{"ip":"151.248.22.33","total_events":170,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["170 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 32,393 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"32,393 bytes sent","bytes_sent":32393,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T03:20:13","last_seen":"2026-10-05T16:51:39","events_24h":0,"events_7d":170,"geo":{"country_code":"ES","country_name":"Spain","region":"Murcia","city":"Molina de Segura","lat":38.0524,"lon":-1.2041,"asn":209835,"org":"Despliegue de Redes de Telecomunicaciones S.L."},"source_domain":"33.22.248.151.clientes.avanzafibra.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as209835","label":"Avanza Fibra","category":"isp","url":"https://www.peeringdb.com/asn/209835"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:47:29","last_seen":"2026-10-05T16:47:29","recent":[{"timestamp":"2026-10-05T16:47:29","port":39131,"src_port":29253,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000׉\u0004���\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100d7890484aba30000000000000000b3a00000","sni":"","session":"22605905-031d-476b-bfe3-0aa19c9d18b8","bytes_in":20,"source_verified":false}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":170}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":165},{"date":"2026-10-05","count":5}],"recent_events":[{"timestamp":"2026-10-05T16:51:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"YZ���[\u0003�\u0013�z�\u0019\u0006��3qp���\u0001��j�'w���f�\u0005+b���8��c�p\b�I�ueBvB�\u0005S�~\u000e�\n����͞,���\u0000+\"X�6��Ǝ�ja��m�\u0019\u0016n��!�/�t6\u0012YX���\u0010Je\u0001[\u0011OKm\r\u0003ar\u0007rҋ#�����@H�钻o)\u0014,�\u000fy�m��?�)\u001dE���װ��ńw����vn\u0017k,&.-\u001bG�P\t4��mZ;b������h/��c\u001d�ZH�\b\b}��@�V�J��5��\u000e���@\u0002R�m��:�+N�4)�P�\u000e�D�\u0018�� NڟڳQGO�����\u0005�������Y;\u0003CA2��us�q\t/$�\u0016���\t����K��I�߼=\u0007�@rC�]DV�\rx\u001dP%X% F�u�e,���R\u0017X{'Jn#\u000e�����̾\u0018�\u0017y\u001a�/t~�X\u00066\u000f�SZ����ʋ����/H[�.��\fߛ/\u001dF\u0013��\u0012��\u0000\u0002S����\u0004U!zP�p��\u0003�\u001e�\u0012ۗկj/���O��I�>��\u0017dvW���҂<*N\u001ccs�\u001b�h���=\t(�Gਕ�Cџ�\u0000�\u0016���F�\u0010ϟJ�PNF(�,\u001a��w��9��ò�q�{�=�l�D���D\u001aH?�9�$l�)\u000e�@�4Y�+�`~>\"`�/�\u0002���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"30e35a8b-00b4-4b59-994c-e358b074823c","seq":1,"duration_ms":100,"bytes_in":538,"bytes_out":13,"enriched":{"digest":"652c8fd872a9a918","strings":["ueBvB","k,&.-","mZ;b","P%X% F","X{'Jn#","U!zP","PNF("]}},{"timestamp":"2026-10-05T16:50:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-fi0EuCymaipP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d666930457543796d61697050","method":"","user_agent":"","ja3":"","session":"51a5c8bb-27cd-47d4-9e3c-7c1c4d8914d3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2db473431867f0af","strings":["BitTorrent protocol","<-UW160N-fi0EuCymaipP"]}},{"timestamp":"2026-10-05T16:49:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�w�[a�Sh��W��\u001bm��ģ�Z.