{"ip":"191.240.225.159","total_events":108,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["108 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 22,124 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"22,124 bytes sent","bytes_sent":22124,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-02T12:59:40","last_seen":"2026-09-03T00:09:13","events_24h":0,"events_7d":0,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.225.159.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":108}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-02","count":101},{"date":"2026-09-03","count":7}],"recent_events":[{"timestamp":"2026-09-03T00:09:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3C-3pDdGO(8i","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d33432d33704464474f283869","method":"","user_agent":"","ja3":"","session":"e57254df-8c7e-4773-9ca1-8ac3075c815b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"91c5edec41261a7e","strings":["BitTorrent protocol","<-UW1605-3C-3pDdGO(8i"]}},{"timestamp":"2026-09-03T00:07:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ɞ,�>�\u0006���rD\n���\u001ao�D�or����l��?�:ct)\u000eNd��\u0000=L\u001do�\u001b�H\u0006HsQhZ��s�xZ�z�\u0005��ǥ���\u0018c���\b���K�5�%�\u000b�[�_�\f��:\t�U\u0003��b@-]�:�\u0017�`�1�t��\u0019\u000f9�ZJr���\u001c�3bf�� �n�X��و%�N��r6�[����#r^\b��RE>�����:\"�tB�eמ1ij��E\u0002$#����Cv�\u0001��\"|\r�\u0012‹���:�!>bء\u0001��\u001b\u0004NGŚJF_���w�&*0d���~�\u001d{|ٯ������wo\u0000�\u0014������D�c�2Ƣ�\"\t\u001b��0��c�u�#�/�8��~S9��E�\\\u0015b\u0005/-I��U\u001dt:�S�������\u0004\u0017E**��gJu�1\u001c�f�*��S:�C?��?\u001e�\u000e\u0006'ݒ�\u001a�;�0z\u000b#����n�억�ð�ގ2�����GH�\u001b�˶u���4\u0017�DYuT�Y�Α�i�=<L�\u0013roE~�Y\u001d��y�g\u0012v{�%��\u0016������w���X�ɗ&�Ȍ>�\u0011L�q#\u00028\b�v�Է�\u001a\u0005CL^S6��B��8�$���y=��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b96e9b01-d337-42f8-80ef-ca2a26249177","seq":1,"duration_ms":100,"bytes_in":496,"bytes_out":15,"enriched":{"digest":"1bbd9b841f2053bd","strings":[":ct)","HsQhZ","b@-]","&*0d","DYuT","roE~","CL^S6"]}},{"timestamp":"2026-09-03T00:06:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-MBDf-o_APA0M","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4d4244662d6f5f415041304d","method":"","user_agent":"","ja3":"","session":"77406e3f-3318-4e2c-998c-d6d8d6345228","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"9969d222c6c2faae","strings":["BitTorrent protocol","<-UW1605-MBDf-o_APA0M"]}},{"timestamp":"2026-09-03T00:04:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"!�&\u0011\t>�����{\u0007�Ύc���\u0011����\u0016���\b���2���6�\u0001�sO,��mm\\,�\u001a7]q���������0ּC\u0016�\t\u000e�n1�#̌>|���ظԹ�njq�����\\\u0018�l�n>\u000bm��!��T�`~��X��P6�^�;�:ɗ��;��\u0012�zy6茊��;\u000eUd�V'���}x1Xp�&�Pa�;�w\u0014��\u001b�~c�c���\f���U���\u0002\u0005(L��D]��\u0006�y\t�\u0001���p\u0017ܞ1 ��\bs�-pn1�\r�X��6���U�����\\�!UN�6ޢ\r","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5fce89e6-7d4c-4618-a531-32473d50889d","seq":1,"duration_ms":100,"bytes_in":250,"bytes_out":15,"enriched":{"digest":"a4242fd214cea13c","strings":["mm\\,","}x1Xp","-pn1"]}},{"timestamp":"2026-09-03T00:03:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-4l3R1OGj.ND5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d346c3352314f476a2e4e4435","method":"","user_agent":"","ja3":"","session":"fcf02ac2-8abe-4d43-b20a-e12b1d63d1f0","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"455dcc905bac0f7b","strings":["BitTorrent protocol","<-UW1605-4l3R1OGj.ND5"]}},{"timestamp":"2026-09-03T00:02:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ܳ\u0007�\u0007���\u0007\u0010_\u000b�[V�S��T)\u001ctR�ܛ#D�`Sz+\b���a�w$�JW:���\u0013��w#�X�\u0002�(c\u0006\\Q�\u0000n�C�Σ(�l�����L��k!ƚ�-b#\n�p�\u0007d��\"xL\u0015��/\u0001��@\t�[�?