{"ip":"201.132.250.105","total_events":130,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["130 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 27,061 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"27,061 bytes sent","bytes_sent":27061,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-03T18:19:34","last_seen":"2026-10-05T21:04:07","events_24h":58,"events_7d":130,"geo":{"country_code":"MX","country_name":"Mexico","region":"Yucatán","city":"Mérida","lat":21.0782,"lon":-89.5779,"asn":13999,"org":"Mega Cable, S.A. de C.V."},"source_domain":"customer-MDA-CGN-250-105.megared.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13999","label":"Mega Cable, S.A. de C.V.","category":"isp","url":"https://www.peeringdb.com/asn/13999"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":4,"protocols":[{"protocol":"udp","events":4}],"ports":[{"port":39131,"events":4}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T19:54:51","last_seen":"2026-10-05T20:57:10","recent":[{"timestamp":"2026-10-05T20:57:10","port":39131,"src_port":12756,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:ƴo�ỽ׿F{�Ya�hy���9:info_hash20:ƴo�\u00064^\u0011�\u00033�N�\u0003OU�\u0001�e1:q9:get_peers1:t2:+b1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ac6b46ff7e1bbbdd7bf467bd35961ff6879b8fc97393a696e666f5f6861736832303ac6b46f9f06345e11b00333ef4e81034f55f801a165313a71393a6765745f7065657273313a74323a2b62313a76343a4c540102313a79313a7165","sni":"","session":"cee50858-b351-40cc-820f-1ae96e411f8d","bytes_in":104,"source_verified":false,"enriched":{"digest":"d7127510fd7a3444","strings":["d1:ad2:id20:","9:info_hash20:","e1:q9:get_peers1:t2:+b1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T20:52:07","port":39131,"src_port":12756,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:ƴo�ỽ׿F{�Ya�hy���9:info_hash20:ƴn���3\u000e\u0012���8Ь��vT8e1:q9:get_peers1:t2:y�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ac6b46ff7e1bbbdd7bf467bd35961ff6879b8fc97393a696e666f5f6861736832303ac6b46edef194330e12b2928a38d0acfbb176543865313a71393a6765745f7065657273313a74323a79a8313a76343a4c540102313a79313a7165","sni":"","session":"951b1255-7713-4f94-ba38-c7346e52d1a4","bytes_in":104,"source_verified":false,"enriched":{"digest":"0d170deb440d02a6","strings":["d1:ad2:id20:","9:info_hash20:","vT8e1:q9:get_peers1:t2:y","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T20:28:54","port":39131,"src_port":12756,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:ƴo�ỽ׿F{�Ya�hy���9:info_hash20:ƴo!