{"ip":"78.209.142.92","total_events":89,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["89 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,260 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,260 bytes sent","bytes_sent":18260,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T09:51:54","last_seen":"2026-08-14T11:46:54","events_24h":0,"events_7d":89,"geo":{"country_code":"IT","country_name":"Italy","region":"","city":"","lat":43.1479,"lon":12.1097,"asn":29447,"org":"Scaleway SAS"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as29447","label":"Iliad Italia","category":"isp","url":"https://www.peeringdb.com/asn/29447"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":89}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":89}],"recent_events":[{"timestamp":"2026-08-14T11:46:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-!pyJPDQUF2.!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2170794a5044515546322e21","method":"","user_agent":"","ja3":"","session":"6bd20ffa-960c-4603-81fa-874d81085ccb","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d25e9a604e97158f","strings":["BitTorrent protocol","<-UW1605-!pyJPDQUF2.!"]}},{"timestamp":"2026-08-14T11:45:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������\u001a���M�z\u00150&5\u0005�IGl�\f�`���1d=�U\u0002]W>(Z\u0004N��&\u00036�Ց�?��|v�\u00011��l3\u0015*`ͪ^Ǔ��\u0004u�Å`š[\u0010�<e�(�\u000b�'3l�O�,��%?4=ɨ����ۙ�p����\u0000\u001e��\u001bQ�Ψ�s�-̔l��\u0004��������\u001ds\u0011�|[��-�f�c�X�\u000bk�5A�O]$ �\u001f��-{Z\u001a`�/]�7\u0010T\u0005�J-l\u0000\u0010���N@\u001b���\u001e�3\u0005�","payload_hex":"84e0efb87fd0cd1afbfbd44dae7a1530263505bc49476cde0cee60f5e39931643da355025d573e285a044efd92260336a6d591bc3f80fd7c76db013183a16c33152a60cdaa5ec793beea0475b0c38560c29a5b10913c65f0289f0bac27336cf24fae2cfec7253f343dc9a89df6cdd0db999b708dd2d4d8001effdd1b51c4cea8aa73a62dcc946caffa049aebe8f8f4b9ddec1d7311907c5be3eb2df466ce638158f90b6bff3541b24f5d2420e11fb8df2d7b5a1a60ba2f5d8837105405fd4a2d6c00109fff824e401b9db2c31eb0330583","method":"","user_agent":"","ja3":"","session":"7c3602d1-0904-4435-8764-4060af228391","seq":1,"duration_ms":101,"bytes_in":209,"bytes_out":13,"enriched":{"digest":"d5940d47bd8c04f5","strings":["]W>(Z","%?4="]}},{"timestamp":"2026-08-14T11:44:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-jF695qGpctdG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6a4636393571477063746447","method":"","user_agent":"","ja3":"","session":"666af76c-81a0-4a6b-91cd-960a2b6fc591","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"a6da3e7943647c60","strings":["BitTorrent protocol","<-UW1605-jF695qGpctdG"]}},{"timestamp":"2026-08-14T11:43:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��v��TWI\b\u0003����N#�,�;����Zh��̪����fM:�+��J^�\u0007�v\u0011�cg�%d�`�pZ�ϡ�ō�\\x�Xc�Q&�r���nS\u0001A���v�O�\u0014[!(vZ>-b\u0015��˺�\u0015ϭO-��X�h�69�ڑz-����\u0018�&i\u0017����hr���ɯl\u0004�j��Yu\u000f��~�~'|Q�Y�Rv~\u001e>��,D�\n*;Y-��ϴR�H�1?'��QW���n�����;�Z�j��� ~O6��<��B���\u000b\u0016t\b �q\u0018��FV�w�0lL\u0017\u00111�\b\u0003\b��ľ�v�\u0014��-�T��\u0010_q@\\}J���Et�\u00071�\u0016�\u0017\u0012�\u0017@��O\u0016�Š\u001b�>����\u0016gPiu�","payload_hex":"f08f76e6e45457490803f29ae39d4e23f12ca43bb3f2e5e45a68e0c9ccaabfabbcd9664d3ada2bad8f4a5ea5079676119763678d25648e60fc705ab2cfa1dfc58d835c78ce5863a85126b672f0abc46e5301418ed9eb76ee4fa7145b2128765a3e2d6215ebf0cbbaaa15cfad4f2df5f7588068e23639eeda917a2deaf486e01895266917b2b786d6687295d8f1c9af6c04cb6aa6cb59750ffb9d7ef97e277c5193599c52767e1e3eaf9f2c44ac0a2a3b592db1e5cfb452d24898313f278e8e51579397f56ec5feb6fa993bbc5ab06ae7e4f2207e4f36b7df3ca08742b887800b16740820e07118a59b46568977fd306c4c171131a908030881d1c4beb076b314d97fc52d9c54e89f105f71405c7d4aaca58f4574f407318116f017129a1740d3df4f1680c28a1bfb3eb5a2d2cd1667506975b4","method":"","user_agent":"","ja3":"","session":"b5fb355b-8283-4d2a-bedd-51dd4aff70ca","seq":1,"duration_ms":100,"bytes_in":307,"bytes_out":13,"enriched":{"digest":"2d21323044f80e04","strings":["[!