{"ip":"213.141.204.187","total_events":383,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["383 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 81,916 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"81,916 bytes sent","bytes_sent":81916,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-01T22:48:29","last_seen":"2026-08-17T01:41:27","events_24h":0,"events_7d":175,"geo":{"country_code":"ES","country_name":"Spain","region":"Catalonia","city":"Badalona","lat":41.4473,"lon":2.2521,"asn":12479,"org":"Orange Espagne SA"},"source_domain":"187.204.141.213.dynamic.jazztel.es","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":383}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-01","count":47},{"date":"2026-08-02","count":11},{"date":"2026-08-03","count":99},{"date":"2026-08-04","count":1},{"date":"2026-08-12","count":50},{"date":"2026-08-16","count":86},{"date":"2026-08-17","count":89}],"recent_events":[{"timestamp":"2026-08-17T01:41:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-M3IeCe6xpxDl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d4d334965436536787078446c","method":"","user_agent":"","ja3":"","session":"a393ecde-fb5f-4b73-be68-0f9ebe383cef","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"045dfdaba106a2fc","strings":["BitTorrent protocol","<-qB5230-M3IeCe6xpxDl"]}},{"timestamp":"2026-08-17T01:40:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\u0006H���6�N��-�m6\u001bX��b]\u0018��Fylʐˆ{5\r�\u00047�M:\u001f�4o�j&����O�}ͼ����\u0011/��f\u0019T�\u0005\u001a�Aw6�\u0017�e>�\u0016�������w�뉕m��:�(\u0005ԏ��\u001eAF��n���r%^#\rk|\u001a���r�Z�(\u0000���a/\u0002O;`'�B�\u0016�\n�<+��;B�����G�\u0018MSʜ�\u000f�\r+֪2�0�����2NS�\u0010ڨ\u000f\"mD�vq���Z@�T�EA�\u0000��\u001dz\u000f˯�?�2g-��\rD���eP�\\\u001b�3\bF�C�\u001bgK�\r9���;���\u000fwڧzܐp\u0006�~�JI���-�~G}\u00158��7�\u001a������j�'����-��\u0014�\u0016i\u0006U�a'�\u001f�X�Rl�g�\u0014�\f�ms�y���b\u00039�\u001e\u0001\u000f]\u001fr=�y^�\f�F��P2���\u0005\u0010`4�ՏڅMHK\u0012��\u0000+F6��E��\u0018\u0005Z�z���)�!���kXl�̆","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b6954256-a532-4c9c-af79-70f2ccf9b5d1","seq":1,"duration_ms":100,"bytes_in":400,"bytes_out":15,"enriched":{"digest":"5222e516abd21439","strings":["r%^#","O;`'"]}},{"timestamp":"2026-08-17T01:39:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-g5oe_.V14!ik","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d67356f655f2e56313421696b","method":"","user_agent":"","ja3":"","session":"e58ea1c7-872f-4098-8a1d-b43d47879a19","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"204a858b6ec3fa90","strings":["BitTorrent protocol","<-qB5230-g5oe_.V14!ik"]}},{"timestamp":"2026-08-17T01:37:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005�x��\u000fs�[F�Vr�\u000b�\u0003ܜ��n��7�\u000b���H��X�R��Tx��\u0004�|M\u0015p�A=_��8\t+��ו���n����:O���k�?Z�ek�%,-�(k��=����\u001f\u0006\u001d�GhCC'�\u0011b4��s>�HDm\u0001���P��F|��:�\u0001ҏ��\"�*X�!\u0000Yh�\u0002�\u001d\u001f�r\u0011�Jwzx\u000f�g=�\u0003�\u0010�vD�넌��UEI\u001be/\u0003.$M=)5\t���1���\u001dXka\u001e?²@�T��\u0004������\u0015����4\u0007��\u0013v@P��p|�q����*�z\u001e�A��\u001dN\"�@���f�\u0006�׶cB\u0010,���?j�B]�E_'\u0001M���\u001aK;�\r҂i)Jۿ>�'�\b0���z\u0011�6��ϳ\u0006�g�\u000e�M?���B�v��/\u00124}��#������Z ���ְ�N32�&`'\f\u000b�(���\u001bv9�S�\"�O������Vf)$\"�߸_\u0010u�\u000f\u001d�MSo^z\u0014���\u0017�C\u0011?=�y�~\u0015[\u000e�Ǿ��\t|�BɷŢV\t��>\u0002}6Ѳ�\u000f��h�6K���4�+)@�~z�jzuBb�%���\u0002�\u0004m^��j`kR���\u001d� \u0017'�\u0006Ď�f�R�Q&0���\u0015�x\u0006\u0006w���>uH���q�-�\u0015��q�ɰC\\fu4_�t\u0006r\u0002A>\u0019Ħy'|����\u0012�4No�nԉ��[׽��y\u001a�⠳g�\n�\n\u0014����}�)\u0002���'d\u000e����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"60d30180-b0af-486d-860e-9198d9d3c73f","seq":1,"duration_ms":101,"bytes_in":600,"bytes_out":15,"enriched":{"digest":"5aa1aa4b4b37349b","strings":["GhCC'","Jwzx",".