{"ip":"34.156.73.229","data_as_of":"2026-10-25T02:36:30+00:00","observed":true,"total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"973 bytes sent","bytes_sent":973,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-15T02:49:12","last_seen":"2026-10-15T03:47:07","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"229.73.156.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-15","count":18}],"recent_events":[{"timestamp":"2026-10-15T03:47:07","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"13c2c97a-1ac9-4c8d-950f-1a98020ba155","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-15T03:47:07","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"12c82e19-e56e-4c4d-89c0-a705c9a0e1c2","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-15T03:47:07","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e6426c53-7a95-4674-9249-415beb38bed9","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-15T03:47:06","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006Od1prU","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100064f6431707255","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"290a137b-ff22-4155-846f-f4bf8ad6538c","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"81cf61c993d8508b","strings":["adminclient-5","Od1prU"]}},{"timestamp":"2026-10-15T03:47:06","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"75d4d614-06f3-4544-86a0-b470b504ff19","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-15T03:47:05","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004wYk�`2\u0002\u0001\u0003\u0004\u0017cn=dmzgqghmaapidpzwqqkx�\u0014dmzgqghmaapidpzwqqkx","payload_hex":"303a020477596bbb60320201030417636e3d646d7a677167686d6161706964707a7771716b788014646d7a677167686d6161706964707a7771716b78","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f830bf83-f7f5-4b91-82aa-cffd6c5db4eb","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"84f948113dbdd2bf","strings":["cn=dmzgqghmaapidpzwqqkx","dmzgqghmaapidpzwqqkx"]}},{"timestamp":"2026-10-15T03:47:05","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5621bac4-f981-4cdf-9e0e-2d67d45b23a1","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-15T03:47:05","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c9e1ee99-9b2d-442a-87e9-3e3a17134130","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-15T03:47:04","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"6e43632e-a9a8-495c-b1a2-a0e877bb534a","seq":1,"duration_ms":95,"bytes_in":191,"bytes_out":5},{"timestamp":"2026-10-15T02:49:16","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"550073f5-9c73-4da2-8f96-265b13833ee1","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}