{"ip":"191.240.227.250","total_events":14,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["14 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,449 bytes sent","bytes_sent":3449,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-30T14:01:28","last_seen":"2026-08-30T14:18:36","events_24h":0,"events_7d":14,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.227.250.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":14}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-30","count":14}],"recent_events":[{"timestamp":"2026-08-30T14:18:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0019s�\u0014�x_\u001fN&/\u0013\u001e��ef�\u0013\u001fy`T��\u0012[���(^;���?#nH�\u0014\"D�u��\u0002rC��37�\u0018•��l[x\u0003���_�v���,\u0014U��T34N\u0013[t�̶�%���R?�V����G��\u000b�+���Z\u000f~HWԚ�C��}�A�����\u0018m�\r\u0002\u0005ʣ�\u0014s����\u000e fX`��B\u0015ʂ����i4�V\u0011���7�.E�P�i͏,�9\u0014�\nٵ�yg��jAK��sfs6�0��\u0016�9����`�3_���nGź�\u0005����\\IH�f�4\u0010G���?4��<ł��\u0004(T\u0010�Ҷ��1=k�l5I\\�\u0013\\�5F��8\u001a�dbAn��H}�S��~B8['b�ݙ9\u001d\u0001��\u0002$�Q����\u0014�\u001eHcm�U�U�Y\u0000v�̗Q\u001f|����!#�s�m�\b ��\"YH�\u001f\u001d\u000e'>\u000b��\\ͺ�/�\n��\u0011M���\u0017+R���j�\u001a\u001e����P�3?å\b��Ё�W����kK�\u0011�=\u0014�&�\u000b�g\n�lp�s�^\u001c:w�8_\u001b���g�h�Og9��8�A����cj��\b��)���Tb\u001a���\u0013u\u001fԹ�\u001b\bJ�����~S�\u00194Q","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"496835d9-cd69-4f52-b6cf-d30d3f6d9c62","seq":1,"duration_ms":100,"bytes_in":492,"bytes_out":15,"enriched":{"digest":"4954a4c320612b82","strings":["?#nH","T34N","sfs6","l5I\\","dbAn","8['b"]}},{"timestamp":"2026-08-30T14:17:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-(C9ZZ5_5X4t!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d2843395a5a355f3558347421","method":"","user_agent":"","ja3":"","session":"597a69b2-3907-426b-9114-40d7da2e0a7b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0257dd0f89093059","strings":["BitTorrent protocol","<-UW1605-(C9ZZ5_5X4t!"]}},{"timestamp":"2026-08-30T14:15:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�a����x\u0003/A�uZ�\fl���&Y궶\u000bA���/�\u0010U1\t�[�7�h��\\�X������\u001c5F�R��Ca���,n\u0013���~z<�\tG��\u0010��q\"��eG�2[�I\t�[n�W��3�`'���)\u000e;\t�\t����O\u001eob�\u0015�6��v\u001c\u0019�D�����\u0015\u0015)yNn\n@���3p}��>�tJ��ވ���\"\u0010�G�h�q��S>��Zw�Ny�6nZ��۠w�e[\u0002\bl\u000f���z�f��\u0015$հE/\u0004+p#\\��{xs���=�Ww\ffW��>�Մ�M�}�&S+dĬd0�:�#\u0004+~]}�\u0011dO��D\r\u0014\u0016��ޫ��\u000b\u0013д]\u000e������3\u0012����of`���\u0001i���\"\u0013����\u0000�����\u0012�PᨅS���k4�~���y��1\u0003\bł�i;���\u001f��*�u\u001d\u0014�%","payload_hex":"dd61d8c8eef478032f41de755ad60c6ccddee02659eab6b60b418eeda62fc410553109945bd437f76890875ca6589d83c7fdfee11c35469352ecfd4361b5d6ce2c6e1383b4ed7e7a3cd2094783b7108ce47122c7cf6547ad325bd14909f85b6edb57dcd333f0602792e3c5290e3b09e209828dc6dd4f1e6f628f159936f493761c19c2448f9487ddcf151529794e6e0a40cbddfd33707dccf53e89744ab581de88b282952210ce47f6688d7198d6533ea3dc5a77fd4e79d9366e5ab9afdba077a8655b02086c0ff9f5c67a9a66ae971524d5b0452f042b70235cfba47b7873d4def93dd657770c6657f7c53eb8d584f44dc17d9926532b64c4ac6430