ʁ,�T\u0011�","payload_hex":"b7ca182788c92865ea947dc2a651f6910cac6b1d0aaa9d3c15fc0a8b4917ca67f42b3cbd83365b4d1a54d7ee4c1c5e81d4685358131c8d2ce032028afb04a4e8625855fcae106904776247892b2ae5276cf2df64f0b25def4edca8ed3543eb74e298d800fb9664c30a2eb9407dfa137bab65ce6befbe8ff09490e4c870c365fa8f613e4f683c1184547a66c51d736fdaea7aeb16148f23b11620f4403186ca275aaabee9e8fe051bf40428f922de017ee7700ec5b459eeca7a51e264f8ca812cd95411ab","method":"","user_agent":"","ja3":"","session":"33e9e9bf-1ff2-4cc3-8026-0e418715d64d","seq":1,"duration_ms":100,"bytes_in":196,"bytes_out":13,"enriched":{"digest":"1af01e840be1fb36","strings":["a>Oh<"]}},{"timestamp":"2026-10-10T02:17:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-qi~HrnBzhBDh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d71697e48726e427a68424468","method":"","user_agent":"","ja3":"","session":"9985659b-5091-4098-8174-f81fb6e05a94","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"90bae5b36357ed0f","strings":["BitTorrent protocol","<-UW160N-qi~HrnBzhBDh"]}},{"timestamp":"2026-10-10T01:50:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-L9Eq4Z_hmkbn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4c394571345a5f686d6b626e","method":"","user_agent":"","ja3":"","session":"91564412-6862-4d5a-85d9-7f068e477f0c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"023e022a26feba15","strings":["BitTorrent protocol","<-UW160N-L9Eq4Z_hmkbn"]}},{"timestamp":"2026-10-10T01:49:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�A�[<�2x��ղ\u000b��\u0006®�F:�-��\u00186�\u0016� }���N��Q��Q�@ʺ�/!��\u0003`��;*Jv�O�6\u000fN\u0016\t\r/�tX��I��cܰ�x��\u0010�\u000f��!�\u0015��\u0011�\u001d\t��\u0014H5}�S���b\u0019��L\u0010�&}MHP�@��\u0012Ft\u0015\b��ˬ����2a�\f��JW�]tW\u0014���\u0007~\u0018�:\r���)S�vL\t����4[\u0011\b\u00040���Hխ�>H#'�\fJW�üBR�@����@\u0006\u0001\f5+�I�q��|�\u0011b:���T��\u001eዃ\r��uOs\u0019������\u0012�]]JQ\u0019�{Q�N�\"���g�\u0001\u0018\u0011��2\u001fa������L��ew·�LV�\u001d$6�l�TI?\u0006�E��c#�Z\u00034!\u0002dH,�qi6i��\u001b�$��6*]","payload_hex":"a141a15b3cae327886dbd5b20beda106c2aef9463aa12dafee1836d81682207ddeecd74e93c551ad8f518040cabada2f21bacf0360efd33b2a4a76fa4fe8360f4e16090d2ff97458bbfd49b08d63dcb0e67889f010f50f898a21c915f6c511901d09a3941448357d83539f83f56219b8bd4c10b0267d4d4850f640c8fe1246741508f29bcbac9df8e3de3261e00ca2e54a57f65d74571496e180077e18883a0d88f6952953a8764c0980e0caca345b1108043087b7f548d5adc03e482327c90c4a57c4c3bc425298409de4efdd4006010c352bef49f4718dc57cf811623abcbd85548bbc1ee18b830d83c2754f73198ee0cae4ec8c12965d5d4a5119977b51884ec822c4d7f867fa011811aaba321f6199959290aeda4ca0a26577ce87b34c56c61d2436d66c8654493f06b845a5ce6323d95a0334210264482cbf71693669bc961ba024ead2362a5d","method":"","user_agent":"","ja3":"","session":"daae646d-3f0b-4acb-90b8-f5533e29d547","seq":1,"duration_ms":100,"bytes_in":329,"bytes_out":13,"enriched":{"digest":"f7e2bf1c660b467c","strings":[";*Jv","&}MHP",">H#'","]]JQ","qi6i"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-15T04:04:59.379900+00:00"}