{"ip":"191.240.225.42","observed":true,"total_events":121,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["121 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 25,404 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"25,404 bytes sent","bytes_sent":25404,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-11T13:01:29","last_seen":"2026-10-11T16:20:58","events_24h":0,"events_7d":121,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.225.42.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":5,"protocols":[{"protocol":"udp","events":5}],"ports":[{"port":39131,"events":5}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-11T13:01:24","last_seen":"2026-10-11T15:08:55","recent":[{"timestamp":"2026-10-11T15:08:55","port":39131,"src_port":15821,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:#\u0010���\u001d΍�񌒔���||\u001a_9:info_hash20:#\u0010�R��\u0002�\u001a\u001b4���\u001a�S��^e1:q9:get_peers1:t2:7�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a23109b8d931dce8d81f18c92948a81b97c7c1a5f393a696e666f5f6861736832303a23109b52e9b602be1a1b34e0b1c71acc53b9d65e65313a71393a6765745f7065657273313a74323a37f9313a76343a4c540102313a79313a7165","sni":"","session":"92c910c4-c476-4ed1-8bc1-2c93778dbd4a","bytes_in":104,"source_verified":false,"enriched":{"digest":"55fa718a16bf2365","strings":["d1:ad2:id20:#","_9:info_hash20:#","^e1:q9:get_peers1:t2:7","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-11T14:58:03","port":39131,"src_port":15821,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:#\u0010���\u001d΍�񌒔���||\u001a_9:info_hash20:#\u0010�6�\u0006�����r��)D��\u0002�e1:q9:get_peers1:t2:F\u000f1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a23109b8d931dce8d81f18c92948a81b97c7c1a5f393a696e666f5f6861736832303a23109a368806a0b185b28772f7b62944eee102b765313a71393a6765745f7065657273313a74323a460f313a76343a4c540102313a79313a7165","sni":"","session":"4f5cafdb-d2e3-4371-ba27-f0e4eeb14a3e","bytes_in":104,"source_verified":false,"enriched":{"digest":"4db93dbd6fbe8610","strings":["d1:ad2:id20:#","_9:info_hash20:#","e1:q9:get_peers1:t2:F","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-11T14:57:52","port":39131,"src_port":15821,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:#\u0010���\u001d΍�񌒔���||\u001a_9:info_hash20:#\u0010�K��\u001a/ٜ`��\fp��ʽe1:q9:get_peers1:t2:\u001d�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a23109b8d931dce8d81f18c92948a81b97c7c1a5f393a696e666f5f6861736832303a23109b4b8ab61a2fd99c60cd7fa90c70a9cacabd65313a71393a6765745f7065657273313a74323a1dc9313a76343a4c540102313a79313a7165","sni":"","session":"eb12060a-5174-4d16-b785-1f8a7cb44f14","bytes_in":104,"source_verified":false,"enriched":{"digest":"f465aa372ef09904","strings":["d1:ad2:id20:#","_9:info_hash20:#","e1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-11T13:35:37","port":39131,"src_port":15821,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:#\u0010���\u001d΍�񌒔���||\u001a_9:info_hash20:#\u0010��Z<\u0014�\u0014I\u0003GqFWي���e1:q9:get_peers1:t2:'�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a23109b8d931dce8d81f18c92948a81b97c7c1a5f393a696e666f5f6861736832303a23109ca85a3c14a714490347714657d98aa7ffb065313a71393a6765745f7065657273313a74323a27b0313a76343a4c540102313a79313a7165","sni":"","session":"cf73bd1b-d47a-4326-a686-e0708c1e405b","bytes_in":104,"source_verified":false,"enriched":{"digest":"ff870c335763f972","strings":["d1:ad2:id20:#","_9:info_hash20:#","GqFW","e1:q9:get_peers1:t2:'","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-11T13:01:24","port":39131,"src_port":15529,