{"ip":"85.86.57.140","total_events":78,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["78 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 16,969 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"16,969 bytes sent","bytes_sent":16969,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-02T13:10:36","last_seen":"2026-10-02T14:55:34","events_24h":0,"events_7d":78,"geo":{"country_code":"ES","country_name":"Spain","region":"Castille-La Mancha","city":"Illescas","lat":40.1207,"lon":-3.8407,"asn":15704,"org":"Xtra Telecom S.A."},"source_domain":"140.85-86-57.dynamic.clientes.euskaltel.es","known_scanners":[],"scanner_tag":{"key":"peeringdb:as15704","label":"MásMóvil","category":"isp","url":"https://www.peeringdb.com/asn/15704"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":78}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-02","count":78}],"recent_events":[{"timestamp":"2026-10-02T14:55:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-yuyJ7YyIWTWd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7975794a3759794957545764","method":"","user_agent":"","ja3":"","session":"1c5ab85d-704d-4ad9-bd17-5d09f139137d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"b3111af8fbc63539","strings":["BitTorrent protocol","<-UW160N-yuyJ7YyIWTWd"]}},{"timestamp":"2026-10-02T14:54:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\b���f\u001cӳ)��D�����`,\u001eڎ������\u0000�\u001a\u0004݊(yj5�y���MQ�_�r��;r\u0001\nzp��m#\u001e��G�c=�[/��;��3���p�\u001d�%o�\u0005Z�ږ(�6\t%����/gng����.�lH\u001a��\u0001��1\u0014��\u0019F���\u0003�j\u0016x\u0006\u0015\u0017��\u001epM}m\u001f�+�\u0001>�j�#���q�b���n7Ӫ��\u0019�\n\u0001\u0000����:�\u0014\u001f&�tsNv�(\u0002=���0?��97��4�ǜ��\u001d��\u001e�������\u000b~�\u000f��A�WU�\u0010�\r6t3�*�~e��\u0011�-�\r�*k�Q\u001e\u0018z�M����\u0006G�$�����\u0004\u00030�J$:V��}���T&IE��$�4��H_�\"\"bζj�`G�a�#�.�\u001eX�r]\u0014\n��%(?�V\u0004~�E�O�i�\u000b~'1\u0019�8&�\u001bKo�N��\u001b��T\u0010�\u0002e`A�\u0019y�p�D�\u0003�Pu\u0005\u0019v���\u000b�#%�\u0010\u000b�\u0007�κ\n���\u0018�Av\u0005CY�\u0007�lX\u001d�O\u001fI'�vM`�g�S�","payload_hex":"b60899ccee661cd3b329e6e14487a3a8ffa3602c1eda8ea2f6b5eabbe600ff1a04dd8a28796a358f79f8a3d44d51b85fd172e5b63b72010a7a70f0926d231e8d9447d0633dab5b2f84e53bcecf33f997fe70ab1dc7256fee055a96da9628f8360925d0d3c1c42f676e6795d7eaf52eec6c481aa8d60189b83114bc911946ef9dc903816a1678061517eada1e704d7d6d1ff52bb8013eb76a8623f9d3de719962bbd4ec6e37d3aaccc219fb0a0100f6c18e963ad5141f268374734e76eb28023defed8c303f9cf53937edf034edc79cace61da1ef1e93fabf8d9ebb880b7ec00fd7f2418d5755c510850d367433fd2a9f7e6580b911dd2dbd0dc52a6be6511e187a8c4dfafed7d10647c32483c1b09af0040330d34a243a5695d27d83e1a554264945d8ce24c934adec485f85222262ceb66aec60478a619f23db2e851e58f2725d140a959325283faa56047eeb45b24fec69fa0b7e273119ef3826c81b4b6f9f4eb7ff1b82895410c102656041f21979a8708e44d503a7507505197697a2b60bd7232596100bd907e5ceba0ab4cbc918d94176054359e607c56c581dc44f1f4927bd764d609867a053d6","method