{"ip":"206.204.152.141","total_events":99,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["99 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 21,809 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,809 bytes sent","bytes_sent":21809,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-01T15:24:37","last_seen":"2026-08-16T09:34:36","events_24h":0,"events_7d":70,"geo":{"country_code":"ES","country_name":"Spain","region":"Catalonia","city":"Ripollet","lat":41.4913,"lon":2.1565,"asn":15704,"org":"Xtra Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as15704","label":"MásMóvil","category":"isp","url":"https://www.peeringdb.com/asn/15704"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":99}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-01","count":29},{"date":"2026-08-15","count":16},{"date":"2026-08-16","count":54}],"recent_events":[{"timestamp":"2026-08-16T09:34:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-DE220s-tjm9jXyFbzVE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4445323230732d746a6d396a587946627a5645","method":"","user_agent":"","ja3":"","session":"9788e89e-12bd-45e5-a527-efc2f6672e0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b97796dfdd24957f","strings":["BitTorrent protocol","<-DE220s-tjm9jXyFbzVE"]}},{"timestamp":"2026-08-16T09:33:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��dX�c\u000e?K\u000b��L�H�Gџ��v�D��>�Ƒ�~���'.����\u000e��0��\u001a��d&(��DI�^\u001e��K�X�?��Yp\u0017'\u0018ѯ\u001e�r9���\u001c#���4Mv�au�\u0011��h�\rȪm��^�&��1�����ޚ�4�\u0003\u001dz(�\nM�\u001d��3�\u000f����;2Û�2ʖ�\u0003��b0\u0012g;�|�N��J�\u0001��O 0\u0011���j\u0014u��0v�P.�W\u0001�\u0018\u0011'S�+\u001eȝH�F�&�U�|�%vL6M��qgű\u001c�\u0000u\u0019�F��$ވ\u0007���́\t\b�","payload_hex":"aba66458f8630e3f4b0bdcc04cca489647d19ff6ac76c544f6c03e92c691f77eea93fa272ed7c5f9e90effa83094f61a98d8642628c8d44449a55e1ee19c4bdc58913fdaf25970172718d1af1eb37239bfb0fa1c23a3f7b4344d76d66175f211dbef68cb0d7fc8aa6d80fd5e8e26c7e431f79bb7d9fede9aba34a5031d7a28e80a4df61dc9e633980ffaa381ff3b32c39b8f32ca969703bab6623012673ba47cc84eebe54aa50190f94f203011e1e0ba6a14759d8f3076d8502ef257018f18112753892b1ec89d48b8468526a555a87ce525764c364dc3c97167c5b11cf7007519b646979124de8807b4a2b9cc810908fd","method":"","user_agent":"","ja3":"","session":"3a06dbcd-648f-48fa-a8c0-8a10e47c6e43","seq":1,"duration_ms":100,"bytes_in":241,"bytes_out":15,"enriched":{"digest":"7c1b69d0f8c05438","strings":["%vL6M"]}},{"timestamp":"2026-08-16T09:32:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-DE220s-fD9rTABg3xSW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4445323230732d664439725441426733785357","method":"","user_agent":"","ja3":"","session":"819fa33e-e355-4eb4-b5ef-162c8f88be64","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c39130f2baa6d4a7","strings":["BitTorrent protocol","<-DE220s-fD9rTABg3xSW"]}},{"timestamp":"2026-08-16T09:31:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�$S�\u0017��ڙf�v�q0\u0001\u0001@\u0017�e>��8����\u001b�/Р\u0014w����������q\u0002�\u000f��\u0006\u0013�����Z������L�\u0013T�^\u0018����\\&\u0018��1��@��K�sc\"�\u0000��X��\u0013}ə����\u0016O\u001e�-(���$l i\u0014_\u000e��z��\u000e�Yx\u001c<7�\u000e|Nt\u00051����\u0012-�\u001cƓ&!�̯)�?Hi,�y��>�p]�a�Z��G\u001fp�#Gˎ\u0002�p.