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000a�x�I�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"410061c878bc49d80000000000000000bbfc0000","sni":"","session":"6ef8aad8-08b3-4161-afc5-2d55429e251b","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":121}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-11","count":121}],"recent_events":[{"timestamp":"2026-10-11T16:20:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-NZ1d)Z.smqcP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4e5a3164295a2e736d716350","method":"","user_agent":"","ja3":"","session":"7363f631-aa51-4d73-abce-e1665014de70","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f74c6211d1d4f8a2","strings":["BitTorrent protocol","<-UW160N-NZ1d)Z.smqcP"],"iocs":{"domains":["z.smqcp"]}}},{"timestamp":"2026-10-11T16:19:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��}iP�D\u0013�Ȼ<�2�A'�����}��i�t%\u000fb\u0015�{<�\u0015� k��a��F{�G��\u0004\u0011��\n�\u0012�1\r����ЉO\u0019�\u000fB�>\u0019V9.�pXhV�+A�����g�\u000b���\u0000�/�Q�3.�[�G{Q�\u0003W�����6�t���\b�����\u0017�\u001d����C�\u0007\u0016�[w¨�ub�\u0005�)+\t\u0005wBa)˦�;�\u0018yP�\u0011Rd^�\u0014��<^]A>:�K�J\u001f>\u0010�\u0019��N|\u001d\u000f\u0018\ng�\"C�Dy\u0007�u��\u0001��<�fBӜ\u0005\u001e:q�\u0001�\u0001�#���B*��JI�閻#�4\n�\u0004��zNP��\u001c�v�x��;}�\f���d_k��EU��>\u0016�������E2�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f0ce0e5e-78b7-4bd8-b4f2-340613574218","seq":1,"duration_ms":100,"bytes_in":294,"bytes_out":14,"enriched":{"digest":"9b05a006718e9b7c","strings":["pXhV","wBa)","<^]A>:"]}},{"timestamp":"2026-10-11T16:17:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-bKth2uNK~NCo","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d624b746832754e4b7e4e436f","method":"","user_agent":"","ja3":"","session":"e8af466f-0b27-4993-8fd0-210ded16d4ef","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"bde050628cfdab45","strings":["BitTorrent protocol","<-UW160N-bKth2uNK~NCo"]}},{"timestamp":"2026-10-11T16:15:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"p\u0011��4)��2$\u0006\u0017\u0015�^��į`�Ĥ��A�W��A�Q:\u001e�Cc���6C���`���\u0019�;�>پ����K\u0014�Od�`&�ճl���\u001c\u001eG�1IV_\"̢q\u0017\u001e\u0011/\n��VB��Z�M3�\u001c�ַ\u00069Bw����@<��1��!1tt�l1���\\\b�D��XJ\t*f+3&�\u0013[�>� g�M�\\��`�6�����qS}��\u0005����]�\b���ėG��>��+=�\u0000��y�\u0011lWU?\n\u0000��}�(Qb:N�LJ\u0006׺�f�bmٗ�#�{\u0003ޢ\n��$7�\u0019�೹'�[��_�^Un��+&*\u0012п{�\u001f��!��\u0011ś/�M����\u0000;y�,���J��G_�&�wc0��Ք�5� ����-��@���\u0010|\u001b\"߻I�z�.Z�\u0010�\"h*͑$�\"��ho�B\u0005��^1<�iB��߀��q�\u0017\b�b�\u0014�~�����6b����\u001f�,\u0001W^��P�C͕e�!nNN^\u0000�Wy\u0017#��.o�>�D��-�bow�\u001d{�\u0011�D�\\�V�\\{ِ:����+nF\u0007G��G�E��\u000e%�PT�0h","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"88581df0-5a7e-4e40-a6ce-30caf084a90d","seq":1,"duration_ms":100,"bytes_in":470,"bytes_out":14,"enriched":{"digest":"1699a577876bd546","strings":["1IV_\"","!1tt","*f+3&","lWU?","(Qb:N","!nNN^"]}},{"timestamp":"2026-10-11T16:13:12","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Fk1Kz2Raacjm","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d466b314b7a32526161636a6d","method":"","user_agent":"","ja3":"","session":"422a60e9-9cf4-4205-8dbe-acc010470286","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8f26e57a2e45f955","strings":["BitTorrent protocol","<-UW160N-Fk1Kz2Raacjm"]}},{"timestamp":"2026-10-11T16:11:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"u\u0015\u0013�b\u000f\t�0�\u0006��}���{��@\u0012�S٦�q�K�\"��\u0004f}�k�V�{\u001a�\u001f�U�T8eI��\b\u001db\n��9\u0018�2�f��NE\n,�֨\u0013g\u000b8\u0015W\u0002ܡ�s�0�\\\u000fY='��v��\bߘ\u0000\u001e���Z�\b}*8\u000e�A,XoJ_\u0011S\u001f�L�C����,\u0016\u0006�O\u0001èj(�V��1�~�\t\u0001���T��\u0010���Sx�:��\u00155R\u000f-��d�k˯In�s\u0010���\u0014(\u0014\u0001���.'