{"ip":"200.68.166.50","data_as_of":"2026-10-24T07:54:49+00:00","observed":true,"total_events":184,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["184 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 41,743 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"41,743 bytes sent","bytes_sent":41743,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-08T00:46:36","last_seen":"2026-10-09T00:02:31","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"MX","country_name":"Mexico","region":"Baja California","city":"Mexicali","lat":32.6328,"lon":-115.3166,"asn":28403,"org":"RadioMovil Dipsa, S.A. de C.V."},"source_domain":"movil-200-068-166-050.itelcel.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":5,"protocols":[{"protocol":"udp","events":5}],"ports":[{"port":39131,"events":5}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-08T00:46:31","last_seen":"2026-10-08T22:35:57","recent":[{"timestamp":"2026-10-08T22:35:57","port":39131,"src_port":30091,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��\u0006���\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0014#\u0000\u0000","payload_hex":"4100bed506ff96d4000000000000000014230000","sni":"","session":"34c7337b-f6dc-4a60-804a-d305fc334215","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-08T01:58:43","port":39131,"src_port":22782,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000!w��$�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000`�\u0000\u0000","payload_hex":"41002177ad852493000000000000000060890000","sni":"","session":"5e6774b5-43c5-47d5-a674-06b748cf43fe","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-08T00:54:33","port":39131,"src_port":27177,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:m�(\u001c:��ް \u0019�\u001f,��U6*�9:info_hash20:m�*���\u001f��<�1r�\u0002�\u0004�^Ve1:q9:get_peers1:t2:�|1:v4:LT\u0002\u000b1:y1:qe","payload_hex":"64313a6164323a696432303a6da6281c3a9dfadeb02019a61f2c80da55362ad3393a696e666f5f6861736832303a6da62ab2e5e21fdbc93ccb31729f02fc04955e5665313a71393a6765745f7065657273313a74323a9d7c313a76343a4c54020b313a79313a7165","sni":"","session":"80af33d8-0226-4d23-83d2-777cc9e6f3b9","bytes_in":104,"source_verified":false,"enriched":{"digest":"796c179325827eb5","strings":["d1:ad2:id20:m","9:info_hash20:m","^Ve1:q9:get_peers1:t2:","|1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-08T00:46:32","port":39131,"src_port":23722,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�\u0017�Y\u00152\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�~\u0000\u0000","payload_hex":"4100fe17ab5915320000000000000000cd7e0000","sni":"","session":"3307c800-d8cb-4278-bee0-b1c307dc3e88","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-08T00:46:31","port":39131,"src_port":23722,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:m�(\u001c:��ް \u0019�\u001f,��U6*�9:info_hash20:m�\t\u000e\fƕ���*\u001e�'�~;̞�e1:q9:get_peers1:t2:eV1:v4:LT\u0002\u000b1:y1:qe","payload_hex":"64313a6164323a696432303a6da6281c3a9dfadeb02019a61f2c80da55362ad3393a696e666f5f6861736832303a6da6090e0cc695f5d5c12a1e9c278b7e3bcc9ee965313a71393a6765745f7065657273313a74323a6556313a76343a4c54020b313a79313a7165","sni":"","session":"b1f295eb-ba59-448d-8e02-29e8847738fc","bytes_in":104,"source_verified":false,"enriched":{"digest":"5ad7ceb4e2bfafd8","strings":["d1:ad2:id20:m","9:info_hash20:m","e1:q9:get_peers1:t2:eV1:v4:LT","1:y1:qe"]}}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":184}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-08","count":182},{"date":"2026-10-09","count":2}],"recent_events":[{"timestamp":"2026-10-09T00:02:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O���9�\u0002n��*�:-���9���j_�\u0007\u0002>r���qFqL�\u001c�����o̊�3B�*\u001f�E.