\u000ed\"�����H��ɳ�O�e1:q9:get_peers1:t2:V}1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ac6b46ff7e1bbbdd7bf467bd35961ff6879b8fc97393a696e666f5f6861736832303ac6b46f210e6422f2a891ccd84898b1c9b3b84fee65313a71393a6765745f7065657273313a74323a567d313a76343a4c540102313a79313a7165","sni":"","session":"04cc79fb-e706-4cb4-ab95-9eedf0ecd2d6","bytes_in":104,"source_verified":false,"enriched":{"digest":"7a8253ae437aafbd","strings":["d1:ad2:id20:","9:info_hash20:","e1:q9:get_peers1:t2:V}1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T19:54:51","port":39131,"src_port":12756,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:ƴo�ỽ׿F{�Ya�hy���9:info_hash20:ƴo����/�\u0018*�NB�Q�\t�>e1:q9:get_peers1:t2:qj1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ac6b46ff7e1bbbdd7bf467bd35961ff6879b8fc97393a696e666f5f6861736832303ac6b46fa1e0e4fc2fc8182ae94e42f951c409db3e65313a71393a6765745f7065657273313a74323a716a313a76343a4c540102313a79313a7165","sni":"","session":"367445c8-12d3-4721-94d6-9ba5d3c24a58","bytes_in":104,"source_verified":false,"enriched":{"digest":"e2841f2c67c41ef4","strings":["d1:ad2:id20:","9:info_hash20:",">e1:q9:get_peers1:t2:qj1:v4:LT","1:y1:qe"]}}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":130}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-03","count":67},{"date":"2026-10-04","count":6},{"date":"2026-10-05","count":57}],"recent_events":[{"timestamp":"2026-10-05T21:04:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000b^�3�D�S\u0002�y\u0002���(��_!�Ae^\n8��\t�y��br�\u0017s���~�\u0014>3XE>V�2�3p3�*r,~e�,��\u001a�}%_��\u0019H\u0018�\r�\"T�V7}��-�[�-\u0014!k$�r(��1\u000f\f��.!\u0001,��\u0003","payload_hex":"0b5ecc33d744ba5302cf7902c8d4cd28f5f25f21e341655e0a388cdf09b779a8806272b61773d4d6d57eba143e3358453e56fe3297337033ef2a722c7e65d02cf0c51ad67d255fa787194818ee0dec2254f556377de0d32dc35bd42d14216b24fe7228ac91310f0ca1b32e21012c9a9403","method":"","user_agent":"","ja3":"","session":"0212e8aa-0ff0-46b7-b524-88a2a082cb22","seq":1,"duration_ms":100,"bytes_in":113,"bytes_out":15,"enriched":{"digest":"c32db2c6fa8bca63","strings":[">3XE>V","*r,~e"]}},{"timestamp":"2026-10-05T21:02:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-*2P6e!Vum4sR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2a325036652156756d347352","method":"","user_agent":"","ja3":"","session":"03b14dfa-515b-496a-b31c-9474e90dd0b9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ca09450d60cad6c7","strings":["BitTorrent protocol","<-UW160N-*2P6e!Vum4sR"]}},{"timestamp":"2026-10-05T21:01:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d\u001du>�xP�� <\u0002\u0017˝� �)\u000e�\u0002:\u0007�YU�\u0013&���_�Wm\u001f~\u0010R��a�>a\u001fdc2����\r��\u0019<µ\u001fJ\u0011B����L0\"q譬\f�\t�\u0018YR�vB���@ӳ΃�~˼�����;\u0013N�o��\u000f�a���\u000e�\t�H \u0018����L����?���l�;u�ަ���eN |f�����vs�\u0017=\u0007�N�x�G��v��\u001c�\t��<>�$j���'\u0013j�b\u001b�9\u000f�gd���\u0016�|@�?&��Y\u000e���Wd�,@���*p�k�ؘ䖒�j��g�=l�)\u001f7#�\fP����\u00149���vU��j�������#\u001c\u001d�rE�R�����u��#J[���\\�n5H�㈩_:�e%ǜ%�V���|\u0007\u000e�\u0017�**�䏁2�\u0019���d�\u0005X�\u0006��>a�\u0014�\u001f�h�ۣ�.��r��O29FU\u0015�!