{"ip":"206.204.155.194","total_events":190,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["190 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 12,920 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,920 bytes sent","bytes_sent":12920,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-04T19:25:15","last_seen":"2026-08-16T23:23:05","events_24h":0,"events_7d":70,"geo":{"country_code":"ES","country_name":"Spain","region":"Catalonia","city":"Ripollet","lat":41.4913,"lon":2.1565,"asn":15704,"org":"Xtra Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as15704","label":"MásMóvil","category":"isp","url":"https://www.peeringdb.com/asn/15704"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":190}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-04","count":37},{"date":"2026-08-06","count":30},{"date":"2026-08-07","count":1},{"date":"2026-08-08","count":11},{"date":"2026-08-10","count":15},{"date":"2026-08-12","count":26},{"date":"2026-08-13","count":7},{"date":"2026-08-14","count":23},{"date":"2026-08-15","count":22},{"date":"2026-08-16","count":18}],"recent_events":[{"timestamp":"2026-08-16T23:23:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��-!1�\u0011\u0002����","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b82d2131ce1102ac9ce8cd","method":"","user_agent":"","ja3":"","session":"7822c4bf-80b5-4fd8-9491-a99fc38b9e79","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d08116ca790ef275","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T23:16:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0013\b�7��?;Um","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81308bd37c4fe3f3b556d","method":"","user_agent":"","ja3":"","session":"de121351-3b8f-4407-bc93-6aaf131aef8e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b49649fe128119ba","strings":["BitTorrent protocol","<-UT360W-","?;Um"]}},{"timestamp":"2026-08-16T23:11:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\\¼UkǓZ�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8ea5cc2bc556bc7935a85","method":"","user_agent":"","ja3":"","session":"cdb57f74-0513-4b8f-b2e3-b813eb6de8f5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4427d00d444ba56d","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T23:09:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��=]�\u00119Vߜ�\u000e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b83d5d9f113956df9cdf0e","method":"","user_agent":"","ja3":"","session":"b1c9b06f-54ca-47f6-9cd9-f847f94b0785","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"de0f3b89077ccd02","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T23:06:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\bob��c$i[�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8086f62f7b86324695bf1","method":"","user_agent":"","ja3":"","session":"a95901de-eccc-407f-9112-ff293a7aabbe","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"66f5fb0dc40a5413","strings":["BitTorrent protocol","<-UT360W-","c$i["]}},{"timestamp":"2026-08-16T23:04:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0017��?�j'9��","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b817cbe13fe66a27399df9","method":"","user_agent":"","ja3":"","session":"c3b29116-2863-4baa-b6b2-3e58b8d20965","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"bb0bb58c475e9f09","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T23:03:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0007%\u001c�n���\u001f\u0018","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b807251cc66e898bd71f18","method":"","user_agent":"","ja3":"","session":"743bef00-2cf2-4e3e-ad98-5d437067ee6a","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e370c4d74b56fcda","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T23:01:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���v}#��\u001aG�m","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8f3767d23f9f71a47986d","method":"","user_agent":"","ja3":"","session":"31930edc-05f7-4cfa-ba4e-404569db38bf","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ac60310e35ee2ea0","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T21:34:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001e���pl�h\u001c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8cc1efb91e5706c90681c","method":"","user_agent":"","ja3":"","session":"bac4f13e-0ea9-4942-8771-1fd8584e00b0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0d4ff84713a8117a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-08-16T21:34:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���\u001e���pl�h\u001c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8cc1efb91e5706c90681c","method":"","user_agent":"","ja3":"","session":"bac4f13e-0ea9-4942-8771-1fd8584e00b0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0d4ff84713a8117a","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:16.796039+00:00"}