{"ip":"212.166.223.38","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,467 bytes sent","bytes_sent":3467,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T15:39:06","last_seen":"2026-09-01T16:57:54","events_24h":0,"events_7d":0,"geo":{"country_code":"ES","country_name":"Spain","region":"Basque Country","city":"Bilbao","lat":43.2481,"lon":-2.9209,"asn":12430,"org":"Vodafone Spain"},"source_domain":"212-166-223-38.red-acceso.airtel.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as12430","label":"Vodafone España","category":"isp","url":"https://www.peeringdb.com/asn/12430"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":18}],"recent_events":[{"timestamp":"2026-09-01T16:57:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-k4p0-wZcbRlq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d6b3470302d775a6362526c71","method":"","user_agent":"","ja3":"","session":"6e6f45cc-a3bd-4b5c-95d5-c6b6f7b8ece9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e3badb28bd6af46d","strings":["BitTorrent protocol","<-BW160B-k4p0-wZcbRlq"]}},{"timestamp":"2026-09-01T16:56:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"I�ڛV�Sh��B�Šk{�L\r�\"�qb|�\u0015|��#���i7�.3���T\u000e�\u0014�\u0012�\b�$\b:pпU��\"�~f\u0006�e���{J|\u0002��]���܄�����R�\u000e���&\f�.�O\u0012\u000fM\\�͝_{�=�~�E�֭\u0016쥯ٿ��]�\u0015fŀ��.���t\u0013! Rٲ��X����}G�gA\u0013�\u0016\u000b�dMO��.)�s��1�����\u0015+�A������\\��~����<9�Za0=�Yk�\u001c\u000e\u0015k\u0018�\f\u0002�[\u0003��թgKq\u001c�\u0007��\u0011��2Y|B�W���H����!�\u0004�\u0001��'j\u001e�\u0005�$�8�y�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"183e90aa-7f7b-496b-83d5-23767c22c031","seq":1,"duration_ms":100,"bytes_in":266,"bytes_out":14,"enriched":{"digest":"59c9374338b7af61","strings":["Za0=","2Y|B"]}},{"timestamp":"2026-09-01T16:55:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-G.M2HDZx9nYv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d472e4d3248445a78396e5976","method":"","user_agent":"","ja3":"","session":"041342d7-bc1d-4b23-856b-a6992bb147d1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2044ffd6c965aee1","strings":["BitTorrent protocol","<-BW160B-G.M2HDZx9nYv"]}},{"timestamp":"2026-09-01T16:54:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000f��7�\"=��?\u001d�V����x�\u000bS=[֪�\u0012-�VH���\u0005v\u0012�\u0018��@\u0013�\u0015�L���\u001028�R����%��+:�_\t\u000e\u0017\u0007\u0019`h���%|��l�M{�<\u0014\u000e-w\t\u001c�Oj�IH�\u0005\r��jݪ��`\u0010ד$)�\u0013\u001dg?�biK�[��z#��md�-?�)\f�)(�\u0002��'C���U�э��4g��x1k1���\u0013�\u001dު��R\u0017! \u001c��b*?�&>�M��v:h\u000e0l[������P\u0010h���~�&\u0007�nM\u0003{���G�b���`�+\u0014Z}���UR�j�\u0007��#VH\u001d�k2�q�H�r��ᕘW\u001b��_=�{N�`���\b�9��\u0002\u0016ۭ�^\u001c��\u0011����`�j��M���#馚�\"4\rp�nσN���V��\u0007��\u0012��h�H�c\u001f�1��@\u000b��n\u001c��Mg:|�u�\u0001�\u001d�9�Ӎ]�]�\u00174Y����=6\u000b�G�\u0012�c\u0010�f��\u0016hX���q��e¹�^�|�\u0007\"p᚛:\"�s��љ����\u001fa�\u0007v\te�\u001d]��Y�f�\u000b�u��g�(Љs\u0004p\b��/>\u0010QIY�y�_��\u0005�T��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c5ed4e59-b3fc-4ded-a76d-1a70a4502f7e","seq":1,"duration_ms":100,"bytes_in":476,"bytes_out":14,"enriched":{"digest":"41ba64cc22c65906","strings":["x1k1","Mg:|"]}},{"timestamp":"2026-09-01T16:52:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-S_FkhLVNCb3K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d535f466b684c564e4362334b","method":"","user_agent":"","ja3":"","session":"f131ce69-41fd-4600-a716-5149b42134b7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"46fe71e967aede14","strings":["BitTorrent