�ΰ�-����0���\u0017�j1r�U�ˇ\u0016$~�\u0005�\u0004���\u0005؉\u0013a�n���>��;%\u0006w��\\����>����\u000e:1���)qU��E��\u000b�Slx��񪞸^�B�?u����[\u0004<>�;CN�{�\u001c\u00131\u0010�rRʢ��#�ȬO��3/|&�]���B7�E��2oh","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8a99a980-177d-4907-ad20-4f4bc0601897","seq":1,"duration_ms":100,"bytes_in":513,"bytes_out":15,"enriched":{"digest":"bad8102249df68aa","strings":["eN |f","O29FU","3/|&"]}},{"timestamp":"2026-10-05T20:59:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-dvb339KKAcRs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6476623333394b4b41635273","method":"","user_agent":"","ja3":"","session":"eee4d318-9053-4097-8182-6bf9c446042b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4a40dc2de1f87d79","strings":["BitTorrent protocol","<-UW160N-dvb339KKAcRs"]}},{"timestamp":"2026-10-05T20:58:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"lA<\u0014\u0001�@�?\n}�+9O23\u0003}U���V��\u001bT�&b��@���g9\u001fP%��@6��n\u0012�,�����\u000b-��@O�W��JG\\VMA�_2�\\�\u001dlJ\tXC�{�\u0002�\u0014���%D\bf\b��G��I\u001a3{�T���?'���\u001dm�.\\�\u001aP�P���4\\=\u001a�Ca̵\u0001��yh��\u0010��P�\u0002w���\t$r�\nM��>���D�����\u0004q�-%\u001c��@s1gf?/�S�u{���:�j�\u001b\u0013","payload_hex":"6c413c1401ef40ae3f0a7ddf2b394f3233037d55858dfe56bed01b54b82662a582409b97a867391f5025efaa40369b9e6e12a32cd8e8c3cdc20b2dcee8404fd557b3804a475c564d419d5f32ca5cd61d6c4a095843ae7bc002ac14e8d8f62544086608a3ea47f5d0491a337b8554b28c843f27e49cd01d6dac2e5cb21a50b450ab9b96345c3d1aa14361ccb5018693796888de10eefd50a90277ddddcb092472e00a4d92eb3e9cf59844ecdbfb8eb40471f22d251c97c840733167663f2f8653e5757b8ecaee3afa6ad01b13","method":"","user_agent":"","ja3":"","session":"ea1cea79-be1b-454b-af05-56bf4fda25ab","seq":1,"duration_ms":101,"bytes_in":204,"bytes_out":15,"enriched":{"digest":"cf76ab8d5cb4f955","strings":["+9O23","JG\\VMA","@s1gf?/"]}},{"timestamp":"2026-10-05T20:57:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-*Ki0L6ojuxXe","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2a4b69304c366f6a75785865","method":"","user_agent":"","ja3":"","session":"a275e972-c068-4796-9a6a-7f68c51bfd51","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e86a1c7f16c30ec0","strings":["BitTorrent protocol","<-UW160N-*Ki0L6ojuxXe"]}},{"timestamp":"2026-10-05T20:55:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���ټ�)3�J8M\u000b.l�B\u0016\u000e�_��\u001d\u0003\u000f�P���\u001e\u001e��~\u0004�)�T��~��>�K�񰑭�\f%���_H�]�q)��/\u0004����3}\u000fQ\f'�+{)��\t�SxkVsU�8xt�;ڏ3������?b�f6?k\u0000�'�l��R>�C�\u000fsc���yì<��b۳,�\u001a� w\u0017]��\u0005��vL��Y\u0018A�(�*9\u0011��_B�ofnH�\u0011;p�����\u000e�<���\u000f\n+��i6��6Ȩ�\u0006��M\u0000|g�ɌT�2n�\b�(����r]EZ�j;tP�c6B\u001bM\u0012\u0004���5Eu\tKg�/�9YGP\u0015�Qա$B���� n�v8b�\u0006鿳�ɇ�%�\u0004���(ȧ)�\u001d \u0017puc�6՜�����∌���\u0005��`�\u000f���}㭮O�ڨt9�\u000fb�k\u0014B","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d2afa127-d8c6-44bb-a641-1db65d2b0d0e","seq":1,"duration_ms":100,"bytes_in":347,"bytes_out":15,"enriched":{"digest":"35ad536b46f33efa","strings":["SxkVsU","f6?k","ofnH","r]EZ","j;tP","9YGP"]}},{"timestamp":"2026-10-05T20:54:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-7DRGyCzWgb0r","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3744524779437a5767623072","method":"","user_agent":"","ja3":"","session":"08bec30f-7a29-4360-8033-c2f08623fd7f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ac0c3a52291d2d3b","strings":["BitTorrent