{"ip":"189.245.211.26","total_events":171,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["171 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 37,579 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"37,579 bytes sent","bytes_sent":37579,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T21:50:05","last_seen":"2026-09-29T20:06:00","events_24h":57,"events_7d":139,"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Venustiano Carranza","lat":19.4458,"lon":-99.1031,"asn":8151,"org":"UNINET"},"source_domain":"host-26-211-static-245-189.uninet-ide.com.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":171}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":24},{"date":"2026-09-22","count":8},{"date":"2026-09-29","count":139}],"recent_events":[{"timestamp":"2026-09-29T20:06:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW130Q-vcDTo*DZ6g!b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313330512d766344546f2a445a36672162","method":"","user_agent":"","ja3":"","session":"b784af0c-80ff-4ce5-a39b-54a6c549a629","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"48b1000e52eddbc8","strings":["BitTorrent protocol","<-UW130Q-vcDTo*DZ6g!b"]}},{"timestamp":"2026-09-29T20:04:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j�R���y\u0011i�}\u0001oM7q7�ξ��\nLCi���z)�˺H�\u001e����\u000b4|y�\u0012\u001d\u0015Q����}|C�}�����s�����\u0018�N��'ß��1g�M��n��^�� �J\u0001��b��l\u0004!�~3������\r�̠9} ���̓ҭ�F7f4r��fA\u0011���\u0003��)���[\u0016����)]�T�\u0002֩�\u000bb2����_�*Z\u0007����\u0006\u0002s\u0006��3#��X�9Uu��x(k�\u0010��","payload_hex":"3f2a63f2a16798abf6be0f4e95dfd8b02383de0094a62b9e812c377e97408bd000a2bbfea75b86927119e9d9945986ebe9b8522b826fa15ebe0e66076497ff44814fc90fbda8cac8a11c00e604e307f26dea6750b3bea202fd93554da5f3f9799eec4da423c6e8703ea9ab6ed2fc5effb120f94a018bb362ebf46c0421e67e33be7f88a9f7dbfb0db2cca0397d20fca6d0cd83d2adc446376634727fe2c9664111b4e9bc03fee9298486cc5b16edb8ede0295df354a902d6a9d10b623284baa8bd5fc92a5a07f1e9ddd806027306b2c3332391f458f6395575c9d778286bab10ae87","method":"","user_agent":"","ja3":"","session":"339fd7e5-f8d1-4da4-a1db-609148ddd95b","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":14,"enriched":{"digest":"f89a8b2b110cdbd3","strings":["F7f4r"]}},{"timestamp":"2026-09-29T20:00:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW130Q-uYW71JJYzRr-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313330512d75595737314a4a597a52722d","method":"","user_agent":"","ja3":"","session":"9bcfe8b3-68f0-4dbc-adc4-a721eecf21f7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3bae08e7956cf435","strings":["BitTorrent protocol","<-UW130Q-uYW71JJYzRr-"]}},{"timestamp":"2026-09-29T19:59:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E����^\u000f�u�ad�S��6����*��\u0017����\u0011F\\��\n�?�(r��܎\u0019dr\u00079\u0019C���ʑN\u0005�\u0016F�-\u0004\u000e����\u001d�\u0016\u0002OR�DL+A-:�ӀH��l�M�\u0010�M�cT~w�?����\u0001��ݢ*�gz-���jrsR�+�?�����$���h�x�XjwqicB���\u0017U_n+����'ѼZ���/��Ia�\u0001������@�ǴB\u0001��\\�\u000b�D\f{\u001az_byP���ps\u001a@9��چ���\u000ez��}�3�-�>V\u000b\u0006�G֜� �\u0002|y�}đ���/�D3-(���HH����u<\u0003��f��Z��`ڴ��Y��?�Oҥ�n\u001f��q8<�2�|��+`\r�䷺���O��i�S�a�\u000b�\u000e���3\u001f-�Z���󛏼ث�(���/�\u0007��7-��\u0012\u0018��-��\u0004�\t����p���L0��A�c�\u0002\u0014?��t�\fuj8\u0003\n.\u000b��W���y\f�(�>�m\u0006���\u0016����L�\u000fD��ӳ^h�8�O���F-�\u0002�\u0013/r'.\u001d��]`���\u000fq\u0017�?�_<����]�7�`>��g��\u001e�:��8�vl���R\u0011\u001c�$s�����ݮ�v�ř\n\u0000V�h�����\u0004�\"�g.�p�\u0014J���\fZg���q\u0003�xK�=p�K`��%�!�F �\u001f�5�g�rcWq{gUZO�M�G�����\"���9���<�\t\u001f��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1c3fe2f4-2b30-430d-b65d-d35a3458909f","seq":1,"duration_ms":101,"bytes_in":596,"bytes_out":14,"enriched":{"digest":"e3826408efabc558","strings":["DL+A-:","cT~w","jrsR","XjwqicB","U_n+","z_byP","D3-(","/r'.","rcWq{gUZO"]}},{"timestamp":"2026-09-29T19:57:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW130Q-zHYPAthd9.0-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313330512d7a48595041746864392e302d","method":"","user_agent":"","ja3":"","session":"3749131d-38a8-46d9-a6b4-f2369d19dfa2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3df3c4cf7c2c9ad1","strings":["BitTorrent protocol","<-UW130Q-zHYPAthd9.0-"]}},{"timestamp":"2026-09-29T19:56:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0007�79�X}\u0001�J��J�\u000fV�'��\u000e\u0018��\u0017�������w�|�}\u0007\u0018�\u0007~��=c��>�(�X\u00192�]fHI\u001f#tI ���\u0007`�+��hK�C�PO`�\u0013���\u001b��K��G�m\u0017��\u0000�\u0001w��\u0016��U�\u0013��'M���N�S؅|���\b�8:�N#_�6