{"ip":"2.137.115.98","total_events":113,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["113 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 23,341 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"23,341 bytes sent","bytes_sent":23341,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T18:41:41","last_seen":"2026-08-17T21:06:29","events_24h":0,"events_7d":113,"geo":{"country_code":"ES","country_name":"Spain","region":"Canary Islands","city":"Candelaria","lat":28.3544,"lon":-16.3691,"asn":3352,"org":"Telefonica De Espana S.a.u."},"source_domain":"98.red-2-137-115.dynamicip.rima-tde.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as3352","label":"Telefonica de España","category":"isp","url":"https://www.peeringdb.com/asn/3352"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":113}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":113}],"recent_events":[{"timestamp":"2026-08-17T21:06:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-0tZ1Y~GVyK_8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d30745a31597e4756794b5f38","method":"","user_agent":"","ja3":"","session":"39f71317-e187-44fa-8d70-9cad58d8be2e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ef7d9021ef6cb150","strings":["BitTorrent protocol","<-BW1605-0tZ1Y~GVyK_8"]}},{"timestamp":"2026-08-17T21:05:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��4t\u0007\u0018{\nw�r\u0010�F��\u0013� �#���J^���<�S\u001b�.\u001a\u0018��l\u0003\u0011�G��\u001fA���̾�Il\u0010�~��k�$Bb��t��_�\u001b�B!�b\u0007+s'7[���\f��K+�K�\u0002w�:?�0��\u0011ƌ�4h��S�]Y$\ni\b�ޟ��ƕ��*U,6����t�vB�D��\b����RQ�8����\u0019��\u0012����=MY\u0013\\\u0007�T��\u0010��J���ԛ��\"\u0000��r~.\u0016M��\u0000ѫ:!��8xD��t�w\"�:b��ߒ��Ƶ\u0003��:~\u0016\u0007N+\u0002�\\��\t{��K�`�?<��\u0001UnR$N����\n�\u0010���3H3��B\u001f�����\u0002��\u0019X�9\u00196�\u0000\u001b\u0015\u0016�o���\u0004��\u0006�}�-�^��\u0017̒dt�4\u001cp\u0007~��*'z�F��1�t�\u001f���V$ծ�\b~��˚\u0002�;(����\u0006��D8|u�`���LK4�fs\u001es\r�>�dG\u001d;B6%���x*�s\bHT�#�9����Ere8�3�\u000f���?\bk\u0016\u0017����=Q�(X�9j����t)V�3\u001f���\u0018�_�%�lW� \u0014\u0004U�̐Zҩ��6gu�K�_\tt��M�-��)�{h���[","payload_hex":"f6a0d9b1d5c19efd98c3b2e5f02a37c206ea032666f9d56687e913da7c22886a20a8b8cbb77ed4f0eef0771b2bae88b47622869a1f895f014820eddc86c2582109c4a4db6fd5f5ae7c43886da45dc613f2fec13811fb87a099b28ea339fe13abf5618149a456a82c604e20d2ef489c6776c723f21569f5443eb639ab8aa9f345726538fe33970f95b0843f086b161780afac953d51f92858d1396ab285dbf6742956f2331fd1e5b718da5fa725db6c57a22014045595cc905ad2a99af2366775c44bc35f0974cbf64da22daed029f97b68c9c0c55b","method":"","user_agent":"","ja3":"","session":"8a9ca0bf-1d73-4c10-95f4-ca1307a4f406","seq":1,"duration_ms":101,"bytes_in":213,"bytes_out":12,"enriched":{"digest":"9d596ad284dcad63","strings":["Ere8"]}},{"timestamp":"2026-08-17T21:01:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-CANgAPPggU0o","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d43414e67415050676755306f","method":"","user_agent":"","ja3":"","session":"bb85f24c-6979-436d-a082-65c4db401833","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"810ba670ccfe9571","strings":["BitTorrent protocol","<-BW1605-CANgAPPggU0o"]}},{"timestamp":"2026-08-17T20:59:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��M?