{"ip":"191.240.226.121","total_events":96,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["96 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 20,862 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"20,862 bytes sent","bytes_sent":20862,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T12:51:20","last_seen":"2026-09-01T15:00:59","events_24h":0,"events_7d":0,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.226.121.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":96}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":96}],"recent_events":[{"timestamp":"2026-09-01T15:00:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�H��R�ac�Lp�=�544����*�ގ��k��T\u000f?��(�S2\u0015�̘S�����\u0000�A\u0005�\u0014��r,�#�����\u0000;�\u001b������0�U\u0012��cB\u000ey:\u0001�hD�\u0016Vd�-D?�sV\f懟\u001dC<7���pLy]\r\u001b�vSJ$$\b\u0002�\u0005�s�GA8�h]�\rӯ�\\K磭�N{e%��%g�����\u001e��\u0007�_�\u001cyP�r� \"S�n.ߞ\"�\u001e�C�\u001dS�\u001fE�\u0000>��$k�U)���ʿC\u001f<�`��Ԧ�8�\u0016�w\u0016\u0004��sηo�&�����΄�o:dRt5>\\���0��ҕPA�SN3E�V��a7�T�i`[�ov_\u001bN��R \u001a���Yӌ��d*ڂ�H��L|G;���qߪc6�����$�#h�\u001c�,[+-*��z��\u000b�98%��act���X�\u000b����$v��R�DhC߷Ȧ�\u0004���;$����˵,�X����E9�\u001b\u0016j��\u0011�t?��J�\u001b��\f�\u0006�\u001b\t�z\u0001z�\u0002.c��66>ݯ�\u0018Q��d!���Zd\u000f—����\u0010�†0\u0007���\u001f��:H\u0015z�U�\u0017��\f\u0015\u001e8y��lD(��\u0003\u0015\u000eq�IB+��|PSwv�n\u0006q1���R��\u0015��\u0007���yV���6��&�\u0015��@��\u001c�\\�V���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e43c864a-b7c4-4309-9858-597c287a5402","seq":1,"duration_ms":100,"bytes_in":549,"bytes_out":15,"enriched":{"digest":"480d215c2069c6b2","strings":["pLy]","vSJ$$","N{e%","o:dRt5>\\","SN3E","L|G;","|PSwv"]}},{"timestamp":"2026-09-01T14:59:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-vrKWLMufM5jl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d76724b574c4d75664d356a6c","method":"","user_agent":"","ja3":"","session":"30516dff-ff96-42f0-868a-5d5ddf154b08","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7ef0a1d475918b53","strings":["BitTorrent protocol","<-UW1605-vrKWLMufM5jl"]}},{"timestamp":"2026-09-01T14:58:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����㷹-\u001cľw\u001f�[o������.\u0006�;��<�~�*�;�\u001aOx~R�h�ԇ�E�\u001e����<2qT���@4��Ĺ\\#h�\u0007�9�)�\u001fY7�Nx\u0019��KGb�]\u0019��#6\n/�\u0004�\t����Ĕ���N7X�\b{�Ҕ�p�Fh����#�;,\u001c�%1\u000b(�\\��:�Obn\u001a\u0007�\u001b7ěb^��\u001f\u0011�����T\u0007\r��(�L�=}�\u0002a馁�s�\u001c(6����\u0012u�̶����uZ�A�{\"��D��\u0001����i=����\u001dV�C�\u0017(�C��C}|��L�@~Ny�c�{���\u0018׬\u0019�|�Ub\t9v���J���o��λ�m.��l��Y���Ek\"��qyV�a\"6�l\"]\u0014��\u001e%�t��։ x\u0018�/J��e��������-\"&Tc�\b�?