{"ip":"213.94.53.68","total_events":181,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["181 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 12,308 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,308 bytes sent","bytes_sent":12308,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T23:49:27","last_seen":"2026-08-18T22:12:14","events_24h":0,"events_7d":181,"geo":{"country_code":"ES","country_name":"Spain","region":"Madrid","city":"Madrid","lat":40.3908,"lon":-3.6598,"asn":15704,"org":"Xtra Telecom S.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as15704","label":"MásMóvil","category":"isp","url":"https://www.peeringdb.com/asn/15704"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":181}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":5},{"date":"2026-08-15","count":133},{"date":"2026-08-16","count":9},{"date":"2026-08-17","count":20},{"date":"2026-08-18","count":14}],"recent_events":[{"timestamp":"2026-08-18T22:12:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�����\u001b��XD0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8c0c0add51bb2e7584430","method":"","user_agent":"","ja3":"","session":"48de7333-7d6e-4d46-a28c-59ce1891aa1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"2af8785e8968f6ac","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T22:05:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|������!�V�a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8809ffb97b621cb569a61","method":"","user_agent":"","ja3":"","session":"02044648-5876-427f-8883-828a5c65e6ad","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"45f9c0d0ffd5cb3a","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T22:01:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�i\u0007��2\u00138�N�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb86907fba3321338c04ec4","method":"","user_agent":"","ja3":"","session":"dbcbf1c2-5dd8-4e33-8248-6cbc248af8c3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"5f8172445c1d0179","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:58:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�J\u0018���Y��q�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb84a18b2daf85995de7187","method":"","user_agent":"","ja3":"","session":"39de70e0-6ac2-4aa1-90ee-17f442c4962d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"86923bece96c5ee1","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:55:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��������!�)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8a48a87ba909eea21cc29","method":"","user_agent":"","ja3":"","session":"e3a452aa-04b3-4607-8793-1427a70decec","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"10b2c8a57d16a0fa","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:53:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���Z����\tKy","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8ff9a5a9fe9e999094b79","method":"","user_agent":"","ja3":"","session":"2dec4c62-45fb-4e29-a51c-03d16d678a2a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a07bb7999813a00b","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:51:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�]�vq����Y[","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb85daa767187feabf2595b","method":"","user_agent":"","ja3":"","session":"c5cecbbb-a8dd-4b43-b845-9662e5ecd850","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"a1e90a4039a7c9f2","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:48:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��!s*;s*\u0013�Q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb88021732a3b732a13f951","method":"","user_agent":"","ja3":"","session":"699d6eaa-c7cb-4d68-8cf2-eefd719e89da","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"461b25027cebd0a1","strings":["BitTorrent protocol","<-UT360W-|","!s*;s*"]}},{"timestamp":"2026-08-18T21:46:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�X�\u0019Yq�m7#�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb858f4195971f96d3723b5","method":"","user_agent":"","ja3":"","session":"07c5cf96-b034-4cba-88f9-bf7e71204524","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"abee6753e17e0ed0","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-08-18T21:45:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�\nt���#)���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb80a74eef98a2329bfc8ce","method":"","user_agent":"","ja3":"","session":"8c81618f-83df-446d-89c9-17d01354df2f","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"20dfbde4a5b7728d","strings":["BitTorrent protocol","<-UT360W-|"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:22:38.520077+00:00"}