{"ip":"201.97.58.51","total_events":332,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["332 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 69,567 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"69,567 bytes sent","bytes_sent":69567,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T03:08:35","last_seen":"2026-08-15T05:59:16","events_24h":217,"events_7d":332,"geo":{"country_code":"MX","country_name":"Mexico","region":"Veracruz","city":"Poza Rica","lat":20.5377,"lon":-97.4071,"asn":8151,"org":"UNINET"},"source_domain":"dup-201-97-58-51.prod-dial.com.mx","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":332}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":54},{"date":"2026-08-13","count":61},{"date":"2026-08-15","count":217}],"recent_events":[{"timestamp":"2026-08-15T05:59:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Q�\u0017���E���\u0012�􈵥\u000e��|2�C �r���S��&\u000bS��0#J���\f?\u0010�ȳ����FIac\u0012Xbo�����\u0005���W�IK���^���ǀ�7�[&�EH�\u0014�|�>�0���L�\u0011Ӷ�Y�pM��[\u0019l\u0006�z�\u001fb�$�e\u001c�\f��\u0006������_�rzԊ\u0003��YT�F�\u001a?��F�����F�{�j���F\u0017ZJ�|\u0013�\bX�nn�\u001f��*�<�\u0017�-Yq��v�-\u0014�M����<���\u0006\u00178�\u0016��3)�BŒ=\u0006��~�\u000fn��xr�\u0014a㹛\u0006$^!��d;���7�Y0.1���ET\u001b�\u0004�\t�D� F�(\u001eF�\\aϣs�>֎eVcQ���/�jbd��i#6�RkH.%ְ�\u0001��l@�ǥ5�}��}� ~��m�-\u0013�\u0001l�G�b'��8��2�Lc�W^��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4be926dc-2919-4a6e-a68b-82b2ed2223d4","seq":1,"duration_ms":100,"bytes_in":362,"bytes_out":12,"enriched":{"digest":"c3df1ba6f5307063","strings":["FIac","Y0.1","eVcQ","RkH.%"]}},{"timestamp":"2026-08-15T05:57:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-x2td!08Q!tLs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d783274642130385121744c73","method":"","user_agent":"","ja3":"","session":"ce969b8e-a69f-4fd2-9032-6713f8beab6a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"76edd416d06912ae","strings":["BitTorrent protocol","<-BW160B-x2td!08Q!tLs"]}},{"timestamp":"2026-08-15T05:56:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":��Dͺp��_��:�\u0002�RMB/6>����\t�藁'���5\u0004���΁�i�\u0002V3h�{�������,N���X��J@<)�!D\u0000�͝�y�\u0006�5�\u000f;�g\\B-�\u000f��V,@9������3m�3s�9�KmF�ݥ�����\ta��\u001e��>ĥY��\u0001\u001et��@M��\t�\u001cN��\u001dH\u0006y5c#m@�<,�]��uvO��g��(�ٙE|���ݓZ��u�\u000e�Ǩ\u001d?�\rl�V��>\u0013c������\u0012\\b�\u0017Y\u0010�\n�m?","payload_hex":"3ac2f844cdba70c6d95fffce3add02a1524d422f363eba9c82c209d0e8978127fed0c8350481aca3ce81a069f502563368cd7bdcfca0e2b9f9bd2c4ea8eced5896c34a403c29ea214400f2cd9deb79d2068b35fa0f3ba5675c422dbc0f81a3562c4039f5a0e290f1f0336df43373f739a14b6d46d9dda584b1b99dc60961ef8c1eb4863ec4a559e7c8011e74939f404dbbca09ae1c4ec9c81d4806793563236d40e73c2c915df1d175764ff68467f18528e8d999457c81abc3dd935add7ff275b50ef3c7a81d3f830d