{"ip":"188.84.216.28","total_events":45,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["45 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,258 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,258 bytes sent","bytes_sent":9258,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T10:46:16","last_seen":"2026-08-15T11:45:57","events_24h":0,"events_7d":45,"geo":{"country_code":"ES","country_name":"Spain","region":"Basque Country","city":"Donostia / San Sebastian","lat":43.3126,"lon":-1.9745,"asn":12430,"org":"Vodafone Spain"},"source_domain":"static-28-216-84-188.ipcom.comunitel.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as12430","label":"Vodafone España","category":"isp","url":"https://www.peeringdb.com/asn/12430"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":45}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":45}],"recent_events":[{"timestamp":"2026-08-15T11:45:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-I1H~3jUK1Sfo","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4931487e336a554b3153666f","method":"","user_agent":"","ja3":"","session":"491f4316-8a06-48b5-8920-f5569f3c33c3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cfe8e80da5fa7dc6","strings":["BitTorrent protocol","<-UW1609-I1H~3jUK1Sfo"]}},{"timestamp":"2026-08-15T11:44:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n�\u0018�u]�#\u0018�\u0003�F���L��E{����-���,d\u0019ԑ�N��\u0003A\\\u000f\u001f\u0002��F\u000f�z�[���9�G�ԁ����5\t��,{�L\ty\u000e\u0018^��(�R\u0016\\.�߆��\u00110\u0000b�\u001a=�#��\u0018��n3'k��4\u0016�W�7'D�)���\u0019�͗\u001d�ǽ�\r�\u0005$�H��յ�-�\u000e\u0014Q��xh\r��","payload_hex":"0ae51896755df82318cc03eb46bbae8d4cf48f457b9082b1d32d97eea7aea0d82c6419d491924eb8d103415c0f1f02b6a9460fb87ab25bf5f999398e4786d4819ab79187350990f32c7be94c09790e185e9fff289152165c2ebadf8684ce11300062d61a3d9823e1fa18defa6e33276b82f33416d057fb7f37274492298ad6f519d7cd971d88c7bdf90db20524bf48badbd5b5822d910e14518b7f9078680da8b6","method":"","user_agent":"","ja3":"","session":"1bcd66fb-9e01-4210-8166-3abfa85d97d1","seq":1,"duration_ms":100,"bytes_in":161,"bytes_out":13,"enriched":{"digest":"2de510626b9f8193","strings":["n3'k"]}},{"timestamp":"2026-08-15T11:43:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-O8BbHd0qYLX-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4f38426248643071594c582d","method":"","user_agent":"","ja3":"","session":"afd17f2f-24e6-44ba-b1fb-bae2b7f96559","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0687b6f8cadaf3fe","strings":["BitTorrent protocol","<-UW1609-O8BbHd0qYLX-"]}},{"timestamp":"2026-08-15T11:42:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Fk\u0014\u0012�h����\u0001�\u0019|�\u0014��O��.��:�ye\u0005��jp�c3�\n��\u0017�9���{����gȯW\u000b8$\u0015����f�P*�7\u0006!�\u001c*Av\"��6��f�`���)\u001d\u0007�a�/�|���\b[{\u0019��{���\u0013Q��\u001f\u000f�H1�<4H��ϥ�N��o��qQ�F�\u001bv�񾓠��7��5�3<YBɦD��\u0016�����c� Q�Ҍ�\u0002u,k*�\u0003V!ȼ���\t4����I�dnW�>�\u0012�C���:���\u0017��\u0015�e\u001d:��!Jb9�yZ\ts)\u001c���/��\u0012��V\u001f:�\u000eEϦ��<����G�z�\tɛ��y/�Ec�T䄳\r�s��_\u0001\u001e��7��B���\\�d{E'�\u0013U����\u0006�I\u001bA���2\"�;�:+\u0002�\f��r��]�?�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0388a511-6651-47fa-84e0-83328d1f0d0d","seq":1,"duration_ms":100,"bytes_in":337,"bytes_out":13,"enriched":{"digest":"b22864e8ac919d47","strings":["*Av\"","3<YB","u,k*","!Jb9","d{E'"]}},{"timestamp":"2026-08-15T11:40:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-z2P*kNeLrjIM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7a32502a6b4e654c726a494d","method":"","user_agent":"","ja3":"","session":"6ea81d28-9398-42dd-afbc-1b44933863d0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d7262a2b4bf5aea3","strings":["BitTorrent protocol","<-UW1609-z2P*kNeLrjIM"]}},{"timestamp":"2026-08-15T11:39:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%���=\u0002�sXk\u0003a�Z����1R$K�|�����\u0000��P?