{"ip":"207.175.86.60","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,460 bytes sent","bytes_sent":1460,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T06:48:55","last_seen":"2026-09-28T08:03:35","events_24h":0,"events_7d":27,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"60.86.175.207.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1874,"a11cun030_0000004c_13ee3d34":2672},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":2,"ips":2672}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":27}],"recent_events":[{"timestamp":"2026-09-28T08:03:35","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9192dda8-68d3-4a28-bd97-0e1e1ff9d0bd","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T08:03:35","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1ca7e5f8-02f2-4749-a3d5-abb647fa87bf","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T08:03:35","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"57e91442-091c-4adc-8594-4757e409913f","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T08:03:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"acf96dc1-2611-4f77-8350-4cf8bb2d983f","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-28T08:03:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006fxDoMD","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066678446f4d44","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f7ce2509-7c2a-4022-99d7-d55f37a0a9ed","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"a06b3a952a604052","strings":["adminclient-5","fxDoMD"]}},{"timestamp":"2026-09-28T08:03:33","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"bd33556d-8fc0-4741-b566-a1c6e9360ec1","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-28T08:03:33","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"6f44813e-c1f8-437b-8eb4-31055637d565","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-28T08:03:33","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u00044cJ�`2\u0002\u0001\u0003\u0004\u0017cn=vvqccljfhsebnjgklehr�\u0014vvqccljfhsebnjgklehr","payload_hex":"303a020434634ad260320201030417636e3d76767163636c6a66687365626e6a676b6c656872801476767163636c6a66687365626e6a676b6c656872","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"8adcefc2-451a-42e4-a248-628961492917","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"9c37cddd5ef66f55","strings":["cn=vvqccljfhsebnjgklehr","vvqccljfhsebnjgklehr"]}},{"timestamp":"2026-09-28T08:03:32","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"09b752b0-65eb-43b7-ba37-dde6830d49c8","seq":1,"duration_ms":95,"bytes_in":190,"bytes_out":5},{"timestamp":"2026-09-28T07:06:21","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006jhcwMl","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066a6863774d6c","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c068a560-da18-4d03-863c-4b75223f9e1b","seq":1,"duration_ms":101,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"56269f838269e823","strings":["adminclient-5","jhcwMl"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T01:06:31.670110+00:00"}