{"ip":"191.240.225.84","total_events":23,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["23 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 4,353 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"4,353 bytes sent","bytes_sent":4353,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T17:22:29","last_seen":"2026-08-31T17:52:00","events_24h":23,"events_7d":23,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.225.84.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":23}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-31","count":23}],"recent_events":[{"timestamp":"2026-08-31T17:52:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-EEsHvuUvuj(H","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4545734876755576756a2848","method":"","user_agent":"","ja3":"","session":"5279b6ed-f983-4e41-8adf-51318b415997","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"8dd50e92e8e0933e","strings":["BitTorrent protocol","<-UW1605-EEsHvuUvuj(H"]}},{"timestamp":"2026-08-31T17:50:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�C�HAY��L��0����h\u0019v\t�ӵ\u0003C<��0vhH�Lv�^�>\u001d���C����\u000e��MU5\u001e[�sP#AA�\"�M�\u001b�s\u0006�#X��sq)��B�X�9�寶K�ɍtm���M<\f�\u0016��2�A+�\u0017\n��g�Сs�W6%=��\u0000�\u0004�F$z܊\u0012lk���Qg!f��0�-�\u0001O�\u0001I�+\u001b���\u0000|1\u001a���2ȷcH��]��3o��X\u0003\u000f\u001cԅ̷�+�늰\u0005|w�4}������Ϝ�)z!\nH5$r�ξ$0�\"�7\u001c�@����r�7�-��<�w�\u0014\u0006#���8\u0016�@k\u001fT�ݵ�GO|�\u0006���M�SE@�62�D���\u001es>\u001fS?\\G\u001f�3��O2\u00185/gz�9$�Eh.���$X�H�\u000bT٪�S��&�:d�_��Uy1Z�����\u0007���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2c5cedc3-db6e-48be-9e74-6f6348edff86","seq":1,"duration_ms":100,"bytes_in":351,"bytes_out":14,"enriched":{"digest":"50f7bdfb0edef59a","strings":["0vhH","sP#AA","W6%=","Qg!f","H5$r","S?\\G","5/gz","Uy1Z"]}},{"timestamp":"2026-08-31T17:49:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-_!G*DBLGEzk)","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5f21472a44424c47457a6b29","method":"","user_agent":"","ja3":"","session":"ef57a203-31bb-4b2d-85ce-aa82aa890d9a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ab0a24c81bf1bbe0","strings":["BitTorrent protocol","<-UW1605-_!G*DBLGEzk)"]}},{"timestamp":"2026-08-31T17:48:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0013�\u0001]d�W�2\u0010jc�*���$}���\u0002\u001c�)�����b��Ʈ�`�[9��c�\u0012\u001c�@�䛄�3a)c\u0016��hxi,��-�*�km\u0004�ȯq,���\u0018�\u0017/I\u001a\u0007��8F�{��\u0007�H`J���O)\n��\u0003̳�O;\u0004]sj�{��٥#q�� W�1\u0003�h�����=y��o;�\u0015r�˃[�Lmӵ�7�.\u001b�)l�ڠ�Ql&��!h5}\u0012@A��y���Π(��7�Y�i|��SXXl2[���uc-jy�\"S�\u0005��T���F��76��v����<���2�:Dڄ��C��\u001d\u0001�m�U��w�9a�G�0��o\u0010;2��j\u0001L\u0013�M<?IP�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5f917f94-dec7-480b-a395-102311d588e9","seq":1,"duration_ms":100,"bytes_in":291,"bytes_out":14,"enriched":{"digest":"343cbb50c6d04f27","strings":["3a)c","hxi,","!h5}","SXXl2[","uc-jy","M<?IP"]}},{"timestamp":"2026-08-31T17:46:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-bXsscWf80yv.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d62587373635766383079762e","method":"","user_agent":"","ja3":"","session":"9d6d6132-5ac1-4da6-b540-2fd7d6e91543","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6ce0a25d4a8c17df","strings":["BitTorrent protocol","<-UW1605-bXsscWf80yv."]}},{"timestamp":"2026-08-31T17:45:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ÿp�\u0010r�\u0015�\u0001�9Fʚ\u0014.�q�C��??��K� Wϥ\u001fV�.