{"ip":"207.175.96.134","total_events":39,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["39 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,011 bytes sent","bytes_sent":2011,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-22T03:07:57","last_seen":"2026-09-22T05:54:39","events_24h":0,"events_7d":39,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"134.96.175.207.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":30},{"port":110,"proto":"tcp","label":"POP3","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c0030389fb1cc6914fa53f6dbff36611ae071d94d69a4481b1962796335655b23a14ba201f146df93ba022123277206ae4938aae4d3b12f4274ab57959f265d37da3f34a0032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c04622a5c46355f7f79c1d6440fe399640dcc6c713749adb39aac10a9fe81a11c5252b7107b8dc369d82bb6a8c2080264e0a224f5fac51c496a410e87209a7c02f56b939c80cf57b1f12a81c9470adcb22421c6a3764b195dd249c89424bf3821e733963eef87f30e33551e6c26d478059e3024aa96c5867ac85c4c354155c658c166ffb024c92b413a486d807c2d5a92c015c66159978b2b313184b9f809725cc1706f79c21eb21240b74805254245e45a4b95923ea9843162c3b2bf6290c5703e4b0c103e375dd0625703ca826dc09cbf8481d74571da63ba5da6064e6400da24027330cf5c12719d85ec175444b583bb1e582419acc4ed78c552c401ca4217dd47160322973e8a674da361ee6938b758b6aca5fbff802b022278cf66e70e75b2455a593546aa8241f4bc4a6b4f19d35573585a9cd2d35777bb4962f229258392dc934439bf3461849ba438c39f73a201f7b13a5c2ae54a30f84e7210929c67d540749aac0b7db6c7c26c09e465e3c05221c133fce2244126c94aee5c13844b4d080a9fbba8ccc965c7ca08f5ea461839c3c04d658b744b20c41b37c0b1024a26e660ab4d67b3c55ec97aa54130bd56e9917b0460436adb292a8d30317a93e8f4a3417d17b8aeb97fb31cba5b630d165a3e812a7349941f8709a703728abfa7b7f61364cb21eecf67b6eb6a7bbb0131af86e35214f35908012a8c20d3151d7aa4909a3933a838f4b55a6efe40d218ac6d241422d5b46bbfc5ff8e653062953343524fc229d08a081bf91910131746abc2371dac84ad4b647f876890743028383e6a4aee53114d60687aee56fc69ba80a345480fb806e6bc76a777258945f1d309641899c8964b958a94f6d867f79b79f7f303d46a9ae5a7917a15362a08747e5ebb240563a18768c367212010030383cba3d77c0c979b14ac53b56ec86eae170740b9533c850dd3236440b460cd1b6cab8460bd13f20e37c4086874c040cdfca0afd413d47b258c429937c6c8f8b28ae5e220bdec917ad42955d2634f5d8777b924d836855de1580e95ba27cf62ffa434e58943f4e420e846b82ebf9c06c3275758ccb57db8417809818b3303fd49242f051a18a55d29a4005c39c68d8c1b5c1891f6c1b6f0b86d1a55f58723635a15ad98a533eb7902f9458fe698d5d068740b2223d9c75915626e64b01f7cbbba9a92cc35117276c623641c8fca6ba0cb41503c408bfc251356061957341bcecc9d6163dc527c1b453ae1a95bd7aa530ff429ab3ea0d45e06b1d46c570c45d458a149ab96102b3b5df60c9266108ef262d81b6cfc8dbae61810ccfd5cd98472dabe27d27a9872291483906a8d1bc8ec940b1ab71cb9b835da40c796196a90a9cb31001293df77ea335b60580164c349de158cc00f0bab35ba0a4a118ca703fe06aa6a776ca9fc97a9ee9ce8b596abaf5ababf87ad9b60985c532d64c96ed462c58294c0ea37136c4af09049e9b35c8705a850530ca63c1c59407a46ef6b35765719b39bb30740af75920c2d227206bcf51e3a5834c38ece03d988828cdf74d4acaaa7711a4b998807a34146e294037c3968fbcac857c994745375687bbcc7a0234e450080c4b0d8b96fa8735c74903d0e171f6f639dd64bc3d1d1706dd59d00551045f92cc772944be0a8a7007bf50cad59555da2fd60d8fbe70ca17c846a0aa5dffff5426684d5c5905b2d349b0fa5de936001d002055da2fd60d8fbe70ca17c846a0aa5dffff5426684d5c5905b2d349b0","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":[]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1961},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-22","count":39}],"recent_events":[{"timestamp":"2026-09-22T05:54:39","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"a70bfad6-fd66-4560-a51b-3d13f62553ea","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-22T05:54:39","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"69da81f7-1351-4dbc-8b1c-5c0b458bd8c1","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-22T05:54:38","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c761b22b-5a70-4142-870a-fa27b5a9ff0b","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-22T05:54:38","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006WCx6oY","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006574378366f59","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f4a39e83-942b-4f02-b3c4-e9488958057b","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"1d790c93ffa48061","strings":["adminclient-5","WCx6oY"]}},{"timestamp":"2026-09-22T05:54:38","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"70a2b5bd-96d3-43c8-b014-05623109eb62","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-22T05:54:37","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1ccf3f4a-826b-491e-9362-3d98403c94db","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-22T05:54:37","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004GE��`2\u0002\u0001\u0003\u0004\u0017cn=jwgdqllsftrwmqiqnbkt�\u0014jwgdqllsftrwmqiqnbkt","payload_hex":"303a02044745b78260320201030417636e3d6a776764716c6c73667472776d7169716e626b7480146a776764716c6c73667472776d7169716e626b74","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"96420492-685e-422f-af78-6d829596e9ee","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"fcc09029239d590d","strings":["cn=jwgdqllsftrwmqiqnbkt","jwgdqllsftrwmqiqnbkt"]}},{"timestamp":"2026-09-22T05:54:37","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d67f9f89-f406-40e5-a9d2-70974dc9d069","seq":1,"duration_ms":195,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-09-22T05:54:36","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"d55434ac-ad19-45fc-8dac-8490e1f141d3","seq":1,"duration_ms":94,"bytes_in":190,"bytes_out":20},{"timestamp":"2026-09-22T05:54:36","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"48589f80-43a4-4d05-be00-5f1b1a86212d","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"185.228.81.201","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T12:58:28.771461+00:00"}