��\u0006\u0019�\\@�)�p�$\u0016:>\u0019���<��\u0011q\u0007\u0005h/�˰�q�k\b\"�����U���Q z\u0007�b�F�u��q��\fh[X���\u0010\u0015��\u0013���lXW\b\u001c����6:\u0012;�T.bK�H��0��S\u0015�\u0001Cz�sMPN\u0017�yDd��l[��\u0013��7��IY\u0016w6�y�F�\u0001j_��f�\u0012�+#\u001b@0V����:�\u001e&{U�J0UA\u0010,[PJ�Ԛ�\u0006���(f�w\fsu7��\u0003�Vpؗ1��I�c.��\ng\u001c\u0006D�s��\u000f�K�;2k�9���&�m\\-�X\u0014H�\u0005o3�����8/�\u0010�ߺk���\u001e��,bǾ�\u0002G��\rA��N�ҭ���3\u00120k�[�)\u0003,�s�\u0017Z\u0006\u001c�2�!�\n�*�������(��@�\u000f�\u000b�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5d7308f8-7902-4a5e-8019-5bb83236b8e6","seq":1,"duration_ms":100,"bytes_in":518,"bytes_out":13,"enriched":{"digest":"86d0cb7a37f55451","strings":["qFqL","Gw?0","3Yf,","byga","T.bK","sMPN","J0UA",",[PJ"],"iocs":{"domains":["t.bk"]}}},{"timestamp":"2026-10-08T23:59:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O���`��!\u0017��g���X��&R\u001dWݷ��!9@+P�\u0016\u0012\u0005U)�#\baȪb�@��@7\u001e��\u0010�\u0003?�yM�����\u000fb��/��{X���\u0005����'5�'M��#�\\�wv��\u0010\f�B��|Y�c:���d�\u0010�@��_��U-Rs\u0007)|:n�R*�t��\u0016fN�(�r�C>X���\u0006OCf�$\u0004|�;","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d19623f8-e10b-4481-80c3-caa930003142","seq":1,"duration_ms":100,"bytes_in":383,"bytes_out":13,"enriched":{"digest":"0509d01856598d6c","strings":["QNERV","!9@+P","U-Rs",")|:n"]}},{"timestamp":"2026-10-08T23:57:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�c����\u0007/���m�\u0016�p �h����r�!i༻��{}����\u0004Sd ͐�B�7r\u001c��\u0017��\u001fTh�s�q%�u�Xf]�֖T]��� ����D��\rҵ�V����o)�E\tR,\u001d�ê�%'&�hr�2�,�_��5zz�K�*&\u001dn���=\u000e)\u0014�Sc��R2�˘f��R�[�\u001d��x\"T���a��\u0001N\u0018�����[�\u00171\u0004\u0004�Z\nl\u0018H5\u0003��M\u0015v\u0019����<@n�\b#K\u000fx�����cY���\f�+\u001c���\f�Exi\t���~���LT\u0002ŵ,퐘Cr�b'�\u00137L#;�_���b\u000f!\u001c颴nw`�Kr�4\u0019���c\u001dPB�J¸U\u00135\u001d5�\u00182tu\u0010����=R���ҽ#��,�kțb�&\u0012m|]�l;}&����`�X&\u001d�\u0010h�\u0010\u0011.�A���\u001d��P�B&O�Y��\u000b9��\u001b{�O�~\u0011�OHQ\u0017���l��\u001b�?U���r�\u0001\u001fؚ!��~\u001e��&vY��ޟ�,��Z����\n\u000e��**�c_(ڢ�����\r`+�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3c03b8e3-46d4-4fc7-a59e-180f339d7e35","seq":1,"duration_ms":100,"bytes_in":590,"bytes_out":13,"enriched":{"digest":"b4f7d43ccbb2bd69","strings":["rnc:","+_b|","]SCcj","7L#;"]}},{"timestamp":"2026-10-08T23:51:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�,a\u0010����[\u000b���@�;|x�-Y�2��4X\u0005\u0013�\u0006���y�WL�8l-���4$�e�\u0011\u001f�Qɋ\fX\u000e�z�ȲF�Qsd;5;�7S֎ �\u0019���U.���\u0018�*yt�ȳ״\u000b�V�W�U�)l�\t�܊�$|�l��\n���\u00149:\u001c�\u0017k�\r�N�4&��","payload_hex":"7a6ea0a3cb6c5ae737f7d9de3e2c6110dad3f1d15b0b9c83b940e53b7c78fa2d59943296d034580513c8068cf68e79fe574cb0386c2d8e8d8c3424f965c8111fa951c98b0c580ec07a83c8b246a05173643b353bd43753d68e209a19958889552efebef918822a797496c8b3d7b40bdd56ee579e55e6296cfb09bddc8a8c247cb06cb2d60afea4d614393a1cf9176bd90d904ea4343c471bf0cb76c40a000281b524ee69ac241b7cfb7732b526228b38eec84b67210c2caeaa4f561705c5ccd1d70da3a203c91fe3771567787ccf6de38a9e85d824c75bb38971944fab996a8d5f1b3e269e9d","method":"","user_agent":"","ja3":"","session":"6a481c95-8ed8-4670-b5f8-8746daed709a","seq":1,"duration_ms":101,"bytes_in":230,"bytes_out":13,"enriched":{"digest":"97c503cf80c2d762","strings":["Qsd;5;"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}