6ccc56acb73e1363ac8089fef797125c62c9175910cf0aaa6d3f","method":"","user_agent":"","ja3":"","session":"ec617c38-7325-4a74-bef5-33ab912aadbe","seq":1,"duration_ms":100,"bytes_in":227,"bytes_out":12,"enriched":{"digest":"641fbea517e22c4b","strings":["RMB/6>","J@<)","g\\B-","V,@9","y5c#m@"]}},{"timestamp":"2026-08-15T05:55:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-QxzvBp)Sz9Za","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d51787a76427029537a395a61","method":"","user_agent":"","ja3":"","session":"d773bb79-3f45-4304-bfeb-db060dbfa8f6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"e085c6c58856b352","strings":["BitTorrent protocol","<-BW160B-QxzvBp)Sz9Za"]}},{"timestamp":"2026-08-15T05:53:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��6^�$�Mxz�U�>D����f�/I:���`���fr=���M�ͻ��5\u001e���h�\u0001ڜ�w�@�$y\rT�� �����m���:8���\u0019��w��\u000b����\u0012�v\u001e'\tG�B��[����q�r!���\u0016�%_��|`��OI�����SJ3M]-l����\u0003�zS��\u0007\u001fU��\u0012�>�]\td�\u0007ԋ�q�g\u001d\r�{\u0003Kb7�ΚWB��,�����U�\u0018�\u0013M��|�+�\u0019����Q�[\u0003�9zV��Eئ-��\u0010�6 ��\u0005Q�\u0000�\u001a�OՅ�\u0000�7\t","payload_hex":"fbeb365edc249e4d787ae955a43e44fc8bf1f366ad2f7f493a90c8f260bba28f66723dd4e4de4dbfcdbba299351eaffbc8689101da9cdb778f40d224790d5488b120e9eac6d5c96da2c1b13a38d0e7b119f7d07788bf0bdfe7fde912df761e2709479242a3c25b9dfda58171e9722185a6f2168b255fc1e67c60f09c4f49a2bc8f80ed534a334d5d2d6c9fc8d6ce03f07a53a4ac071f55a3c912c33eef5d0964dd07d48bc671ae671d0da37b034b6237a5ce9a57428eb62c88d9c7c4cb55c518b8134d93b57ceb2bbb19bca095da51b55b03bf397a5685b345d8a62da1e610ef3620bd880551a300fa1ae04fd585dc00983709","method":"","user_agent":"","ja3":"","session":"3229238c-2042-4dfa-ac3f-5c270dbf29f5","seq":1,"duration_ms":101,"bytes_in":243,"bytes_out":12,"enriched":{"digest":"1a53aefde9f928d8","strings":["SJ3M]-l"]}},{"timestamp":"2026-08-15T05:52:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-J*Ey_1X3wYuJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d4a2a45795f3158337759754a","method":"","user_agent":"","ja3":"","session":"6e842477-7d9a-489a-aeda-e25963081e15","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ef64c4c562922490","strings":["BitTorrent protocol","<-BW160B-J*Ey_1X3wYuJ"]}},{"timestamp":"2026-08-15T05:51:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"<�\u0013O+B��-�)C�5��u(%\u0000B��\u000e�\u001a�?LD�_\rߒ����z��\fw��o\u0012���\u0003럥��Q\u001b[��6\n\t�*,�\f��b�� ̳\f&\t�9��ᘄ��.K�t䇰\u000f�e�����D\u0005��\u001d>�\\�b:��T\u001ai�����ӄje�B�`Yן�\u000edf�]do�2���d�\u0002\u001f\u0012\u0019����*t\u0013��X�}�p��\u0006%)��7���A���P�A����&5���bG��W���@2\u0012��+\u0016�z}����@\u0006])��5G7��h�}r����9tU�\u0000n�jeΈv\u0004\u001e��D��I�~\b���\u0012d¢���) �o�|��\u0003ƚ\tо\u000f��\b�Y�&ٕ�-���\u0003���L\u0013\t\u0000�u��E\u001dx�[�U�ꈐ�\n\u001d\u000eJ/�d\u0010��+�0y�7��\u000b:xx�@