(vZ>-b","~'|Q","*;Y-","_q@\\}J","gPiu"]}},{"timestamp":"2026-08-14T11:41:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-pZriXsMH7fi8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d705a726958734d4837666938","method":"","user_agent":"","ja3":"","session":"42f15d32-366f-44b9-b6b8-dd71908a4675","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bd995a6e1d84d355","strings":["BitTorrent protocol","<-UW1605-pZriXsMH7fi8"]}},{"timestamp":"2026-08-14T11:40:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"aZP\u00121���|\u000f�\u0018�\u001cR9�mN.\u0017\u001bRD�\u0004�YVi�(�\u0012��q=��f ��1��d�ҁ�`_�y2�\u0014\u0012��'k%\u0012l�����\u0010�\u000e\f_E#|�\u0001��\u0012v}䌎,Y�����v��hꞑK \u0014qN\u001d����l��8%Q/���vw����c�\u0018%\u0017`tH\r/��P~10ǻ}\rV$�\u001fKG�b\u001a��\u001dƣF��+����\u0001)�E\u0004\u0015(�M+�!\u0001��L^�s'��\n��ͯЯGT{�$�\r\u001a���7\u0018S(&\u000fp�k��)\u001e�\u001d~��>؀�kB�\u00169\"�r#\u0001�*��B\u0012\u001e��4I�hW\u0001�i����mգ\n\u0000d�\u0001��E��\u0011\u000b\\~","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7dda00ba-f14a-479f-a34c-e1b94abfff74","seq":1,"duration_ms":100,"bytes_in":283,"bytes_out":13,"enriched":{"digest":"d545baa743def973","strings":["_E#|","8%Q/","P~10"]}},{"timestamp":"2026-08-14T11:38:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-D_eEVwHbowPs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d445f6545567748626f775073","method":"","user_agent":"","ja3":"","session":"8c21a1b9-b5cb-437d-8b9d-161a26e4b923","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e129248e28c803ef","strings":["BitTorrent protocol","<-UW1605-D_eEVwHbowPs"]}},{"timestamp":"2026-08-14T11:37:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"#\u001c�5�\u001c7r1�\u0014�A�u���p�̅#q}@/��\n\u0019,'7I�o7{HZ\u0011!�$z�;���\u001f�e�-/�l�h�l3Ȼ�!Lg8Nq��n�\u001d��k#\u0013ψ��M�+�\u00132R1薰�Ʃ��\u0002��M�a{�\u0010I��97+�\r���^�","payload_hex":"231ceb35d01c377231d314fe41a175a6948f70e1cc8523717d402ff2820a192c273749846f377b485a1121a9247af23bfaa8ed1f8c65a52d2f9d6ce8688b6c33c8bba0214c67384e71c4c06e961dbbaf6b2313cf88c6ff4dc22bad13325231e896b0bac6a9848802f2a64d86617ba81049ffa739372bfd0de4c9e95edd","method":"","user_agent":"","ja3":"","session":"b1e96499-a2d2-448b-a5e9-e141520e7d4c","seq":1,"duration_ms":100,"bytes_in":125,"bytes_out":13,"enriched":{"digest":"1f95b5ad1044c9ec","strings":["#q}@/",",'7I","o7{HZ","!Lg8Nq"]}},{"timestamp":"2026-08-14T11:36:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-2sk1)v2b_CqJ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d32736b31297632625f43714a","method":"","user_agent":"","ja3":"","session":"895b61ca-2a0e-432d-91f6-818c0d4f952a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"23d886e3a69fb11a","strings":["BitTorrent protocol","<-UW1605-2sk1)v2b_CqJ"]}},{"timestamp":"2026-08-14T11:34:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z��\u00067�?�r��N\u001b�fO\\�d�\\�g<��`����2�)\u000e\u0011�@e#��\f�/���U�֚\u0001?�\u0010��\u0015O�q�2�u�\u001c�\u0013쉆j1\u0019��\u0015b�[�Y�L�y��w��!�p&���n?{6��G��\u0012[\"�K\u001c��b�Di�WDQ��4:��=���vC&vBV���g�\u0004\u000b�\u0000����\u0002\u0012��\u001b�>'\u0017^��Hm�ܸ�)}t�ZGZ\u0014\r9vxB���`�7k�\u0019I�����8\u0000\u0012\u0010��\u0018�@�\"\u000e�%�\f�\u001bq�\"���;��d�d\u0001@�` <>l\u0013@�7^�\b�b��1\u0006���6�","payload_hex":"5ac9e90637dd3f8f7297ee4e1ba3664f5cbe64875ca0673caac46087f9b8c332e5290e11e440652393e80ced2ff6eb9355ebd69a013f9a108290154fb171fb32bb75a61cd513ec89866a3119f7f71562dd5b9d59924cac7998dc7790d621ac7026a8a59d6e3f7b36a4d847be8d125b22be4b1cb6ea62b64469935744519482343af1f53da788a77643267642568e9e9067f7040b9e00a48bfe9f0212f0e11ba63e27175edfe3486d8ddcb8dc297d74d95a475a140d39767842eabbe060b4376bcb1949e0d1f1fae038001210f0b718f040b7220eb025ff0ccc1b719622eff8c03b81ac64c7640140f460203c3e6c1340e5375ea308a562c5c53106a280b236e2","method":"","user_agent":"","ja3":"","session":"c65e5f5e-5f2d-440d-a28e-655e46be0d71","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"62f571ad65d363dc","strings":["n?{6","vC&vBV","9vxB","` <>l"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:42.226434+00:00"}