ЛF�M��(�����������Pߑ��E�¾W�\u0017�\\��a\f2�-ߴrN���{��_�\u001e��Z���\u001f��\u000b��ziy�K��lA*Ï��\u001c!7����]�\u001a�I�\u000b�\b\u0010�\u0007��#N��EƞU�EY�","payload_hex":"c3bf70ea10729c158101b53946ca9a142e8171b243bbb03f3faaa14bf82057cfa51f56fe2ed09b46de4dbef928b4bf81fac5fbff9eefb8df50df91ebd745dfc2be57af17ee5cd4ec610c32be2ddfb4724ea2a7f17b94ba5fcc1ebca55ac1ea9e1fe7b30babe47a6979fb4b95976c412ac38fba8c1c2137a3f8fc9d5dd81a9a49e80bfb08108c07ffc9234ecce345c69e55d44559a1","method":"","user_agent":"","ja3":"","session":"a49c5999-dda9-407a-a94f-68ee8a4c1fe8","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":14},{"timestamp":"2026-08-31T17:43:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Rquo.V98TX8l","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5271756f2e5639385458386c","method":"","user_agent":"","ja3":"","session":"e5a44a19-7b02-4447-a2ee-c5b9d4b45bc8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b1264bb4685554ee","strings":["BitTorrent protocol","<-UW1605-Rquo.V98TX8l"]}},{"timestamp":"2026-08-31T17:42:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0004U����R�����rJ�y��\u001c�4����AN�� �\u0019����/$}\u0018|\u001c��‰/���Fs�Q��L~��U�\u0017�\b�����\u0017���\u0006.\u000f:\u000f$4=8#t�9�\u000e�t^���>�{�H\u00051�o�*��zmЎ��\u0012����\u0002\u0018\u001d�oH'�F�\u001a��\u001d���\u0007��\u001c\rc�*)��\u0001׳瑜��c�g�g�`��˅\f�L ��W\u001e��!q�\u0005�\b2�\u0019\u0001\u0016g�/�o���fR���f\u0016* 2FD�p���i��/\f\u0015V���\u0002\u0001\u0019[E6N��=z�kͯp���X\u000eKj<Bֲ�5\u0012�MъL��MQ���]�;�7���\\[\u0002���\t7r��\u0019)���\r>\f��\u0013p����4��|�2y\u000e�\u001eB6t�f|>��Bhb�0G���aN\u0010�\u0015٤�t\u000f3�Y�\ba�v\u0013�m�\f��-��7\u0019�|V\u0007-fmo\u001b��\u0006\u000f +Q6\u0011�\u000f��\rv�+�ڈ�zy��\u0004�b�3��5�s�{\u0011�*\u0019\u0000A�\u0014�*�\u0016[��\u0018i�&k\u001c.c8<<\u0012�\u0004e8_�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"83aab7bc-b6bb-4b0e-9fa9-d70c4544367f","seq":1,"duration_ms":100,"bytes_in":437,"bytes_out":14,"enriched":{"digest":"e63c976e29a47e4f","strings":["$4=8#t","* 2FD","[E6N","Kj<B","-fmo",".c8<<"]}},{"timestamp":"2026-08-31T17:41:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Dw14SNvLCEvu","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d44773134534e764c43457675","method":"","user_agent":"","ja3":"","session":"f406afa0-3c6d-4397-9007-e4c6395d03ed","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"63e83fa7486087ac","strings":["BitTorrent protocol","<-UW1605-Dw14SNvLCEvu"]}},{"timestamp":"2026-08-31T17:39:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�i����j�7��\u000fj��\n>YXA�&������lΏ'��q�J�q&�뀸��H-�\u0007��K;A`\u0014����:ҏN���\t��\u001fL�>��=����\u0004I�k�Y����ܒ�������\u001ab�\u001a\u0000z\u0005�$��������T����$��o&r��(s@��''�ځ-�!}3���B\u000bc��]6���xT�\u0003շ\u001b\u000fmQA�\u001b��φ�����cv�<�\u0013?�L�\u001ab\u0011\u0001\u0002","payload_hex":"9969f598af946aaf37f9890f6aefb80a3e595841ec26e189f89683896cce8f2788eb71904a9a71269feb80b8e69f482d8707a4e24b3b41601483e5d3fd3ad28f4eb4ed96099ddf1f4cb63eb9ce3dc0a9abfc0449e66bd759b2bfc1cddc92f899cfc5c8ddf21a62911a007a05d0249eeaf4a4909db7f054f88ca5c32498836f26729eeb287340f1c72727adda812dab217d33bde396420b63bc985d36c3d5c97854cd03d5b71b0f6d5141d71bf3bfcf86eba6f2a1e06376cc3ce1133fc94cd51a62110102","method":"","user_agent":"","ja3":"","session":"3b4e979b-ce8c-468f-aa1a-2dbffdbc77ca","seq":1,"duration_ms":100,"bytes_in":196,"bytes_out":14,"enriched":{"digest":"63d37ddebeb6f886","strings":[">YXA","K;A`"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:45:02.432425+00:00"}