{"ip":"34.14.58.142","total_events":29,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["29 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,502 bytes sent","bytes_sent":1502,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T04:14:05","last_seen":"2026-09-28T07:41:58","events_24h":0,"events_7d":29,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"142.58.14.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":20},{"port":110,"proto":"tcp","label":"POP3","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1976,"b11cun030_00040012_13ee3d34":5076},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":29}],"recent_events":[{"timestamp":"2026-09-28T07:41:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006jz6Al0","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066a7a36416c30","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"24d8a07e-cdc4-4a04-bae1-2338f922323b","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"c35ea56854e1f089","strings":["adminclient-5","jz6Al0"]}},{"timestamp":"2026-09-28T07:41:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"aaf89b3e-3d69-4d56-b8e5-0fd146d41c38","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T07:41:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"a127d9eb-bd44-40ba-b60a-19b3196e0dc3","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T07:41:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"2d6ec0ea-3930-4412-b0ed-2e0cdfd7e666","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T07:41:57","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004n@Z�`2\u0002\u0001\u0003\u0004\u0017cn=aupcyzgcehpqswplixop�\u0014aupcyzgcehpqswplixop","payload_hex":"303a02046e405ac260320201030417636e3d61757063797a6763656870717377706c69786f70801461757063797a6763656870717377706c69786f70","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5eabe72c-331d-413b-9ac8-9ea8e0a9d462","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"a75943488d71eda6","strings":["cn=aupcyzgcehpqswplixop","aupcyzgcehpqswplixop"]}},{"timestamp":"2026-09-28T07:41:57","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"66578510-c50d-43a5-b313-9cf838a73e34","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-28T07:41:56","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9d656be6-6343-44a0-9c96-90198280dfb2","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-28T07:41:56","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"145ca93f-1ffd-43e3-8e21-4f8b584f544e","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-28T07:41:55","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"80865d5e-4191-463a-95c5-5dfa16f7d22a","seq":1,"duration_ms":95,"bytes_in":190,"bytes_out":5},{"timestamp":"2026-09-28T05:20:10","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"63ed7457-7c17-4f93-ac9b-fc67378ea2cc","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-01T11:50:29.833890+00:00"}