���QyMx�[�^��TRlM\u0001�X�jP`�C�oV�F��\u0014n�B�3 �>j-\\X�*V&�n\u001d,��ovD\n6�~�g\u001e\u001f\u000eXe6��w�#֒\u0001;\u001c��M4\u0007��\u0010}��?�0�OΧ��L��Ue�w?�e\u0012l@.��\u0012g�S ��Ĝ�\u0000\u0011\u001e��\u0002p���_5�\u0001\u0007���\u0013�\u0011��R�lȑL�^f��+v��%�\u0005���e��\u0004��6�~\u000e�.J-�8鬅d��\r\\��p=�\u0006��̤���{߀�O\"�ChC�����8ra˂޻���en$\u0015��fe�\u001e��W\u0014�=���w�@�\u001a���o'�N�s‰/�he���D��m��Kd^��7q$\u0013S��\u0011��\u001b9d\u001c\u0002��n��Ŝi��/�TD����\f��$�\u0006m","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"05fc63ba-a486-453d-8f36-b7bcbd836737","seq":1,"duration_ms":100,"bytes_in":364,"bytes_out":13,"enriched":{"digest":"f2f0777730087cab","strings":["1R$K","QyMx","TRlM",">j-\\X"]}},{"timestamp":"2026-08-15T11:37:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-KOWlMTKib*re","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4b4f576c4d544b69622a7265","method":"","user_agent":"","ja3":"","session":"d93b05ca-2036-4f4c-9cd9-246c5ba9b2a1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4c65370f1cf143e3","strings":["BitTorrent protocol","<-UW1609-KOWlMTKib*re"]}},{"timestamp":"2026-08-15T11:36:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\b}\b\u0013�0��\u000e�z>v�P���\u0018{q^`iL^\u0011�mႩE</�,\u0005���5�\u0012\b*d��\"K�\u001fXH\u001fZ��&\u001c&\b8Ti��E�O/�ܤ<#?S\f�jp]�����K�N�#�q|\u0000ʓf|g\u0013��/�?,��n��Ǧ\b�\b�\u0006�{�bU�W{�mNi\u0007�\u0019\u0010P��\n�15�\"T���#\u0012\u001a��8-\u000e?\u0015Z�\u000fZ\u0002k'Os������\u0001�c��U��\u0006�\b_.�C\u0014�.;�\u0001r�+���^\u001ep��\u001f��\u0005N�Dd�\u001a�t�\u0016ϹW����O��E�;$*\u0017����\u001aJMt\u0011ц:Q/�@��V��H)�s�","payload_hex":"087d0813b830b9ae0ef27a3e76be50cef4f4187b715e60694c5e11b26de182a9453c2fc82c05c5e7c935b912082a648bf8224bf41f58481f5af5e0261c2608385469b5d945a74f2f80dca43c233f537f0c966a705d8c85f6e9c94bb04ea323ab717c00ca93667c671392c42fce3f2cef966ee7cac7a60885088406a47bb8625586577be86d4e6907e91910508a820a893135fb225482a9ad23121ae688382d0e3f155ac00f5a026b274f73cefbedb6b99801cc63fea955a4b806c9085f2e8a4314ef2e3b9f0172922bf8dfc85e1e70f0db1fc7ca054ecb44649a1aa9748d16cfb957fd9be5a44f9e9245fc3b242a17fdc184a91a4a4d7411d1863a512ff040b1b75699ac4829e17388","method":"","user_agent":"","ja3":"","session":"771907b5-d3da-499b-81a4-7bdc1a140540","seq":1,"duration_ms":100,"bytes_in":265,"bytes_out":13,"enriched":{"digest":"b13018f82e62ed9a","strings":["{q^`iL^","<#?S","k'Os"]}},{"timestamp":"2026-08-15T11:34:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-YfBvfstbzwNk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d59664276667374627a774e6b","method":"","user_agent":"","ja3":"","session":"90646c76-837a-4b85-9bba-b9b864510e64","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d65b6d4cc963453b","strings":["BitTorrent protocol","<-UW1609-YfBvfstbzwNk"]}},{"timestamp":"2026-08-15T11:33:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j|��X\u0019a7���e�����\n��\u0003\u0010o�^\u0017m\u00127<rs����-��_�<�G8*\u0011[qhF���\u0011S�\u001aj���~q\u0010I\te-��os&�s�Q�@\u0013��\u001d%#\u0011\t��dF;DŽ��\u0001ʚ��m��CM��8I?\u0019\u001c�YαQ��7Mβ��U\u00140����rc�!\u000f�H�","payload_hex":"6a7ce2b658196137c3d2df659985c6ceeb0aa2d703106fe65e176d12373c7273dbeaf3f12df2ed5fd43cda47382a115b7168468fb8f51153c11a6acef9ac7e71104909652dacac6f73268473e851ca4013e3851d25231109e3d264463bc784e78a01ca9a9c926dbf8d434dabe538493f191cbf59ceb151ffd9374dceb2ffe855143093ccc3c97263f6210f9a48fb","method":"","user_agent":"","ja3":"","session":"fee3ecd7-78fb-44c9-8f86-43ed73589178","seq":1,"duration_ms":100,"bytes_in":142,"bytes_out":13,"enriched":{"digest":"6dcbc3df3ec1411f","strings":["7<rs","[qhF"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T17:34:39.157358+00:00"}