{"ip":"2.137.115.251","total_events":127,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["127 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 25,721 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"25,721 bytes sent","bytes_sent":25721,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-03T10:43:39","last_seen":"2026-10-03T13:35:38","events_24h":0,"events_7d":127,"geo":{"country_code":"ES","country_name":"Spain","region":"Canary Islands","city":"Santa Cruz de Tenerife","lat":28.4719,"lon":-16.2541,"asn":3352,"org":"Telefonica De Espana S.a.u."},"source_domain":"251.red-2-137-115.dynamicip.rima-tde.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as3352","label":"Telefonica de España","category":"isp","url":"https://www.peeringdb.com/asn/3352"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":127}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-03","count":127}],"recent_events":[{"timestamp":"2026-10-03T13:35:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\r�F�p�B�w�*���\u0019���Y�\\^\u001d\u0011]�\u0007�%z�.�d^�P\u0007�`�,\u0002vM3ܻn��f\u000b�*��\u00020�����ߙ1U��5s��{\u0018\u0011\u0012��a�\u0003�d����'\u0016�\u0014#�y:�\u0000�I\fޱ��\u000b@��=�\\\u000e�O�帝a\u0010Bٹ����e�x\tĐ���\u0010�8����!Ҧ�߸����)�\u0011��J�NK��V�\u0018�\u0011���!@\u0010�]ʡ�\u0019Sk�[\u0011\u001c��\u0002���L(�x����\u0002���5��nQ��\u0005B�7\u0001c\"*b���q�\u0017�\u0016��bc�D��{\u0013\u0013�ɡoq\u000e��8\u0000DpKX\u001f V�\t�\u000f�\u0014Z��ů�\u001b�q�2����E\u0004�����~���|B\u0018�O���,q�Fg����zg�S�\u0017\u0010�G�\u0014��'\u0016�C�\u0015��KP\u0002�\u001c�##7�����\u001e�1:�\u000e","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8d8b719d-b48d-4603-9b9c-2cbe4b5c85d3","seq":1,"duration_ms":100,"bytes_in":353,"bytes_out":13,"enriched":{"digest":"cf21d96665934257","strings":["DpKX","8DpKX"]}},{"timestamp":"2026-10-03T13:34:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-QVA)v9)bAuaz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d51564129763929624175617a","method":"","user_agent":"","ja3":"","session":"bf646fee-a342-43e1-b3aa-07e3b9b16001","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d25cb610af1b614f","strings":["BitTorrent protocol","<-BW160M-QVA)v9)bAuaz"]}},{"timestamp":"2026-10-03T13:32:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�*��[����@�\u0011\t�?�,Q]�Y�z\u0012\u0000J�\u0018�[��5\u0000�\u0006\u001b��p'Z��B�N���$:Π��\u001a���k�S��h3���1\"��=�h\u0012�X��$x^h\u0015�h�\u0005p�\u0005]�'�5���\u000f��\u001fZR2�r\u0018]L`�&myvx��U���dM\u0015q��\n�<5��ؚw���\u0003��js�oR#��d�\u001b;*��C\u0003T��&�غ��\r�\u0016fV\\�\u000b�S\u0007\u0010\r���\u0002�:u%�v���\u0005�c���GKvJ?+]^��\u001b�A&C�|�MT0�Y��\u0013X��~�w\"�\\č\u000bzѝ��W�[1f\"��[Y�3��ù��&�>%R���1��m�1���Lmp�n�o_\u000b��}INBЍ���^���OO;o��T�?v:�\n:�T���\u001d��O�^-��\u0002�U��@�o��\u0016\u000bcI��@\u0002�6cz$�֓֓��\u0010\u0000�,O�[(\u0001�\u001b�lrg*4�E��V6\u0004��\u0010c�@&��ҙkMF\"!�K\u001a�<9\u001ds2\u0004��\u000e���(���\u0005��8�(W��۽\u0007��#��\u0019\u0015Ԭ6ISIi*T�","payload_hex":"a12ad8e05babfbf9c4409c1109af3fbe2c515dc159db7a12004ad018a75bfab53500ac061bdccf70275ad4c442c14e9baa99243acea0b9861af0c9ef6bb253ea9d6833d4e68f312281b33ddc6812f458a8e924785e68158268960570d9055d9e27e735fbc7d20f9a9e1f5a5232da72185d4c60ee266d797678e69355e2e5ea644d1571a4af0aa03c35e6b3d89a77f6e2d603aad86a73956f522392e064f71b3b2ae2bb430354c0c12688d8bae9d10da61666565cc00bda5307100dad94b602ff3a75258176fef8e405b263a2b6ac474b764a3f2b5d5e87c71b93412643b17cc84d5430d459e1fa1358e58b7eb57722cf5cc48d0b7ad19dbbfb57815b316622e18f5b59f733e3dec3b9bea07f26ee3e2552dcf1833195ed6d9631b7dcd44c6d70b56e946f5f0baad57d494e42d08d93a6f95ed9f0d74f4f3b6ff4ed54d53f763ac70a3afc54b9fce31db4964fcc5e2d8e8f028a55e9fe40d26f97d2167f0b6349c5c940029036637a24ecd693d69397f81000b62c4faf5b28019a1b826c72672a34a945f0e55636048fa010639140268199d2996b4d462221c24b1aaf3c391d73320483f60e8ca8bb2894defc05899238e42857dfd9dbbd079cbe23ecde1915d4ac36495349692a54e2","method":"","user_agent":"","ja3":"","session":"e1d3a75d-acc8-4741-be07-baf6104b261a","seq":1,"duration_ms":100,"bytes_in":457,"bytes_out":13,"enriched":{"digest":"20855ff28e0cef8c","strings":["$x^h","&myvx","GKvJ?