{"ip":"191.240.226.38","total_events":188,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["188 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 38,619 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"38,619 bytes sent","bytes_sent":38619,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T11:57:27","last_seen":"2026-10-05T22:24:19","events_24h":188,"events_7d":188,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.226.38.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T17:50:48","last_seen":"2026-10-05T17:50:48","recent":[{"timestamp":"2026-10-05T17:50:48","port":39131,"src_port":29805,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:ָe\u0016\u001a?Q�σW�OduUf�xq9:info_hash20:ָ`Z\f��3�a���\u0004��~<%�e1:q9:get_peers1:t2:i�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303ad6b865161a3f51bfcf8357ce4f64755566ac7871393a696e666f5f6861736832303ad6b8605a0cab9533c761e3f5f504e2877e3c25e065313a71393a6765745f7065657273313a74323a69bc313a76343a4c540102313a79313a7165","sni":"","session":"7d001959-b77f-4644-9a44-74ebb0c4f368","bytes_in":104,"source_verified":false,"enriched":{"digest":"be11b603a84ec3a2","strings":["d1:ad2:id20:","OduUf","xq9:info_hash20:","e1:q9:get_peers1:t2:i","1:v4:LT","1:y1:qe"]}}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":188}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":188}],"recent_events":[{"timestamp":"2026-10-05T22:24:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�m\u001f��Zp%;\u0016\u001b<���K���l����h��G\f���\u0003d7�qE����2���\b�ҧ˕�h\"oH�A���w���C�51�a\"\u001b�DE,�^{����mذ\b�]��#�\u0005�OH����{9\u0001Q��G$ݑ�\u0012i�\u0019p�Ȧ[\u000f�����\u00035�&̤#\u00041���N�u�����Cx�X��\f�\u0014�4�1���rp{ڝ��G^�J\r}z\u0012��)�����G��\u001a�gm\fo���/!�Hc)���B��!�C\u001e��l�<�i\u001e�K\u001e�\u001c\u00187F\u0014͜��VU�.(�","payload_hex":"d96d1fa7f55a70253b161b3cf0ddee4bb4ada16cad92f59c68a9aa470cfdb3ce036437977145e7e0869d328592bd08d2d2a7cb95ab68226f48f3418b8bc877ffd4e243ef3531ba61221b9844452cf15e7b99bccdfe6dd8b008a65df0cb238e05a34f48eff8a7d77b390151f1bf4724dd91c71269c31970b7c8a65b0fc29d9e8597dfe90335a726cca4230431c1f8cf4e9775e3b0ecd9fc43789658b4e40c8d14e034c331a6d3d872707bda9df182475eb54a0d7d7a12f7d029c1fab282e54787971abb676d0c6fcbeaaf2f21e3486329f8f6e442efc621dc431e86dc6cea3cd0691ed44b1ebe1c18374614cd9cbf915655a62e28c2","method":"","user_agent":"","ja3":"","session":"5141a776-e50c-4b3c-b9f1-e12f622d6961","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":14,"enriched":{"digest":"566759c769f81cf7","strings":["Zp%;","h\"oH"]}},{"timestamp":"2026-10-05T22:20:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-K4njwoQcy_AG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b346e6a776f5163795f4147","method":"","user_agent":"","ja3":"","session":"a7a04bed-ee86-4232-bbf8-361a41afc115","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"02507dbbeed382ae","strings":["BitTorrent protocol","<-UW160N-K4njwoQcy_AG"]}},{"timestamp":"2026-10-05T20:58:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\\\b�\f\u0004�\u0013H\u001d\u001f\u0001��7L\u0018W�}�\u0000��`\\ay\u0015�r��0#�U5$=6�0q��$hz3�qgX}�\u0013�d�d�\u0011aj)q��%s�E�\u001d[q>�\\\u000e\u001d\u001e���W\b����y�t�� \r�r�D?