{"ip":"34.140.206.14","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,461 bytes sent","bytes_sent":1461,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T04:07:10","last_seen":"2026-09-24T10:06:28","events_24h":0,"events_7d":27,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"14.206.140.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1874,"a11cun030_0000004c_13ee3d34":2672},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":2,"ips":2672}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":27}],"recent_events":[{"timestamp":"2026-09-24T10:06:28","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ccbc34a8-b210-47bc-b76c-55e20ce3dbe2","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"e95be525-0fb7-48e1-856a-88bb6b2bcbc5","seq":1,"duration_ms":15,"bytes_in":192,"bytes_out":5},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e51dc64a-0d6b-463c-a1af-dbe6ed779d7f","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"846ca429-1839-440e-996e-f499a3aa44fb","seq":1,"duration_ms":116,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004O�wH`2\u0002\u0001\u0003\u0004\u0017cn=bnmbmaapczrzeeedxvme�\u0014bnmbmaapczrzeeedxvme","payload_hex":"303a02044ff0774860320201030417636e3d626e6d626d616170637a727a6565656478766d658014626e6d626d616170637a727a6565656478766d65","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c5731a61-6d45-45aa-978d-880a7a26ffd4","seq":1,"duration_ms":101,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"c592e82b7e4f654b","strings":["wH`2","cn=bnmbmaapczrzeeedxvme","bnmbmaapczrzeeedxvme"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"751166d5-b59b-418b-a416-b7a79ddeac2c","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006YBILiz","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100065942494c697a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"3e44bd48-6362-4843-bcaa-98a1f530bf8b","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"cfaa3490fd4a2977","strings":["adminclient-5","YBILiz"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5926cf7f-10a2-484a-88ef-68e1dfd51047","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-24T10:06:27","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"11be9b37-5470-4814-b74d-78f042680071","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-24T07:09:03","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d94a3123-9fbb-4674-9445-fc7ac9aec42a","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T01:06:39.312023+00:00"}