��\\™>��\u0000������o#�pm�+N�","payload_hex":"e3f1cfcce3b7b92d1cc4be771ff95b6ffcfda08dddc12e06b73bbef83cd97e992a953ba61a4f787e52ec689bd487a545ac1ea590f4f03c327154b4d1f44034fee8c4b95c2368da07d339ee29e21f5937844e7819a0fc4b4762f75d19c4e023360a2fcc04ea09ff8ae28ec494be998c4e3758ce087ba0d294e370c34668b9eca6e323ad3b2c1cd925310b28aa5cfed43a884f626e1a07f21b37c49b625eedfa1f11eda5dde29d54070ddade28c24cab3d7dc50261e9a681fc73a71c283692b6aa871275c9ccb6b0fab4ff755aa441e17b2282be44ecf701bbbeb9a6693d82d4e3d51d56ea7f43851728ce43be86437d7c87874cd9407e4e79ae63a87bf4f4ee18d7ac19b07cda55620939769a81e34abfe6876fbce2cebbae6d2eadd16cee8059f48c99456b22b494717956a7612236f56c225d14ffb61e25b57494ebd689207818bb2f4af8bb65cef6afeee2dbf5a62d22265463c108f63f83cb5cc2993ea3dd00ace0f4939bf06f23c2706dfe2b4ef9","method":"","user_agent":"","ja3":"","session":"17016ff5-1429-41e5-b9a1-243be684f4a4","seq":1,"duration_ms":100,"bytes_in":368,"bytes_out":15,"enriched":{"digest":"ea1c2ddef4f8cd55","strings":["Ox~R","<2qT","@~Ny","-\"&Tc"]}},{"timestamp":"2026-09-01T14:56:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-JJ0mJcnxqTW.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4a4a306d4a636e787154572e","method":"","user_agent":"","ja3":"","session":"9e1c8475-df71-4e79-9bc6-0f6e7c6e6203","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"bbb8ddfe84d655c8","strings":["BitTorrent protocol","<-UW1605-JJ0mJcnxqTW."]}},{"timestamp":"2026-09-01T14:55:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012pR�V����3`r�^P�/\u0011��\u0018�Xg�\u001c@f���D��\u0017��\u001a0\u0004��fG�M���ʳ\u001a��!��!���}\u001b�AŪ�\u0018�W>l�g��s'&��U�x������]\u0006�\u00120\u001d8yp?FBm\u000e�_�j�5\u001c\u001239go#\u0001\u0001i\"L5\r\u001a<`���$'(N��w\r �X\u000bM����E��,3\u0005Mp\u0018�KE\b���wBH�6zM�Z6��6z���4}yQ��>^~\u001aψ���4�\\E�J�&��4٥� `��\"��'\t($=D\u0014y�̍�F=(F\f���wS�2�AT\u000f!o�\u000e��\u0007�N�7\u0019�\u0005����m�OA�[V��=�&d����\u0003����6�g���,����;j3� z\u0015�Z�\u0016\u000eH\"���\u001d_�����C���\u0017w\u0013�A�\b�v�\u00059�\u001c�\"~4X��7�����ݝ�\u001c8V\u0017\u0010\f\u0015\u000br\u0001���܃��\u0011�%\u000f@��w\u0010��y�)���\u000e��\u0016�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ada55579-be53-414a-ad3e-581a577eeb11","seq":1,"duration_ms":100,"bytes_in":396,"bytes_out":15,"enriched":{"digest":"c10d217cf38b8e7b","strings":["8yp?FBm","39go#","i\"L5","$'(N","4}yQ","($=D","F=(F","\"~4X"]}},{"timestamp":"2026-09-01T14:53:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-3bncw!Aa18JK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d33626e637721416131384a4b","method":"","user_agent":"","ja3":"","session":"482eb9a9-86e3-429c-9e72-3f37dee44280","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7819978334a93220","strings":["BitTorrent protocol","<-UW1605-3bncw!Aa18JK"]}},{"timestamp":"2026-09-01T14:52:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"zj%.