":"","user_agent":"","ja3":"","session":"7c7f9b0e-a04b-4aa6-a974-8eb7da35934a","seq":1,"duration_ms":100,"bytes_in":426,"bytes_out":12,"enriched":{"digest":"9a2ba9cf790a386c","strings":["(yj5","/gng","pM}m","tsNv","J$:V","T&IE"]}},{"timestamp":"2026-10-02T14:52:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-qWtx-NhoGSZP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d715774782d4e686f47535a50","method":"","user_agent":"","ja3":"","session":"d800e65d-7372-47d0-a7af-fe3699264bf3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"7db5ac4635014546","strings":["BitTorrent protocol","<-UW160N-qWtx-NhoGSZP"]}},{"timestamp":"2026-10-02T14:51:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�/�Q�`�\u0012���av}���Q�E\u0017ź��(�$3>�@�^v�1m�A����d\u0010i3���Zc�c\u0002��K�\u0006!Y&F���:��\u0011\n�o�gۇp�L��]�O��[�Ԋ>��v\u001egg�~�.��Žŧ�Qq\f\u0006v�'Kp*��\\��l붫J�\u001b�tUhB����e\rY�����\u001eΜ52�RMX�>����\u00168G\u0019a�g\u001e\u0018�Ed���D�{KCC��/\u0014f=\n[��9�;��E�\u001b�$����|l�/�3�z�^x+Q%a�ؽ#1��b�-�����-�\b��\u001b3�J�9!R~���\u0015��\u00034\u0003j�E�ʍ�h:sa���&��v툪�\b\u0016����\u00182\u0016�\\�0�8YO��\u0013V�,���\u0005g B�r\u0019\u0006&HXJ�?\u0010��)\u0011�;\u001d�K\"\u0002�\b�4^�����Ј^\u001d�AE\u001c�o�2T߭�Ѵ:��M\u0013ِ\u0011zwRC\u0014)�Fh\u000f�:̹\nB\u0019=�W\u0017չ��<","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2cdd257a-04a1-4053-853f-ce9bbff36ea2","seq":1,"duration_ms":100,"bytes_in":399,"bytes_out":12,"enriched":{"digest":"ba64c6484f2ea808","strings":["!Y&F","'Kp*","tUhB","{KCC","^x+Q%a","9!R~","h:sa","&HXJ","zwRC"]}},{"timestamp":"2026-10-02T14:50:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-zas~VLSFcoSz","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7a61737e564c5346636f537a","method":"","user_agent":"","ja3":"","session":"1e5ccf4a-2e75-4ead-a65a-17f72cfdf5a7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"10cb042ff9c7c800","strings":["BitTorrent protocol","<-UW160N-zas~VLSFcoSz"]}},{"timestamp":"2026-10-02T14:48:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�6IW��K�-w\u000e�K�\\�\\\u0019!��=\u0002`R\u0006��Ӏa M}�{�\u0003����:EV��|��\u0005(�����@#�6{+N��q���D�R*O�Z\u001fs��@+� �\u0012�$3n;�Y�\u0006�1H9(�=>\u0006��t�,���O�� �9_�e<\u0019sb\u0013K�_�q�C��\u000b���:�\u0013\\7f]ݻ���\n�N�6��������\u0015\u0016RIwu��\u000e���\\<�\t���&q!;/���#Z��\u0010�\u0016��~^\f�\u0003\u0012�4)W\u0014��\u001d�\u0004��k\u0007�T��]^�Kf4�","payload_hex":"f7364957e7e14be02d770eb24bad5cc95c1921dfec3d02605206aac7d3807f61204d7d947b9e03fabfa8db3a4556ebea7ca2890528f8d3cdc2e34023f3367b2b4ef0e371c4f8c644e4522a4fd35a1f73f2d8402b9d20b5128224336e3bbf59a206b831483928e53d3e06e5e974f32cc180a54fbfe0209c395fe7653c197362134bd15ffc71da43d4d30b8bf6a73a97135c37665dddbbb1f8fa0ad64e8a36d9caf6e097f4c9c7151652497f7775b19e0eff91885c3cdb09ecb8c32671213b2ffde6b6237f5af19f10c516d5cd7e5e0caa0312fb34295714d2cd1dc204e18b6b07c354aac65d5ea04b6634a0","method":"","user_agent":"","ja3":"","session":"a71c08b5-1502-4d89-a439-ea2c5ee72dac","seq":1,"duration_ms":100,"bytes_in":235,"bytes_out":12,"enriched":{"digest":"4489f6c628e019a8","strings":["a