protocol","<-UW160N-7DRGyCzWgb0r"]}},{"timestamp":"2026-10-05T20:53:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��01�4CV\bd\u001c\u000e�\n\t��\n\u0006���dHS\u0010.Zo5�!\u0015[����\u000e\u000fΗ4�_��b�M�^#�i�ae\"����\u0014R�p\\\u001a.�\b\u0000��\u001e\u0012��\u0013��\u0017v%8�!�\fk�BBFo\u0018\u0002�)L��U670��:�]�{j��NäK�RHJ�\bEa8�\u001b��ݽ\u0014��> 똫H�[�5�^�aY4���s����*EÎE\u0012�+�\u001a��\u001e�k�q���˹���򀕽V}r��L\u0015a���ʸL'�rR\u0015\u001c��t�s�ÀݙD�S��ֹl�9��\u0016\u0012M#Ex\u0004����\r������\u0016�N���\u0010j\u000b�3\f��b.SaY#\n��s�s���1Qj\u0011��˽���T�l^���v'�a�����}Y��Uِe����+�Ԍ�s�\tJ\r&�s=��3�\u001e���\nC\u0000n\u0000�>��\u0006��1L1�\u0002���(檮�4a�\u000fԂ�\u0001¥˞�7\u000eh�5\u0000\u0019R\u0006\u0001�\u00191���\u0017�\u00127\u0015���H�\u0016E��L�L\u0001-z�\":\u0012DU\u0005`\tZ�.\t<u���o��[ϖD\u0005�?\u000e��j�\u001b�\u0013���X~/��\u001b�m�)��;\\�\u0005\t�����!Ce�u\t>`P��h��:\u0002!�","payload_hex":"f7d83031cb34435608641c0ea90a09fc8c0a06a2d4c1644853102e5a6f359f21155ba186f1df0e0fce9734f55febba62a84d805e23eb69bf616522addac3cf1452b2705c1a2eaf080087a61e12cbcc13e4c317762538dd21bd0c6bd54242466f1802d7294ce2e65536373093f63aa65daf7b6ae7d84ec3a44bd8527f484aab08456138c41bd1ecddbd14b5f53e20eb98ab48b35bba35b87f5e94615934f58fb07384b79a912a45c38e4512a92be61accd21ef06b9071a4a7c1cbb9c2d3f3f28095bd567d72cdfa4c1561effcf6cab84c27e77252151ce1fb74be73b6c380dd99449a53d5fbd6b96cf739eaf716124d234578048df4f7e80dfdb1a5aa89ac16e84ea5dbee106a0bae330cbeaa622e536159230ab7c473a673a8bec631516a11f088cbbda0f1d054f66c5ea9a59876279a619be997efb97d59f6f355d99065e6f1968e2bc8d48cce7386094ac29d0d268a733de7e333c81ee48fd30a43006e00e93e989206e9b3314c3187028e9e8928e6aaaebe3461f90fd482cc01c2a5cb9ee9370e68b5350019520601a41931aa9d9917f012371598f78a48ac164588ca4ca94c012d7ab0223a1244550560095a972e093c75bda2bf6fef9c5bcf964405d03f0e80e76ade1bcf13f6d1d5587e2fa1a81be56d9829ba823b5caa0509f78bc9fae6214365a875093e6050fe8068a69b3a0221dd","method":"","user_agent":"","ja3":"","session":"3998e2df-27fb-4831-9ccb-7abc4f1a16e7","seq":1,"duration_ms":100,"bytes_in":499,"bytes_out":15,"enriched":{"digest":"587701320db3efd5","strings":[".Zo5","BBFo","U670","M#Ex","b.SaY#"],"iocs":{"domains":["b.say"]}}},{"timestamp":"2026-10-05T20:51:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-igjUvzOHqQGV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d69676a55767a4f4871514756","method":"","user_agent":"","ja3":"","session":"9c045e27-e3c7-4077-ac35-b9f256b37f18","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"27a6cd565a897b0c","strings":["BitTorrent protocol","<-UW160N-igjUvzOHqQGV"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T21:40:45.413153+00:00"}