[� �K\u0007t�\u0014�܍�'��m\u0001\\[QZ�Id�1��\u000f���ױ��UR2�A8B�Fps� �\u0016\ng�jT�_\t\u001fT���\u0013�\u0018 -15R_��N��\u0006W��B��/H/\u001ee��H\r\u000fZ$Iߌ�o�{,��5\u0019�+��G\u000b�\u001e\u001d\u0015`߈ƆJk߇��i\u0012��FF4\u0002��(�N���*�4Y�wp�r��\u0011��KC��A\bJ�V�A\u001a�Hf��n���J��۹Y���\u0005\u000b�\u0004��R�5�z\u0012����=co�Ĭ�$�[3@\n󻫑����r%|����!\u000f �\t�bb���s��q�\u001c�\u001f�m>i\u000e5\u0014V\u001a�ҩ�#\\\u0005-�^�=������G��5�iz���(���U�=�\u000fC�:?4�J��$Aym'��h�Fc\f#�$�~���\r�R�=��\u000b�\u0014VR�ι��f��\u0002Pn��ݞ�*G\u001e��\u0011�\r��wk�r\u0015������@�x�MY:vk�o�q��vuz\f����\u0014��\\\u001e���\u0013\u0004�\u0007_\u000fv��n\u0003K���]\f�����#��u\"���\u0013>E�\u001e\u0000K2\u001d�ZEb\"\u0015�a)���0���\u0012r��6_\u0005�%X�NNDy��ù��s}���2\u0000[\u001fS��\u000f̗�vM>v\u0013T\u0002c����#\b��+\t�mŭ���[��'Gُ���v~��\u001e'\u0016���NjT*;��\u0012�`-�����5���\u0018�+�;�\u0010Y��1Ӹ�$�M�j���$�XmHoPg","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8a7cbb70-4261-4a9a-8c5f-8b71f6d56648","seq":1,"duration_ms":100,"bytes_in":505,"bytes_out":13,"enriched":{"digest":"f57ab9b27b31f269","strings":["$Aym'","MY:vk","ZEb\"","NNDy","vM>v","NjT*;","XmHoPg"]}},{"timestamp":"2026-10-04T16:39:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-8ACigawWfAbb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d384143696761775766416262","method":"","user_agent":"","ja3":"","session":"a7413bcd-4e7c-4534-a59c-c4f7fd95e689","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b8c112c0435cd8bb","strings":["BitTorrent protocol","<-UW160N-8ACigawWfAbb"]}},{"timestamp":"2026-10-04T16:38:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t����\u001a�\u0019�{Ćs:\u0013>򎇧Q��^f\rH��a\"d��\u001bX`/}'�\u0002U�P:/}#���9��\u0019\u0013J�8��\u001d/��*B�\u0004Fm���B��(\r?���}8�~��= \u0001�/7�\u0010����ÉkO�L�h\u000b\u0011d��\b�q�ϥe�|Nn�\u0001�Q̊�L���_�Y��#Y�K%�(p�JV\u0002��kP�\\�\u0014lV�\u001b\u0002�`\u0007p\u001cuK��b?\u000b�u\u0013'Yft^\u0010�q","payload_hex":"09e9a7e5991ab119ad7bc486733a133ef28e87a75186c15e660d48dfe4612264e5c21b58602f7d27a80255e1503a2f7d2392c0963989ff19134ad338f6c31d2fe79e2a429604466d9ae3bb42bcba280d3feba2d87d38807ee1d03d2001a52f37b010e9f9f1ddc3896b4f954cb8680b1164a6d908c171cdcfa565e07c4e6ef401dd51cc8ac04c91a5f55fdf59ccc923599a4b259f2870db4a5602f8966b50bf5ce8146c56931b02b76007701c754b84f2623f0bb67513275966745e108371","method":"","user_agent":"","ja3":"","session":"9d9c85af-9cc5-4447-9fda-bdcc8db76bf1","seq":1,"duration_ms":100,"bytes_in":190,"bytes_out":13,"enriched":{"digest":"5792a386468de0e4","strings":["X`/}'","P:/}#","'Yft^"]}},{"timestamp":"2026-10-04T16:37:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-X.M(AqucilT!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d582e4d2841717563696c5421","method":"","user_agent":"","ja3":"","session":"a6c4259b-d247-438a-b86a-fa49b84eb1aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2397af009a4ef457","strings":["BitTorrent protocol","<-UW160N-X.M(AqucilT!"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-06T21:17:59.343206+00:00"}