���HQhe������t\u001fڑ׆�;1���l_v��","payload_hex":"c3dcb307cc07a78c8607105f0bf15b56c953eeed54291c74529cdc9b2344fc60537a2b08ccfad861ac7724c14a573aa9c5fc1387ce7723bb58c402bc2863065c51c3006ed543a3cea328b16cbef884b9b64cbdaa6b21c69abe2d62230aa170e70764fbfa22784c15dbf62f01bb9f4009c35bcb3ff7eaa3485168658cb7bcb0bcb4741fda91d786a13b31b1bee16c5f76cee4","method":"","user_agent":"","ja3":"","session":"c2a66001-914f-41a3-93f7-a2ea2b2342d7","seq":1,"duration_ms":100,"bytes_in":146,"bytes_out":15,"enriched":{"digest":"8d5ebcb9b9ee8d4b","strings":["`Sz+","HQhe"]}},{"timestamp":"2026-09-03T00:00:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-aFuEb0y4U6(d","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d614675456230793455362864","method":"","user_agent":"","ja3":"","session":"e6830852-49c2-43a5-b79e-64749410a6c5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"cd7418062f7727c0","strings":["BitTorrent protocol","<-UW1605-aFuEb0y4U6(d"]}},{"timestamp":"2026-09-02T23:59:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Ҧ����\u0002D�t��\"ڰ�?���e*�8{�R4\u0014�+�%L�\b=�\u0017\u0003��@��Y��)_�p\n��B�Z'26�� (|�Lg&^i,����<��+\u0001���%z\t2�p�c�����B�\u0010O3Z=�ۖi���\u0013���\u0010���-!O\u0003��$<�D��!���;›\u001e�\u0007#�3=�C��.�o?7�i*æ��\u0015������a?�Z�T����\fӞR���d��|R�v!\u0000?\u000b��jo�\u001dߕ$�\u0017\u001a���\u0017V�R\u001c\u000f�9\u0002�\u000bT�xNB�3\u0004��v\u0005���\u001f\u000f�ף�\u001f%ҝ]Ť�\u0003�\u0006ь4��N\\\r�V�\\v\u0014F�y���%0q'|\r͊�z�$�=\u0013\u001bK?I@zr�)ٸԙ-�Ia*}�Gυn(q� �R\u0015%\u001eţ��\u0017��g��5","payload_hex":"d2a68e84c2e00244b674a1a522dab0fe3f87f8ce652a8f387b98523414cb2be3254cd6083d891703e2e440869659a9d5295ff5700af1ba42d05a273236a7e520287ca04c67265e692ca0bdb4fc3ce9c12b019ea6f1257a0932c270da63808ff1f1c04288104f335a3daedb9669c8eab113819bec10e091d12d214f0386d3243cb444e1c421e0ec863bc29b1e820723c3333db243bec22eb96f3f37bc692ac3a6ae9715f4f8fafdf89f613fd45ab254fadaed930cd39e52ffcbf564a7de7c52be7621003f0b88b76a6ff21ddf9524b7171afe9ccb1756f4521c0ff63902b00b54ce784e42ec3304e8877605f9f3c81f0fe7d7a38e1f25d29d5dc5a4cc039306d18c34aa814e5c0df6569b5c761446c379fde4cd253071277c0dcd8abd7aa924d13d131b4b3f49407a72df29d9b8d4992d9449612a7d9c47cf856e2871f320f45215251ec5a3a2d617c5eb67f79735","method":"","user_agent":"","ja3":"","session":"670114cf-2b6d-49c6-98ee-47a77053a5b9","seq":1,"duration_ms":100,"bytes_in":334,"bytes_out":15,"enriched":{"digest":"769d11d358969672","strings":["Z'26","Lg&^i,","O3Z=","%0q'|","K?I@zr","Ia*}"]}},{"timestamp":"2026-09-02T23:57:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-CYa6VuG0teVO","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d43596136567547307465564f","method":"","user_agent":"","ja3":"","session":"797d5a7d-b1c9-437c-b186-1241b3a0d586","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"5899450434430abe","strings":["BitTorrent protocol","<-UW1605-CYa6VuG0teVO"]}},{"timestamp":"2026-09-02T23:56:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"bqd��^����i\u001d�F�mA^�M*�\u001f29Q�\u0011��ߡ��p\u0016V>\u00146w2=Qh�\u0019\u0006{��~#��\u001f\u0017���8�-\u0005�P�\u0001����L\"[�a�=`�f�\u0012\u0017�ǚA��<\u000b-�2�?����\b�;��3O\u0013Ry�.��!%\r\u000f<�n�\",uy��\u0015����f�����9��k�TN�f\u0007��\t<���%\u0002D\u000b\t\u000f!���ő�=gZ����\b���@7/�UMr��?ο��V�N��tx|�\u0004\u0003CHRQ&\u0006\tȬ7)�>\u0005�\u0014�չ��*9��Fӹ*I����JHC��p-�\"W�����a�R�\u000b�{���\u001eڪ��]���+�^�>�/ȶV��*���\u001d�۱\u0003l��|`$˳\u001c���duA\t\u0010�\u001d/4���ym���۶R�p\u000bm�J#\fXxf�2�\u0015���q�\u001a\u000b��L\b74!","payload_hex":"627164e0a35eab978bb1691de446e96d415e8d4d2ac71f323951a61198cadfa1cbfd7016563e143677323d5168d919067bf3fb7e23ba8e1f17e0fcaa38d02d05cc50d00199b5c2c84c225bfd61923d60af66911217e8c79a41af823c0b2d8c32ae3fe8fadcc508d13b90cc334f135279b22ed1ee21250d0f3cd96e93222c7579e1c415fcd5fff26693ede095be39a7e36b9e544ed2660792f1093c89e5cc2502440b090f21f9b0bdc591943d675aada298c308c1ebf940372fed554d72e6a23fcebfe5f756bf4ee19674787c7f92040343485251260609c8ac37298f3e05e71492d5b9efa22a39c1ee46d3b92a49b8aec7e94a4843a98d702dd62257b0bde4d6eb61a352cd0b987bb7f69e1edaaa9f845defb7f92bfb5ecf3ef02fc8b656ef972ab68ccd1ddcdbb1036cfdc27c6024cbb31cb6b5856475410910e71d2f34c3e3cd796db6f58ddbb652f6700b6d9d4a230c587866ad32a715bfb59d71a71a0bf18c4c08373421","method":"","user_agent":"","ja3":"","session":"83b6a479-403a-4efc-9002-1c4e01ff54c6","seq":1,"duration_ms":100,"bytes_in":358,"bytes_out":15,"enriched":{"digest":"559425f26ff49a3b","strings":["6w2=Qh","\",uy","CHRQ&"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-22T02:48:13.541118+00:00"}