\u0002\u0003z��Q����w��\tc]���2�Tr��`&\u000f�\u001d�w\u0010\u0006��2��d�\u0006]��\u000fz4����r�����\t�Z�\u0014��\u0013�#�Ѣ{�\u0004�}\u0000�5Z��>\u000b�u|�9���ϻTiGb�:bH,\u0019�Cc�ٺ��q��<ν�6\u0015=�`��)\u0018N�\u0010%����W��\u0000l���!VI���ߏN \u001d@�U�\u0013)D\u001e�|\u0002�����'\u000b\rbK\u0018�\r��\u0005","payload_hex":"7a6a252e02037acadc51fa8c96d17796ad09635da085aa32fd5472ae8160260fc71d8e77100689c932e19364a8065df1d80f7a34b88887a772bcabaaf3b409f35ad614d4c113e023d5d1a27bda04857d00c0355a9bb83e0beb757cce39ecf296cfbb54694762e83a62482c199d4363dcd9ba8ed87184c33ccebdce36153d926088c129184ee81025f994969b578ed1006cc7fbc221564998908bdf8f4e201d40d655eb1329441ee57c02aaac9eb7a5270b0d624b18c50dadd805","method":"","user_agent":"","ja3":"","session":"140123b7-0242-400a-81a2-6d2985d8fbe9","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":15,"enriched":{"digest":"ebc05217f49c3ebf","strings":["zj%.","TiGb",":bH,"]}},{"timestamp":"2026-09-01T14:51:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-WFtl7OHgmV7N","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5746746c374f48676d56374e","method":"","user_agent":"","ja3":"","session":"5dd43ace-14bb-48f9-9fef-0728c63e01a7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e43f1a419a02b41e","strings":["BitTorrent protocol","<-UW1605-WFtl7OHgmV7N"]}},{"timestamp":"2026-09-01T14:50:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������5\u000f]�M��\u0011=��jF$\u0010���Rh�VțI\u0014W�`y\u0001:�l�.�\u0007�k<\u0014<��q\u001d�j�\u001d\u001b�\u0003g\u0011x'��¹\u0010Jb�k�\u001f�� ��?\nM4MT�*N\u0019]���E\u0017c\u001e�7$\n���\t\b�E�\u0002��\u001f�6�E���\u001b�)��xR\u0012\u0018\u000f�往�\u001b�!��U��^�����\u0013,_:x���$wc���{\fK\u0013�89��E�mT�pR\u0019 ����]\u0007_Ns\r��[J#��Q��\u000eҝ\u000b6A��|U��p�B�\t\u001e��Ё7�\u001e)\b@\u0017^\u001d��P\u0014��FZpAk��\u000e�9�0\u00117���׵,'��Dj&\u0017�|\u0016�\u0011\u000e]ٸ��`��\u0010�\u0010\"D\t2��Ύ�1K0���\u000b�>�9�[�6�j\u0013Z\u0010�^!\u00068\u0015~.�4\b&@�3\u0005#V*pUe�؍�m]���bȄ��~��h��'��#x��`�����\fU���tUbo� �B���b��iBh\\(lwu[H����!\u000fS��z\u0006�\u0005�|��]���e�g\u0017\u0014j\u0013gd�\\��~�8C��c�5���a\u0018\f��ށ\u0010M�����\u0002�\u000e�逛�E?q��˱&\u001e��GÞ�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"855f7854-98b8-42f0-8db9-a1283d86e2d2","seq":1,"duration_ms":100,"bytes_in":480,"bytes_out":15,"enriched":{"digest":"a1407d02379aa2c3","strings":["M4MT",",_:x","FZpAk","#V*pUe","tUbo","iBh\\(lwu[H"]}},{"timestamp":"2026-09-01T14:48:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-RmYE0E2Dl2-v","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d526d5945304532446c322d76","method":"","user_agent":"","ja3":"","session":"77aaf68d-3262-4e31-8646-fa62ee36eb56","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"603c5c8da488cc4b","strings":["BitTorrent protocol","<-UW1605-RmYE0E2Dl2-v"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-22T02:48:13.947685+00:00"}