M}","6{+N","$3n;","1H9(","\\7f]","&q!;/"]}},{"timestamp":"2026-10-02T14:47:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-m--6pZh!Wu9K","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6d2d2d36705a68215775394b","method":"","user_agent":"","ja3":"","session":"a77377b9-a6df-435b-950a-c00beb90bd1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ab4cb8cb505e7f32","strings":["BitTorrent protocol","<-UW160N-m--6pZh!Wu9K"]}},{"timestamp":"2026-10-02T14:46:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���y&.�\u0018+�l\u0002I�r\u001bvt�|\r����`��^:�\u001c�X��/�=v�6G�0�\u0007�����U�0\bm��A��M�\u000e\u0012�X)w�\u001aV���AVv��,v\f&���]���fF$\u0019u�H\u000b;9��Q}J�=3�%\\?�;�sd\u0007�\u0018*�i��#@ޗ\u0013�.�uZe���I{�r/�����zٚ��ԅ��v�\u0019��9��G\b>��,��qʬ�=N���;s�1���LO�(7����E���\u0018\u0006!�C�J�^�k�,��6N��\b���K-��G�5�c�+\u000e���OV�\u0013��g\u000e��O�w\fE!�G\u0013�%\u0007�\u001aa\b�\u001d\u001e\u0003��x���\u0005M�\u0000H���O�p\u0006�\u0005D�H�O\u001eӱ)��eM��M[��F�&_�ꕿ�\n�I��M����G��T.�U�bL\u0001郚�+9��\u0012�ֱۻ�R�R\f��0�8�\u000f��aH��=�$Ӫ{���\u0014\u0016�H�$��>K|��[;�՞i\r,�7t̏s�6\n�g*ڍ��Q��\u0012/�n\u0014\u0003�\r�[�͕�\u0000�H�L6��Tk��\u0004D�\u0005\u0007�;���%�N�y����\\.�C7I\u0010mX�e%\u001f\u001d%\u0006\n\u0003�}l�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ebe7ee17-288f-434c-8a53-a88e284736fb","seq":1,"duration_ms":100,"bytes_in":491,"bytes_out":12},{"timestamp":"2026-10-02T14:44:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-GX_T_2U*vfQQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d47585f545f32552a76665151","method":"","user_agent":"","ja3":"","session":"c20c0b0e-15ad-41a7-935f-e4c07daf5477","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0b8a778984f121bc","strings":["BitTorrent protocol","<-UW160N-GX_T_2U*vfQQ"]}},{"timestamp":"2026-10-02T14:43:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Pn�=z�7U(�\u0005��vm��(`\u0017M�\u00106�9I\u0011�\u001e*��7��Lv��\u001e\b��Z\u001ad�O��_��cSe�\u0004�]\fMy��CP��\u001b�'\u0006�ߥ�����Θ�\u0012O^�\u0002�\u0012\u001c����G��Ӹ��\u0014�{ʈ^a��r���\"�ҹR�!@s�'.>f2�*G�\u0016�E����$�>_\u000f�c���\u0000$�m\u001a�,\u0018�i�^j�Ƒ\u000e�Z\u0015�9�=�\f\u001b8\u001d���R�\u0000\\","payload_hex":"506e883d7ac1375528f20599f0766dbdc62860174dad103695394911ba1e2ac4fe3784db4c76e69f1e08a5b05a1a64ee4fa8805f99e0635365c204d65d0c4d79abe44350bcde1b902706e3dfa5abfac5f983ce98af124f5eac02b2121cbaba8e9647ada8d3b8beee14e97bca885e61ddd172b0a5c02296d2b952f82140739a272e3e6632a12a479c16eb45f9b4ebde24a93e5f0f8c63c6fcca0024fa6d1ada2c18a3699e5e6af8c6910e9b5a159f39c63def0c1b381dfee3da52da005c","method":"","user_agent":"","ja3":"","session":"7cb519dc-0978-4906-8004-abb88087f331","seq":1,"duration_ms":100,"bytes_in":189,"bytes_out":12,"enriched":{"digest":"bb1cf5e012cb454f","strings":["'.>f2"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:26.684913+00:00"}