$M=)5","Vf)$\"","MSo^z","jzuBb","j`kR","C\\fu4_"]}},{"timestamp":"2026-08-17T01:36:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-kP.FZ0FD4klK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d6b502e465a304644346b6c4b","method":"","user_agent":"","ja3":"","session":"6ffdb8cd-d197-4cf7-8425-f1c86f494c4f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b133d9e16fe9a023","strings":["BitTorrent protocol","<-qB5230-kP.FZ0FD4klK"]}},{"timestamp":"2026-08-17T01:35:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�y~�s�\u0012Z\u0001\r���>\u0017�(��\u001f���<�[;�tB��qҩ�I=�(�z;�G*ݏ(}n\u0004\u0006�\u000f��p����\u0001 �:�Lշ\"m��\t)\b�O?z�?,|@\u001e��\n�;\tf\u000b\u001dO짮B��&\u0001&�n����\u000b$��<�\u0006���\u0019���'Y$�6��֡����G�id�\u001c�(R\u0015��jo\\6�\u0007�L1�����\u001c\u001e$��=���\u0016 \t\f","payload_hex":"fc797ed273a0125a010daca7ed3e17f128899a1ff7c5d93cd25b3bd47442a9f571d2a9fb493dfb28a17a3bb8472add8f287d6e0406a00fe7eb70a7fca6ad0120bb3aa64cd5b7226da8d2092908c14f3f7a883f2c7c401eb4a00ad33b09660b1d4feca7ae42ad9b260126d36ed9d5caec0b2493a53ccb06c0abb519b9dddd2759249036b7f0d6a19794ede047a56964ca1cd928521586e16a6f5c36c9079e4c31a889c0f4801c1e24b6bc3d8b97981620090c","method":"","user_agent":"","ja3":"","session":"e4a4e899-39d5-4135-afb3-d9cf883fe674","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":15,"enriched":{"digest":"7f2305fa6ae4a36d","strings":["jo\\6"]}},{"timestamp":"2026-08-17T01:34:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-jsS9l7PGJFJO","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d6a7353396c3750474a464a4f","method":"","user_agent":"","ja3":"","session":"96aadda1-cccd-4d72-8b99-9e8096bf9764","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"00acb9de57caff0b","strings":["BitTorrent protocol","<-qB5230-jsS9l7PGJFJO"]}},{"timestamp":"2026-08-17T01:33:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"tb\u0017\u0005?̠�\u0011�����a~�咧Þ�xϪ*�9P���o'+�\u001d>�v�G�<�\u0016+\t��9�R**��\t�o)�\u0002��B�hSl�\u0015k|�7B,=�z\u000eK\u000bG���}'A�yE\u0000Y�B�����)��\u0017U���D���*\u0002\u001b�\u001aM��q��W�#I�0�沿\u00125Z\u000e~�����-(P�\u0010^5[��Щ�OkZ��\u0006}�Cw(��g�,��\u0006�\u001c���\t�,�������Z\u0017�\n���","payload_hex":"746217053fcca09711879dc7c7e3617eede592a7c39ecc78cfaa2a8e3950c9edb16f272b831d3e8b768247a43c9a162b09d5f139c9522a2a9ea409b46f29b1028df442c068536cba156b7ce937422c3df57a0e4b0b47b0e1cd7d2741ca79450059cf42fb90f6b0f029a4fc1755a7e9de448abbc82a021b831a4decd671b7b957f02349db30cae6b2bf12355a0e7eeef3d4e3a52d2850e0105e355be6d8d0a9834f6b5a93f5067df743772880bd67972cc2c706d51ca4b1b209852ca1d8e09cd2d6ea5a17970acde997","method":"","user_agent":"","ja3":"","session":"4fde627e-f97d-4301-a7d8-3cdf2cf73f4b","seq":1,"duration_ms":100,"bytes_in":201,"bytes_out":15,"enriched":{"digest":"def70c5b304ff43b","strings":["7B,="]}},{"timestamp":"2026-08-17T01:31:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-7Lu)lVlJaKKN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d374c75296c566c4a614b4b4e","method":"","user_agent":"","ja3":"","session":"463f80ff-2deb-4f34-9b46-102b17abc6f7","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3ef25db6910f3a51","strings":["BitTorrent protocol","<-qB5230-7Lu)lVlJaKKN"]}},{"timestamp":"2026-08-17T01:30:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���CZ�g�\u0017�f�(�h\\�\u0011�O�n�)H�\u0007�\u0006C$O^��x�e\u0016���Ӓj�'�\u000e��P1Z��rì\u000b6\u001d\u0016*�M�W��/�:��3:./\u0013�ܴ#-�#���Q\u0006\u001f��f2\u0000Btbi����6.��S�'o��\u000b��\nz�\u0016�\u0019F�؎\u0019X�\u0014-�C�\b��\n�\u0005v����{��]�9�ݚMM\u0014���\\d�ӭE��HOR�ō\u0013\u001d�\u0019\f]#-Sj;��,\f��\u000e\t���|�\u001f��6�0\fڰc���ߓ[^��W_��\\�� +\u0003=�2�`!�\r\u0013T5���\f��\\��\u0010X�a�^g)��\u001c��8�\t`���41�$�h�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"38d7a768-9f2d-470a-9898-cbe142854935","seq":1,"duration_ms":100,"bytes_in":502,"bytes_out":15,"enriched":{"digest":"82a378cdd03afa56","strings":["C$O^","3:./","gXxY>","v