e73ac223042b7e5d7d8711644faee4440d1416f89fdeab9dd20b13d0b45d0e90efe6b8e78233129edbef9f6f6660a5b9f001699e819d221382e2e989009ce1eec0c212ee50e1a885539beba36b34e27ea2ffc279ee99310308c582c1693bb18fe21ff1ef2a82751d149225","method":"","user_agent":"","ja3":"","session":"e82c5488-5659-4ede-aa46-101caacd7e58","seq":1,"duration_ms":100,"bytes_in":359,"bytes_out":15,"enriched":{"digest":"130251ac7326456f","strings":[")yNn","+p#\\","&S+d"]}},{"timestamp":"2026-08-30T14:14:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-nj(2sJ9K8eco","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6e6a2832734a394b3865636f","method":"","user_agent":"","ja3":"","session":"2e90e4ab-6e2e-4b2d-a3e1-342f98b22f02","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"81b7aa962d83e7da","strings":["BitTorrent protocol","<-UW1605-nj(2sJ9K8eco"]}},{"timestamp":"2026-08-30T14:13:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"0�_\u001c�]���\f��\u0014���h6%\u000b9>�Z\u0016���\u0004�ڥ�o��\u0010\u001d���&\u0014c,2&|�\u0007��D�\u0011W�8�q&����{��\u001e\u0001$�\u0007\u001aC6�~�������~'|��\u0006�#�����!dG�\u0004�)\u001b����L�Y�#܃\f�l_h��]?g\u0013����\\bH�|��\r���D�YiR\u000f��w�MP�����\u0003FC�\u0015�S&ZԲ�0�<��$R�\u0017\u0014�\u001c꾬\u000e��wk��y�r\u0011Grh\u000e\u000el��uW�\u0007�(�ۦ�x���|K!�\u0006�\u0001ϥ�;TV�\u0003�'���\u0004t�'�a\u001b�\"җ�6^ \n��8�s�\u000eT{|�\u001c��.߬J��3�c\u000b���\u0010\u00153r\u0013�zg�|a��L�z�S\u000f\u0011�6룈���Ý\u0001��DSt*�FZ�{h.\u001d���Y��e��Q\u000f�W�E�0a�v@���'b\u0004�\u001b�1V�ސ��\u0019\u0016�@��\u0012�@�R\"\u0007����P�Y�L%��K�S=)Ց�\u0019ş�Tf*�F]�V$��\u0005w\u000e��y|�V\u0000�9���\u0019i��\"\u0018T\to|A\u0006\u0017J\t��r������\u0005����Iu�Sz�k\u0019�P�윫=�����\u0017-���/B�\u0017����Uu��\u001fM\tY��%sxuS���'����}�r�~��\\\u000e7A\u0005�I\u0016�;�lz�3I�\"�=\u0018Ƙ�vH����!�(2\b��M�I%��Lp\u0002�/��)�wڨ��eHј\t\u0005g�����%7��C\u001c\u0016\u0006U#~5�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"bdfa443f-8a9b-494e-b315-8ac8d6298b3e","seq":1,"duration_ms":100,"bytes_in":603,"bytes_out":15,"enriched":{"digest":"1fc482d40e5b629f","strings":["c,2&|","DSt*","%sxuS","U#~5"]}},{"timestamp":"2026-08-30T14:11:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-Hq1.-EcW*gWE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d4871312e2d4563572a675745","method":"","user_agent":"","ja3":"","session":"58e4d5d9-0687-40b1-b204-c122d502097a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e6291dda6cdf9dba","strings":["BitTorrent protocol","<-UW1605-Hq1.-EcW*gWE"]}},{"timestamp":"2026-08-30T14:10:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��y��d\u0000ܜ.���_$�/4��w^��c|�A��%W�Y{_��S����ҩ\b�o�kںJ�W�`t:���S��\u0007���a�<#hP� �ҴoG�I%�m\b.\u001b�\t����\u0005�a_\u0012\u0019\r*k\u0001��h,=�B\u0005zU�B\u001e[U'/k�\u0017��y�)��D\u0019�Ht\u001a��\u0004���uk\u0001\u001a\\�tv\u0007�.