+]^","[1f\"","}INB","OO;o","6cz$","lrg*4","kMF\"!","6ISIi*T"]}},{"timestamp":"2026-10-03T13:31:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-5MF~3~faZxIc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d354d467e337e66615a784963","method":"","user_agent":"","ja3":"","session":"0a186648-b30f-4adf-89ef-a5b6ee56fbb9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"f5400baf3853a185","strings":["BitTorrent protocol","<-BW160M-5MF~3~faZxIc"]}},{"timestamp":"2026-10-03T13:30:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Q\u0002�Q�@\u0001�M�\u001f5�D\u0017l\u0002U\u0013��2e\r�(�t\u001a��Pˊ3$5�OAw�q��Z�\u0016�^�\u0012�\t���\u0010\u0002�?R�(>\u00182�c?:�:�M��p��\\'�\u0013��@\b���s�|����#8���\u0007���Й���k��-�[x��o4�;\u0014f�����9?�ђg\b�@\u0015�'>A+�Z=��\u0016��\"lk\u0007[���G��x\u0005c]�pQ-QYD�����/�'C%\t \u0011\u0007�%�3��<ǐ\u0013�_����\u0019\u0006%���h\u0010�y�AŒ2Yxd\u000b�o3a���.�k\n��S\u0000��j\u0015|4Q_Y�ao�\u0000kO+p\u0014�ǭ���ֲ\t�4c}P��u�d!5H\b�w3���%\u0002C��)D$�%��","payload_hex":"7b1df6b70158e63879ea78db06cf8b20992c2cc050645def8bbaabeddf139f7a240530933ad37583b7ff8e35bc520b741a81bed1ee6e05933a399b364947e8a1e914177532d9e53ffaabd388b7e16b582d04bfecdca23c39eb38561b105b4910492761b9d779bd78aad6b5b8c961d0bac69cbdb4b811ca1c1e318bcdb70948029d25e8f8a41b3b29ecff5dfba4bbbe5ee37ce23c2ec333925c1ef36b3347804a9433c6b03cf2b475228e70fb14286ee8e89296f701b701d64fb751766f4827d25117f0003699500865d870bf3e91bcec233880a3ef07ece09ed099f9c7c16be5822db35b78b8dc6f34ce3b1466c2ebede499393fc5d19267088f4015cf273e412bc25a3da3a016cfc0226c6b075b88ebcd47b5e67805635de570512d51594494f7a8e9f32fdd27432509201107a0258b33c6c53cc79013985fe584e9cd190625a1f5c66810c179dd41c592325978640bf76f3361ebefdd2e936b0aadeb530099c06a157c34515f59ad616fae006b4f2b7014dfc7adf5e4e3d6b209b534637d50a582759e6421354808b67733f9a4ee250243c1802944249a25967ff6","method":"","user_agent":"","ja3":"","session":"6e71f9a3-75e2-4d7f-98a5-b527f38c6beb","seq":1,"duration_ms":100,"bytes_in":412,"bytes_out":13,"enriched":{"digest":"51f6eb6f4c566393","strings":["QvoH'","'>A+","pQ-QYD","2Yxd","|4Q_Y","kO+p","4c}P","d!5H"]}},{"timestamp":"2026-10-03T13:26:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-8F(hWScnL6k-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d384628685753636e4c366b2d","method":"","user_agent":"","ja3":"","session":"6c1eb750-0948-4667-9e43-cccef0091e9e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"7ab4e572534040c9","strings":["BitTorrent protocol","<-BW160M-8F(hWScnL6k-"]}},{"timestamp":"2026-10-03T13:24:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"xž������x��\u001c\u0005�K�`�Vg��Ec���\u0005#]A\u0016�����?J���w�n����B�E1�Q�癹�m�\u00006�\u001d�B\u0017�\u0015\u0013�\u000b�\u001e??�\u0010vm��8�F��W�Me�\u0013��\u000f\u0019��.\"\"�����\u0017�\u000b�%�\\�&��\u0010���kUsQ�)�cܸ���,���$BfI�0ո.�F�{\u0016%�\"�\u0001�\u0002�BX�=�T��.y\u0017\\\"�\u0018��Rֿ�m�̬�@��u��s�\u000bk\u0004+sBf7E\u0019�SL�X��6�޵W���ג\u0015N�d�֕a�,%��K\u0014V_F\u0007\u0000)�Q)���\u0017\u000frRhOG��W�./m�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7f32d50a-7d03-4c19-a455-0f92a09eb39d","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":13,"enriched":{"digest":"599416a47ca8c076","strings":["kUsQ","$BfI","+sBf7E","rRhOG"]}},{"timestamp":"2026-10-03T13:23:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW160M-IoC8wPTDhjq3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d42573136304d2d496f433877505444686a7133","method":"","user_agent":"","ja3":"","session":"4bfecb08-7012-466b-be66-b701daaa5889","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"661574351d0d484d","strings":["BitTorrent protocol","<-BW160M-IoC8wPTDhjq3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:50:02.352093+00:00"}