pK\u0017;\u001eJ'4��\u0001��\u0010�\u000b��=2�NTЄN\t��>ɼj'E�����K\u001e�F~��@�`���~N:S\n�\u0019��\\\u0018�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"96c5101a-a92a-425f-bca4-899aa8672c9f","seq":1,"duration_ms":100,"bytes_in":414,"bytes_out":12,"enriched":{"digest":"ba641a54f389222c","strings":["~N:S","u(%B"]}},{"timestamp":"2026-08-15T05:49:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-KI-MAwb.aJn0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d4b492d4d4177622e614a6e30","method":"","user_agent":"","ja3":"","session":"ab48f6b4-e213-4464-905a-d6854dc38cb8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"8b2be40ec22b2844","strings":["BitTorrent protocol","<-BW160B-KI-MAwb.aJn0"]}},{"timestamp":"2026-08-15T05:48:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015ݖ�ǻ���_-\u0006A\u001bKw\u0014\u0001�$��<�v��\u000bĻ稑�<)ƸQ�\u0014�p\u0010�Q�Be�t�W��K#�J\u0000\u0016�Z��&��m�\u000e�>o��\t��*�>\u0010�^����,��_F�7�P��*\u001b<���|̯y���@:�<Ф\n�t��S��\u0018��͜ed�j��w��m�\u0005Ǯ��<���3\b�� }�A9\u001cV����t�Z�)�L�n%ƣS��_\u0014\u000b�\u0017R���{â�2nl�4���h\u0005r%�$2Э�\u000b�*�\u0019�\"e/\u000b�\n��5�\u000f�\"-���\u0015-�\u0003�nyf��\b)�a}��ׯ\u0014�߂\u000f��)\u0015��UF0=w��vj〢[e{�\u0006C��O\u000f�_q�����\u001f��½_\u0013�\t���/v<c���E:�]��\u000f�\"�h�3�s�d2�Wv\u0016<\u0013\u00165�{\u001d�=�\fp��ݶ�6�h��_�\u0006ق?x�(�v;�u\u0000!N.��","payload_hex":"15dd96afc7bb82baf35f2d06411b4b771401ab2495d03c8776a2ac0bc4bbe7a891b73c29c6b851ee14b07010fc51d9427f65d274f957dbdd4b23934a0016855a92bc26bfcf6dbf0ef73e6fa1be09f7d42a973e10c85ef8a09aa92ce1ad5f46fb379b50f0ae2a1b3c80fdf97cccaf798f8dfe403ad93cd0a40aa87495f353dddb1899efcd9c6564b76abf8a77a6b46dfe05c7aea7cb3c91bda3330899e1207dd67f41391c56aee5ee9a829ffd74c15ab129ea4cee6e25c6a353f4d15f140ba7175285a6c17bc3a281326e6cf434f4a0bc68057225952432d0ada30b842ad619e722652f0bff0a7fa0dc35ee0f82222d91ea87152dfa03fa6e7966a0f40829c2617d9ac5d7af14fbdf820f94c2291597da5546303d77cefb766ae380a25b657bad0643f6814f0fb95f71e0cfe085e61f8bd5c2bd5f13bb098bc7db2f763c63a2f1ae453afb5dcbc40fee22a968c633ca73966432ea5776163c131635cd7b1dba3d9c0c70effeddb69136d66896da5fca06d9823f78d428fb763b917500214e2eafca","method":"","user_agent":"","ja3":"","session":"d5fbc645-5bb7-456e-bc44-e8710ac6bd4a","seq":1,"duration_ms":100,"bytes_in":385,"bytes_out":12,"enriched":{"digest":"7d58b974b28c0114","strings":["UF0=w","/v<c","u!N."]}},{"timestamp":"2026-08-15T05:46:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-1cFdW2prnZQX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d31634664573270726e5a5158","method":"","user_agent":"","ja3":"","session":"c925d56e-af6c-4fb7-bb73-bcb114d961f7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"d1ec9efb78404f93","strings":["BitTorrent protocol","<-BW160B-1cFdW2prnZQX"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:04:45.584410+00:00"}