{"ip":"104.155.59.136","total_events":33,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["33 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,715 bytes sent","bytes_sent":1715,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T02:11:45","last_seen":"2026-09-30T07:45:12","events_24h":33,"events_7d":33,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"136.59.155.104.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":21,"proto":"tcp","label":"FTP","count":20},{"port":23,"proto":"tcp","label":"Telnet","count":9},{"port":25,"proto":"tcp","label":"SMTP","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c0030379ca31b4d2fab7a238f926f8ae9922bc7c8e52ff0040f17d6d91fd17bab88abd201ffee65b8535c5c9e5548fb6fa2b1d8041c69b9595930f5c196b6f236bb177800032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c01d71158efa880318292f3977d3835456d1b767d3ca1f9834633c74c1150c5307692c814a65632c91031febdcb57d76a37a75c30ccc6ba80541877833122a22e96950b0c50171eaa369aaa1ef6596549c347ca86aba2831be677a03b557cf5451c35c81e286c72cc0b8921c0da1fac77152761297b167610b583189ec543abf998d01158388461b69da0a93faadfa714335e4abbbdb604f786f3438b53e96a44095105db5054230826d94bf4423a3ea562ca76ccc153490604b4ee1c34d46ba527a883fb8931e79773a0bb494f18645613b52de6a6c19b4408f5b5b662827746180d7816e002a16a811072984adbde83751f353e278c1b08b9758035713b8c59d747a6f5b7656251558e10f21c4228fc032719bca2231b323969d34227cd2588e95a419b3d5b4b58158ad238f1b067b3a5882ba9c876fd18bfb994780f5709faab3f4758ab144c00bf821fea868e9998a12968890b9bf2905ce89a1b60c68607611720b05c71e91035a128f14e12fa9d6c27cf42c2dc701281441ab2284588253ecc2ade655b79380ba4ca14f7383bff40c98e8896a98a9cf74a2af265ca2e1977db1041cbe19414e09632eb620906b463a67cd8f1bcf11ab82fe7947fa1457a8d9bb6edab37abb35c342437526915c25b878495b632a7f226105c85065712ca6a2280ef118c254107c2b853807fb734023bb98b9cbe0676023a65679591382538e9577cd53398c2fbb4bc486bb13d9afe76c56148757a71199f611c03a803fa708125011560afa693171326966aa636b1aa6665dd9024bc4fa6b6609bf2a43a0e3faacc60a6aa342c55f059ea2d60e86a483d6f193db240fd2683c8313ac3424a7b9f82544f10ae9120472ca0a04d4318ab75d7829a19bdb09c581a6a47bb8a962b3038861e067945f3461c9d4b44665334c650843b9190b111653557db918a2937bba94235222d130bff387be055b737033fc178279c79191d71926a679da9098ec8b0e312585bb0b8d46278dcf483f78187a12437558931e04bb7e03ba82cae02e354158314bcb2396a98982826a7967880485fe84609706151e120bb0649c8894557aeb536d41857b2c3916d26b8dd39d7ed8bd3a78b3c7a582ddb46fba511759f720f9117f0eb53768b54556f82b3993694f166c2e0c9956176086674d09aa033ee7c1441b6e57b94a8f4227763781a824c662e5968c540760f87120b671094715655618b3160021577d2704579494a7c51a8764fb24de48c89f11be2f566cb1f397eeea8a2204b61a31babeaa946a3222a43c4534675b81e357b4528788f90b32d6b4d5b593476b73d1818bcb57557593c4e01415c7b93a4d713ad4bb5151237327b693b838029ac118299444434c4e1c6207f27b404c560bee7b036e726ca5f9c0ccb0c7d9f00b858558df14b6009887d2499de218bf10fb6c419c46a301cc71c8274283970255b568aa954baaa4acd45719e22685623dc0fb1c92c3833f929aa2aaa22b07be4ae5ad0b799a67860bd7a62520370ad9927bc7b5ae21c108e2f6362b1c430a73b578d848fb9497da560c7e6518cb40a878a05df478345f99b3f7d32c6e673393a65279b408c2e1495efb3c950aae8cd99d4c7751c8d6bbe361a5d7055e9bb44dc6f46dd97a0250d6c60e25d8a6fda53ecb2f355455ceb884038f485345d0d96ef664b03d246c14b0e0488442d002cc82b7e302894ca265001d002084038f485345d0d96ef664b03d246c14b0e0488442d002cc82b7e302","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1926,"b11cun030_00040012_13ee3d34":5089},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-30","count":33}],"recent_events":[{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"85d929ef-f9a0-48bb-b5da-31232be8f1e6","seq":1,"duration_ms":114,"bytes_in":16,"bytes_out":12,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004.*��`2\u0002\u0001\u0003\u0004\u0017cn=atddtrqrjyepnxafepuw�\u0014atddtrqrjyepnxafepuw","payload_hex":"303a02042e2ac9e160320201030417636e3d61746464747271726a7965706e78616665707577801461746464747271726a7965706e78616665707577","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"02769bf7-5ed7-46e3-a78f-1868a8bdb183","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"b4ac3cd8d3607f0c","strings":["cn=atddtrqrjyepnxafepuw","atddtrqrjyepnxafepuw"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"4f0f0902-4882-4a5d-9a50-def5036eaa71","seq":1,"duration_ms":101,"bytes_in":71,"bytes_out":12,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006vwRET8","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006767752455438","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9681dd56-84b9-4528-8cc5-e7668676666f","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12,"enriched":{"digest":"b03422f9368566d0","strings":["adminclient-5","vwRET8"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ed4cbd93-8a06-4a5c-b2c8-f8cc56988191","seq":1,"duration_ms":101,"bytes_in":14,"bytes_out":12,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c815c873-ba1c-4063-921f-2a31c4e72fe3","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:45:12","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"57e674e9-3000-4384-a204-ea0400b128a9","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":12,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:45:11","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:23\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"a1c0561d-1569-4e30-b846-80ebf0b6c9b7","seq":1,"duration_ms":13,"bytes_in":191,"bytes_out":12},{"timestamp":"2026-09-30T07:45:11","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c7fcf2b5-aa2f-4bff-b987-2b1b2bdcceb8","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":12,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-30T06:16:21","port":21,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e875f3ee-a75d-42d0-bdad-17a26d22e478","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":34,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":4,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:23","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T09:59:32.933434+00:00"}