{"ip":"104.155.55.175","data_as_of":"2026-10-25T02:40:46+00:00","observed":true,"total_events":28,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["28 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,481 bytes sent","bytes_sent":1481,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-16T04:11:37","last_seen":"2026-10-16T06:52:09","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"175.55.155.104.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":18},{"port":143,"proto":"tcp","label":"IMAP","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-16","count":28}],"recent_events":[{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"573394e8-9ab2-4bd8-acda-b9367deaf9ed","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"618d2e64-468a-4e6f-b5da-6fef6532fe98","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0641b0f7-b986-4573-8b37-7dd1c4d93d11","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006oAFYPn","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066f414659506e","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"cc37ebbe-f83e-4280-a499-6bcba8cfcaf2","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"d88dff3a9ded11db","strings":["adminclient-5","oAFYPn"]}},{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b948986d-2a34-4847-95fa-71484fa3d839","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-16T06:52:09","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004n�:z`2\u0002\u0001\u0003\u0004\u0017cn=ooywrufvugfrbtiuxejw�\u0014ooywrufvugfrbtiuxejw","payload_hex":"303a02046e813a7a60320201030417636e3d6f6f797772756676756766726274697578656a7780146f6f797772756676756766726274697578656a77","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d6e663b0-6af7-4626-9d95-543cfca22977","seq":1,"duration_ms":104,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"2363130bee581a15","strings":[":z`2","cn=ooywrufvugfrbtiuxejw","ooywrufvugfrbtiuxejw"]}},{"timestamp":"2026-10-16T06:52:08","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b5f8842d-dfda-464b-8dc7-5f2e5edc69ee","seq":1,"duration_ms":114,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-16T06:52:08","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"19485eeb-8e94-4cab-a951-0436077faaad","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-16T06:52:08","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"3537698b-c2f2-41b3-83f3-9a11702a6064","seq":1,"duration_ms":13,"bytes_in":191,"bytes_out":5},{"timestamp":"2026-10-16T04:57:41","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"28f3c65c-e67c-4fb3-9691-6de87b4b6ec7","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}