�x|LVr\\�$A�rx�|\u001c��1j��\u0002en��C�ڷq�$��U��������٦p�����\u0003���\u0007}�W'�\u0005��W�=Dʖ��\u0015)���?!Q`7P �$@��b\u0012\\��CFf$������)����>ÿX�E�\u0014�,��3>�«��YMyҢ{v\u001a5q:��z{�","payload_hex":"bd8779aeb76400dc9c2e87a0915f24c42f34be8b775ea2a1637ca741fdda2557a7597b5fafa853aaaa90fed2a9088a6f9e6bdaba4ab6579160743afcbea053eae007fedbf261f63c236850fc2097d2b46f47c04925fb6d082e1be809ec7fa0b6c40597615f12190d2a6b019ad1682c3def42057a55a6421e5b55272f6bb2179f3c7aab5a4a57452ca7886e91eb10f869403309b6e987af0471214b2a19b5baf8b5a1792fe87ccada439314f3f2416a8017230767bb54867267b688a2201050f00b76819af8d8ca89483cf11d2c4b26ad92e05da4714fde2481204953b3f38306bb4aa40acba8517b59f6a73a6f136ff140c2818192c78babf71b0a304065ddb970d0e93f61b53668d6ea5ea0b7ef0c921d0a9871cff66ee364749931fc8e80d3a44dca519eb693488f1438f17c48b93d6c86350b434e477ababd4eebd5a6f9948942e102d083329b9b629d2a289c5ca6f41f2e8de43b173f0f3eb879b629f2cf44199948741ad5e6049385ad756b011a5cd4747607a52eb7787c4c56725c872441c772788e7c1c81b5316a8c9002656ea0dd43cadab7718424b9d155b3f8b1ce7fa6f1aae9d9a670d7f5dbeb900391fec5077de15727be05cdeb57be3d44ca96cecb1529acad9a3f215160375020f524408dcc62125cdeee4346662492a0f589e8bf29abdbe3a73ec3bf58cf45fc14ce2cf686333ee4c2abb0d7594d79d2a27b761a35713afaf17a7b89","method":"","user_agent":"","ja3":"","session":"41841306-a23b-40fd-b1fc-f3a7fff6ac2c","seq":1,"duration_ms":100,"bytes_in":522,"bytes_out":15,"enriched":{"digest":"d0ed314e96d77784","strings":["<#hP","[U'/k","ZJWE,","q!K*","CNGz","x|LVr\\","?!Q`7P","CFf$"]}},{"timestamp":"2026-08-30T14:08:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-aUyy(N3R~eEs","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d61557979284e33527e654573","method":"","user_agent":"","ja3":"","session":"4a8e27e8-f267-491c-8d7d-d6d908f2265b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"33a7688c063e9e1b","strings":["BitTorrent protocol","<-UW1605-aUyy(N3R~eEs"]}},{"timestamp":"2026-08-30T14:07:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OO\bh`Nɼ������\u0015@\u0004!־>B\\�\f.z��)}͂򿈴B�.�V���J\u0012�����\u001d\u001e�M�$\\>it2P՚�y�ι`F�=VL�\u00130\u0007��I��<$�\u0014��6�\u000b��&|SF�����4����T���4V\u0010��T�j\u001e~�32\u0017\f����B��2���]q5������8Y\u000f��f��\u0018�y�g�-��\u001a����\b���j��\u001f�8�;����\b\u0002\u0019:\u0014{�:��\u0000�N�V��GA֯��\u0017�ż�)G�I�^$�,��n��\r�3ʉM���Ww��\u0012e�vk�r�1GnҲ��8+�������U�0S�r\u0004��\u0003��\f*�[y��a�\u001f6��cr���ɱ��\u001d\u00059b���1�Q�[�\bp��d�\u001fWa�W��-���e�\u0001\u0011Zq�#5M�wz\u001d�s�\t�\u0015'᠗=?�\u0017�\u0019üك��7�����M��,wr�Ǒ���+&\t�yu��Ez\rѧ\u001d\u0016��\u001em1��`tʒdэ\u0007-�C`L�PiJi�\u001c�A!?U�\u000b������\u001d�]��[�z�-K�y�J`�\u0017���S:\u001c狊\u000b\u0018N��qmI.=���w-,���k��R��o\t�u|\u00164��U\\\\���7��R��G7h\u0005I�Nz\u0017�3�H���(�*�3���O4�f�%","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"42adc9d9-6fd5-4493-9244-22630ec5ddfe","seq":1,"duration_ms":100,"bytes_in":544,"bytes_out":15,"enriched":{"digest":"5cfecafbf6d7efbc","strings":["$\\>it2P","&|SF","PiJi","A!?U","qmI.="]}},{"timestamp":"2026-08-30T14:05:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-EPk1Y14EDVnc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d45506b315931344544566e63","method":"","user_agent":"","ja3":"","session":"91ceba4a-08b1-4a82-82bb-63927b76f249","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"bae6b9dda48d9739","strings":["BitTorrent protocol","<-UW1605-EPk1Y14EDVnc"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:41:29.820333+00:00"}