����@�K�\u001fĠ\u0005���\u0018j\u0014¡��\u001f[1���Z�o�m�Dw�^\u000eyY\u0010\u0018,u�-\u0016\u0017\b�B\u0006w�\u0014ZJN�r�Fl�i���\u0015r-8g*\u0000���د\u001ah�\t��V���\u001b��l��D��T��\u001d��:Z�~$u�K�Ύ�9*\u0011k �u��\u0011��d��\u000b+r�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"432adac7-237c-4f53-8f15-b3cd5649e454","seq":1,"duration_ms":101,"bytes_in":337,"bytes_out":14,"enriched":{"digest":"bb74b160e431a92c","strings":["T8eI","A,XoJ_","r-8g*"]}},{"timestamp":"2026-10-11T16:09:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-sDejzper0A9l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7344656a7a7065723041396c","method":"","user_agent":"","ja3":"","session":"60bf1bef-0bb3-42fa-b290-c4c7634f2ca6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"d43764aae9d82105","strings":["BitTorrent protocol","<-UW160N-sDejzper0A9l"]}},{"timestamp":"2026-10-11T16:08:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001bn4�V��G�\u0010��kT��'¥��O�u ��\u001e!�`����yw��\u0017���Z�ߍΡZ�~�\u0000��Ɛ�\u0010em�\u0001a�)L3wu�jX��?;?R��s��2���߅L.��kS\u000eaq灎�]\u0000�E@�7�\"ZU��\u0005FN��q�#����-�\"�|m���B��\n�j�S�,\tr\u0017�A�C#<Q}-]�\t\u0006-h�1P\u0012���/Y�e�����9��]�x��qڸy��P�س�Q�o�v�\u0004GM�I���ᐏD��\u0007�\bs%[r\fs��\u0014\u0006�%+\f�","payload_hex":"da1b6e34c956faf5478d10f8e36b54f78427c2a59bbd4fa17520cfc21e21d960b0e3cfc77977bd9e1792e0895ab2df8dcea15acd7ef40098c0c690df10656dd6016183294c337775a26a58f3d63f3b3f529df873ae9932aae9a0df854c2e85e56b530e6171e7818efe5d008845409a37bb225a5592ec05464eaeaa71a623cdf4bfcd2ddc22d97c6df0b7eeb88f8b42f1cf0afc6aca53d82c097217eb419043233c517d2d5db409062d689d31507f1285b4c22f59a465899ec2e6f039be965df37890af71dab879dee450c6d8b3d751a66fd076dc04474dc349fa9fb5e1908f449bcd07a50873255b720c73d0df1406c8252b0cbc","method":"","user_agent":"","ja3":"","session":"b132a969-117f-42f4-aa65-6d777f01b15e","seq":1,"duration_ms":100,"bytes_in":244,"bytes_out":14,"enriched":{"digest":"16a2b25417a8c2e6","strings":[")L3wu","?;?R","C#<Q}-]","s%[r"]}},{"timestamp":"2026-10-11T16:06:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-A!lEXEiB-hfn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d41216c45584569422d68666e","method":"","user_agent":"","ja3":"","session":"ef3309d1-7ff3-456c-956d-f9c0d1644356","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"51da429714f60438","strings":["BitTorrent protocol","<-UW160N-A!lEXEiB-hfn"]}},{"timestamp":"2026-10-11T16:05:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0011]\u0006^{���X����?��T���\u001d���\r�S|���\u0011\u0010�����_a��:|>7\u00129�R*[��ޢ����\u0005�� \bՒ\u0001\u001cW\u0003���yמV�l�œh��B���4:���\u000bʑk�\u000e�-�[\u001bщ������I�of��{La?���\u0001\t�qW�_��sB��T��\u0019��\u001dF�Q<\u0012\u0016��\u000e a2�8`����\u0003\u00122ޟ��D\u0014�ѯ","payload_hex":"9785115d065e7b81fed45889f686d43f828c54a2c09a1dfee9e40dc2537cf4e2891110def7f0b9dd5f6189b73a7c3e3712398b522a5bb5cadea2c1f9dfc505fefb2008d592011c5703c0a4f679d79e56a46cb2c29c68d1ef42e1becb343a8199e60bca916bb90eee2dec5b1bd189e8fa828587cc49b26f6694de7b4c613f94f8960109a97157d05fa8e273429feb54fdd119b1d61d467f9b513c1216c8f00e206132d93860bd99cec3031232de9f81e44414c1d1af","method":"","user_agent":"","ja3":"","session":"378381dd-4075-4426-9364-6a83c24b7cc8","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":14,"enriched":{"digest":"aaf1676253c4e82b","strings":[":|>7","{La?"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T07:09:06.006691+00:00"}