��n\bpG�;!V\u0019�A��F�\u0003��e�<��ʼn\b\u000b���ѕ��'�ض���p$>8gN\u001b\u0013\u0010�m���t��l�\u000b�3&�\f\u0018l�)yn��\u0016A&\u0004�\ra\u0006�\"E3y��\u000b\u001f����~�\r�\u0006�^*��&����\u0015�k���臯���A�@�\u0012�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a9ef96a5-f07d-49f5-ae90-7edda357730a","seq":1,"duration_ms":100,"bytes_in":323,"bytes_out":15,"enriched":{"digest":"57486c0d15cc20af","strings":["$l i","?Hi,","p$>8gN","\"E3y"]}},{"timestamp":"2026-08-16T09:29:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-DE220s-QD*IbgTFfYmF","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4445323230732d51442a496267544666596d46","method":"","user_agent":"","ja3":"","session":"41583701-bb93-4cda-8d7b-8a27195d0166","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"da539c1f45192b3d","strings":["BitTorrent protocol","<-DE220s-QD*IbgTFfYmF"]}},{"timestamp":"2026-08-16T09:29:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"5��\u0015��@��υ<e��#\u0017�Q��\u001fTh��\u001f�'9�1K\u0019�\u0010�b$2& '���K��a�\u0015\u0019ɶ\u0016R\n\u001bk���\u001c\u000e'네\u0016�ў�{�U\u0003AB��7�I!�ɥ����٨�\tynv��q�\u0017�Fx=F\n��g`�n\u0006+�\u001d <+s\u0004��U�a�\bL�>���X\r+\u0015A��KE8׳O����!}�DL���Ƹp\u0005�|�<1�^�D�\u001c6E��.�\u001d �O>b$�\u0017���Ax��)�\n���.#��˳�Uiu�\r�w����\u0018A�\u000f\r�˥�N�����\n�\u0003,��\u001c�$�\u0014,�\u001f'�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"41a273aa-9441-47d3-a2c2-d3110fc29696","seq":1,"duration_ms":100,"bytes_in":260,"bytes_out":15,"enriched":{"digest":"6edca636827b7add","strings":["b$2& '","Fx=F","O>b$"]}},{"timestamp":"2026-08-16T09:28:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-DE220s-rYoXTGKZcYV1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4445323230732d72596f5854474b5a63595631","method":"","user_agent":"","ja3":"","session":"89dd3cd9-3159-4e9d-8a07-79e501b18447","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"5491cbec027511b7","strings":["BitTorrent protocol","<-DE220s-rYoXTGKZcYV1"]}},{"timestamp":"2026-08-16T07:46:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"U2\u0015��\u0013�$\u0018O+��\u0003H\t�[�X��#(ܙ���o\u001e�֋�R�\u0002\u0012a_�r�=p?�d�\u001b�^]KH#�\u001e\u0018����R\u0002ƒ%��X�z�\f \u001fw5��{L��@z���-:iB\u0012�ី�^�\u001e��\u0000y�<+j���wd\\�2W���\u0007@�}���h","payload_hex":"55321595eb139424184f2be8f7034809b65b9a5889b22328dc99c1e0d56f1edfd68bee52c00212615f9172a73d703ff064b81bc45e5d4b4823fc1e189af1e6c65202c283259bbc58817ad90c201f7735fedc7b4cf6ef407affe2a82d3a694212d2e19eb89c5e861e9e840079a53c2b6ab6b7fa77645c993257b4c5da0740847d8db29d68","method":"","user_agent":"","ja3":"","session":"a3bddecf-74e9-477d-9a7c-ce06b7a953c7","seq":1,"duration_ms":100,"bytes_in":132,"bytes_out":15,"enriched":{"digest":"99e43ac56f635c18","strings":["^]KH#","-:iB"]}},{"timestamp":"2026-08-16T07:45:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-DE220s-8FdmAZoM0qTE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4445323230732d3846646d415a6f4d30715445","method":"","user_agent":"","ja3":"","session":"9ce556bc-e5ce-478c-bbdd-df12a82b9349","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"083891b47072c91a","strings":["BitTorrent protocol","<-DE220s-8FdmAZoM0qTE"]}},{"timestamp":"2026-08-16T07:44:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�΂;\u0001�1C|\u001eJ���nƏ�?m!�[tޏ���\u0013\u0003\u0017h�Č�$gӯ�*�\u0014�&\n!gsA\u0018�uJ\u0011�?/�^�Y(�~$\u000e���\u0017X�����4�r��\u001eO\u001fF��<\u001c!պ�^J\u0001�Q���E�\t��\u0012��'��*p(��+S2�r)�wp=\u0013Z�\u0016h�ǒ�����P\u001aG�Z� ����{鋌/j��","payload_hex":"b2ce823b018631437c1e4af497f06ec68fb43f6d21f35b74de8fa0a5bc13031768ebc48c942467d3afcf2a8d14dd260a2167734118c7754a11c63f2ff95eeb5928b57e240ee68fd11758dcf5d3efb4349772c1aa1e4f1f46e6a13c1c21d5ba965e4a01af51c0a0be45ee09eaf3128a8627a6c22a7028b1982b5332c07229ac77703d135ac31668dec79281c0bb94c2501a47955aae209df5f6cd7be98b8c2f6ad8df","method":"","user_agent":"","ja3":"","session":"b7d09a40-494e-43e3-b6b7-636d7f74e064","seq":1,"duration_ms":100,"bytes_in":162,"bytes_out":15,"enriched":{"digest":"82ae4d44f2bb3e31","strings":["!gsA"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:04.291259+00:00"}