{"ip":"201.161.46.130","data_as_of":"2026-10-29T04:15:23+00:00","observed":true,"total_events":24,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network service provider","why":["24 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"204 bytes sent","bytes_sent":204,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-02-22T20:39:06","last_seen":"2026-10-28T03:11:39","events_24h":0,"events_7d":4,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"MX","country_name":"Mexico","region":"Mexico City","city":"Álvaro Obregón","lat":19.3753,"lon":-99.2271,"asn":32098,"org":"Transtelco Inc"},"source_domain":"201-161-46-130.internetmax.maxcom.net.mx","known_scanners":[],"scanner_tag":{"key":"peeringdb:as32098","label":"Flō Networks","category":"isp","url":"https://www.peeringdb.com/asn/32098"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":445,"proto":"tcp","label":"SMB","count":24}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-23","count":2},{"date":"2026-10-28","count":2}],"recent_events":[{"timestamp":"2026-10-28T03:11:39","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���G\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffc84700000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"ca0514d6-cd32-4eb5-969b-58221670ef04","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"b1872d2aaec20b8a","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-10-28T03:11:39","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���G\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffc84700000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"9d02e8cb-c196-4211-a990-c01a1457c42d","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"b1872d2aaec20b8a","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-10-23T13:35:18","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0014\u0015\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff141500000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"13453ae8-1248-4ac0-b1b7-d9474e5e4a3f","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"5f7710ab2df03183","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-10-23T13:35:18","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0014\u0015\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff141500000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"8f3c0e09-5086-4f8a-a92c-4c8632d09350","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"5f7710ab2df03183","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-14T05:13:24","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���#\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa02300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"b4b53f5e-8fe8-41e9-9967-8c905dbc92cb","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"2e8a1e42eabe1e56","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-14T05:13:24","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���#\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa02300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"89b899ed-9318-44ba-b512-b1307a5d2f17","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"2e8a1e42eabe1e56","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-13T10:14:04","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�� \u0012\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff201200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"74060fa1-4f55-4307-8412-efae5b796657","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d54403ac05761934","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-13T10:14:04","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�� \u0012\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff201200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"2b6fdb2c-b5b2-40dd-ae61-bfba74f08f7f","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d54403ac05761934","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-06T21:34:57","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u0018\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff941800000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"b97e2628-d50c-42ab-87e5-37e707dc4495","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"127543032eb1f185","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-06T21:34:57","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u0018\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff941800000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"33a1ce58-e2cd-43c5-893f-60820e8d6491","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"127543032eb1f185","strings":["SMBr","NT LM 0.12"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}