��{�^�\u0007�p\u001dI�\u001cK��\"X.W:�vm%�.����\u0014�'u�L+�N�,\u001c\u001f�~���\u0013g�6H�I\u001b/\u0014sm�\u0010\u0013\u0010L��M��WS\u001bxdO>I��\u001e\u0002�w,�`��q�\u0013�}��\u001b(/�yE� 'xb���������3��w\u0001zp\\:/m������ؔn\br�\\�\u0014��\u001bI?�\u0012\u001c��xꕫ�|y�+�y��\u001fRX׵O�G\u0011+s�G�w�[� W�h\u0002;\u001a\b\u000e��|O>�����\n����r�\u0016�D8��\u0012@���\u0019�A","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b4ac6733-84b7-41da-aecc-f5da884430a6","seq":1,"duration_ms":100,"bytes_in":441,"bytes_out":14,"enriched":{"digest":"e4e53a01e956fc25","strings":["`\\ay","U5$=6","$hz3","qgX}","aj)q","\"X.W:","xdO>I","zp\\:/m","mK��CDz?���j+$�ɼ�\u000fc���\u0006�\u000e��!�+�\u0003 0��zv�\f�1��0\u0007��A�R\u00101","payload_hex":"2ed13ba6d2de8ad47f6d9abbbcc796584b63d12c8fa85ccfaf034715b3c7cdcff8e97e57d8200ffeeac7e48825de97f2f3b1cc6c875595e78fa698f40a45eeaa04b07d9ed3373c4093a9d602f9548776fb4405f1448dedfc5183dce9910f4b21d85fca4484dbd43e6d4b91c643c7b23fefeba66a2b24a3c9bcf60f63ddea8f06c80eea9921c82bf7032030d0c07a769d0ccb31d6fa3007f7e341c5521031","method":"","user_agent":"","ja3":"","session":"2badf53a-a6de-48d1-8958-6fcae913924d","seq":1,"duration_ms":100,"bytes_in":158,"bytes_out":14},{"timestamp":"2026-10-05T20:50:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-jfrXqCPbs6di","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6a6672587143506273366469","method":"","user_agent":"","ja3":"","session":"ef482ae4-6037-4cf9-97fc-0f21f27eecac","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4b78a339fb71e3a4","strings":["BitTorrent protocol","<-UW160N-jfrXqCPbs6di"]}},{"timestamp":"2026-10-05T20:48:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"t|Syv�PK\rFM����X�gXÕ��?��\n��#�NK���Y�.H.�P�\u001ez٢\u0001u�\u0013�g\n�\u0002����\u0016�\u0015U�\u0016���25+����i�V[2-ȄyK�J\u0002�Ѡx�\bF�\u0015\u000b/Auv����D�\u001dWnV�(\u0016�)\u0018\u0018^�9g��QV^�\u001b-�:��\u001f�\u0010N�צ�E��֔\r�Y�\u00151v��T\u001d�\u0015\n4vq���!\u000eT��\u0016����q\u000b�~�\u001c.C5�V\u001d5��dSu?pl�h�H����\u0001N�v��L�\b*\u0000\t^D\u0006d\u000b1�������\u000b\u0002�����\u0015����з�\"\f\"��m\u0000s���X\u001f�AQ#�r\t���,��\u001a��#E�frV�VV&D��\u0003\u0019�������ag�]+��/B��7��_�����B\u001f'��9޺ \u000e��]� w�M᷄f��� n�kͶժU�v\u0019�1G��bۼ��?�������","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2101218e-af46-4f30-86cb-ae4b94409f9e","seq":1,"duration_ms":100,"bytes_in":378,"bytes_out":14,"enriched":{"digest":"ca723d454fa40719","strings":["t|Syv","V[2-","/Auv","dSu?pl"]}},{"timestamp":"2026-10-05T20:46:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Kb~~gB0AUk9W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b627e7e67423041556b3957","method":"","user_agent":"","ja3":"","session":"d92d204d-105d-428f-801c-8313eb4bde5a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"10019bcbbe1c56df","strings":["BitTorrent protocol","<-UW160N-Kb~~gB0AUk9W"]}},{"timestamp":"2026-10-05T20:43:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001�c\u000b!N1$�]��R0�7C�N�^��mC�\u0002����f�\u0010��j1��wD��Ìk���o߼