Ʉ2�ݰ\u0007��\u001f\n5��'U\u001bO�\u001f�^�%�\u001a�P�v��\u001f\\�EHaWk��\u0017��>~ik\u000fZ`B�ޞ�5�@�\u0016�\"���w\u001c��\u000e�K��J�G�\u001e�{S\u000f椼��>{\t\u0015\b��b��]��<��\u0014��\u001cn���4�\u001e=������g/U��FH�l��\"5�i\u001b��\\���a�\u0016]�QE�9^�s�hnṏ\u0006�,\u000f��I��i�,\u0002���ȃ��{�PrF>��OA�b����)�u�Y�,�Ő\u0000�8�\u0000\u0014D��ah0`\f\bš�2��,u��g�\u001b�h�rV0��\u001ab\u001e�\u0002����4�z+���h���B�N��\u0007�f�3\n����\u0004u*�&�hP�\u001dJ���~��8����:�����<�am��y-�j���zIH��v�\u0007arɵ\u000bp\u000bԗ&���^w��^ʈ��6\u0004�sT�rsm~\u0016�,^3�\u00038�8�j������C(�vl'�g�EʘQ�BodwH�\u00173�\"��\u0017B�ۊ:�\u0005�=�\u0014\u0017�iZ�S��%{� 4\u0018\f��%\u0012��)��\u001bb\u001b�qh7\u001b���~ik","PrF>","ah0`","rsm~","BodwH","0=uu","[_%bxG","s2n\\"]}},{"timestamp":"2026-08-17T20:58:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605--g8FK!-xQh8u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d2d6738464b212d7851683875","method":"","user_agent":"","ja3":"","session":"9a09e887-9fff-43c9-b4e6-75af8f62ab17","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"02fca3b59c91419b","strings":["BitTorrent protocol","<-BW1605--g8FK!-xQh8u"]}},{"timestamp":"2026-08-17T20:57:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�1�\u0006g��!��G�-p���T��;X��ff��w��k�\">n\r6����p\f8mLu��G�M�\u001b\"h�.�xZo�\u000f\u001b_�#c�J�\u00067���^�\u001b�\u000e*\u0000�D[,��ad\u0016��)�wt�j\u0012&�5��a��ЄX��|��f{���+d�\u001f�2�{Ρ\u0016(�\u0013����d%\u0013Jp�\t�\u0017(�����L�3��3\u0002ӑaB��%b��\u0010���(�\ns\u00180�6p؊b>��{���4�n��s����*���9t�;��/_�W}����׺w��R/��q����ΐj�}#ےa&E\u0019���[�=����K��\u000b\u0006�l\\\rİ�Ǧ�\u000e�9(YK\u0003Z*�l�m0$��&�X-ڽk���\u0012�f\u001a�៼/c\u0016�!�i\n.`ta�\t�-\u001cI\u001d �r���]�p���Z=�\n-r���*dE\u0019\u001b+��k��%\u0004\u0012@/�[*_m��M�\f\u0017z�^��6H�k\u001c�r|s~D3FTVb�j��B7��U���_a\u0004�w'L��\\h2�I�2MmI�׈b>S����k$\u0002�,�\n\u000e^�z\\U;�_�,�<�M����7\u0016�qPz�r{\u0012I�g�$E;��>\u0010\u000bnL���y7�����M�W�\u0011=Qf=��3m=���7S�\u000e�Zb0-����N�\u0001\u0014U�����ҞD#�\u0000�@\u0016!�v","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"11a219aa-8a61-49ab-bec4-f5cc6adb7d5f","seq":1,"duration_ms":100,"bytes_in":570,"bytes_out":12,"enriched":{"digest":"35aa3c307810ae12","strings":["8mLu","w{sa","9(YK",".`ta","[*_m","r|s~D3FTVb","2MmI","z\\U;","=Qf=","Zb0-"]}},{"timestamp":"2026-08-17T20:55:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-BW1605-jMLy_YWi0l~k","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4257313630352d6a4d4c795f595769306c7e6b","method":"","user_agent":"","ja3":"","session":"1f0d0c41-8894-4107-81c5-2f919a5133d3","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"87cd0f9428f812e0","strings":["BitTorrent protocol","<-BW1605-jMLy_YWi0l~k"]}},{"timestamp":"2026-08-17T20:54:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�νO�\u0004\u001b8���^Yc{\u00134�[���\ny��\u000e���d��\u001f��f�yxi��T)���\u0016\u0018_a���O�(�\u0013�\n���0WC\u0001i�\\ޓ��-����؝Ɵz��!\u0019Ȉ���m\u0019\u0007\u001c\r.\u0016�ʪ���ﳥL9j\u0019\u001e��\u0006!��ં�P���ʜ��#US�\u0016C����L\u0015��P�\u0017\u00024-�\b�.�j�o�E�\u0007=�\u000b/>�i�8ϛ��<�/coJ\u0000v��'l�����8^�#��jX�p�\u0019����oU�̃&�kP~s��ɮt��؉@�\u0013\u001c�l�{uÍ�\u0007\u001bA��\"��\u0001��ݤo\u000bn����\u0000\u0012]��W\u0006","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"473b02d1-8327-4980-8c05-c41b27973b6a","seq":1,"duration_ms":100,"bytes_in":273,"bytes_out":12,"enriched":{"digest":"4facf1ef3d9c789b","strings":["^Yc{","/coJ","kP~s","/coJv"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T15:22:41.667594+00:00"}