protocol","<-BW160B-S_FkhLVNCb3K"]}},{"timestamp":"2026-09-01T16:51:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"5�C�e�+'n�X�6G�\u0017�\u0004���(��\u0014���tw����m���=�]\u0004�\u0018ƨW�N�\u0014�s�\r���tW�N��0�2G���%��\u0007P��l�\u0001;�Zw�ԁ��C\u000f7��Z���\u0003�\u001fex\u0016��g\u0017���\u0002�6:\u001e\u000b\bK��F\u0015zy��(�\u0000S�\u000b�m\u0019�\u0017��d�l/vYo4������k �M���\u0010*7t��;�+g�\u001ar�\\w�c����\n\\A\\w\u0011�[�vW;�j�t���\u001c�ƈ\u0001�=�L\u0017\u001e���\u001b�2��M\u0017�+�\u001f\u0005�y��\b�^V���\u0011 �X�F�\u001f��� ��l����I\\X*IJ�N?'�%�d0\u0004\bp\u0011�\u0006�\u0019h�U��5\u0002�vS��\u000e�\u0019��K�\u0001x�\u001f����M0�\"�����\u0013��+","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9a721df9-b800-41a8-a0c4-91c8910cd082","seq":1,"duration_ms":100,"bytes_in":323,"bytes_out":14,"enriched":{"digest":"0b7d66fcf8ea1377","strings":["l/vYo4","\\A\\w","I\\X*"]}},{"timestamp":"2026-09-01T16:49:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-vp(hZpnh6xl4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d767028685a706e6836786c34","method":"","user_agent":"","ja3":"","session":"59045c85-2a3a-461a-a1d9-f9ec4c720c40","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"67fd01185aede99f","strings":["BitTorrent protocol","<-BW160B-vp(hZpnh6xl4"]}},{"timestamp":"2026-09-01T16:48:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"J\u0006\r\ng@b̓�Z'�i�.�\"�i�\u0011l���\u001b/���������j�ca�FR<|�s�j!0��m�\tfi\u0006ɕ�ȇm\u001e��<9y�~��w��wt�1L�g���9D�\u0019X҇�s�ā\u001eL9��P�]>�R�\n�����\u0017\u001a��GҤ�%\u000b:���\u001a�'u�.��{�\u0003���\b\u0017\u0003]s���\u0001\u0000_|\r~\u0006\u001e��[|�N�\t\u0017�'\u0017��[0u\u000e�l��:��\u0010�\u0006c�M*b��=�̸�\u0016[�\\k��αV���5�D�c(s��}��H�85�/\futz ��BI��oF�k\t\f��\u001fm��%X�;��I[K�\u0001\u0000�m\u0003�C-夢n�o\u001b�?�rG����\u0001\u0013A�o�T*�nmǵ��*��$�iϮf�tY禶��+\u0003����\f\u0011���ꎔ�q�bh�O�M�\u001a/;{(a'[��\u0007n�mH��}e��\u0000�-M�y\u0016��ka\u001e��b��\nr�t,��Aȏ��&5�w\r�n;��yj�i\u0014\u0010�367�\u001a�Q\u001d������\f!\u001a~\u0016W","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"491ca549-4854-40fa-ba45-7ac5f1fffbb5","seq":1,"duration_ms":101,"bytes_in":436,"bytes_out":14,"enriched":{"digest":"337bc239bdb0271e","strings":["FR<|","/;{(a'["]}},{"timestamp":"2026-09-01T16:47:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160B-~SHPF!MdBSO4","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630422d7e53485046214d6442534f34","method":"","user_agent":"","ja3":"","session":"f166a1d1-2836-4d08-8f27-3e06390c9822","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d2011b7aa4ccc974","strings":["BitTorrent protocol","<-BW160B-~SHPF!MdBSO4"]}},{"timestamp":"2026-09-01T16:46:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��'�\u0011\u0011�q)��T\"Kp�v�KޒB�sR��'T�%�tb\u000b��HתvY��*e$e׏�b&�h\"��\r��%���4Ȍ��'���M�#M|��آj\u0006�E�\u0019j�(ˆ�;\u0015�\u0004\b����\u001dU\u001e��\n|��O��\u0006����\u0004��O<��\u000b�\u0017��\u0014�[\f?��p�t����Y�#GωO,\u0001�?���qtp�=�*�OC���s3n��\u0005f�ߎv樸����͟GI���~$K���\u0011�,9��Y\u0017q��z�\u0018���������nGfᛴ\u0003\r��&f�\u00004\u0010\u0004�\nUC\u0015E\u001a\u0000{�u��i��2\u001a\b)��\u0016;\"\n��!�-a*\rVޥ�Y��bo#","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3d90eda8-2074-4138-9afd-64b7ffa8297b","seq":1,"duration_ms":100,"bytes_in":289,"bytes_out":14,"enriched":{"digest":"5b3088ad882bf179","strings":["T\"Kp","*e$e"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T18:35:52.842090+00:00"}