{"ip":"34.22.115.132","total_events":33,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["33 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,783 bytes sent","bytes_sent":1783,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-02T02:55:20","last_seen":"2026-10-02T07:29:38","events_24h":33,"events_7d":33,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"132.115.22.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":990,"proto":"tcp","label":"FTPS","count":30},{"port":3389,"proto":"tcp","label":"RDP","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2002,"b11cun030_00040012_13ee3d34":5052},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-02","count":33}],"recent_events":[{"timestamp":"2026-10-02T07:29:38","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5c870bd1-be32-4a92-808e-cfc26a859fd1","seq":1,"duration_ms":101,"bytes_in":71,"bytes_out":34,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-02T07:29:38","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006rdu4bp","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006726475346270","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"fb1897a0-09a7-4204-8da0-609c4151976b","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":34,"enriched":{"digest":"4f7ff0e5aad92451","strings":["adminclient-5","rdu4bp"]}},{"timestamp":"2026-10-02T07:29:38","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e5aa134d-5fa0-4544-b721-7d53506132e9","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":34,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-02T07:29:38","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"3376e617-d60b-467c-a4c0-704feb0dc555","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":34,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-02T07:29:38","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"16e3cc20-a935-4b91-abd9-cff3debd4312","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":34,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-02T07:29:37","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:990\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3939300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"50af4f1b-86de-4664-9128-ff9fe27ff1c2","seq":1,"duration_ms":11,"bytes_in":191,"bytes_out":34},{"timestamp":"2026-10-02T07:29:37","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO example.com\r\n","payload_hex":"45484c4f206578616d706c652e636f6d0d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"2ed301a0-4398-4823-b530-ef15adf83a3c","seq":1,"duration_ms":111,"bytes_in":18,"bytes_out":34,"enriched":{"digest":"cbacbcd31c19589f","label":"SMTP","strings":["EHLO example.com"],"iocs":{"domains":["example.com"]}}},{"timestamp":"2026-10-02T07:29:37","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"303bd1f4-1155-4720-945d-1d0be01182fc","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":34,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-02T07:29:37","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"7f178927-f50c-4020-b12c-285336f44160","seq":1,"duration_ms":111,"bytes_in":16,"bytes_out":34,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-02T07:29:37","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004i\u0006\"W`2\u0002\u0001\u0003\u0004\u0017cn=kywulsodspjvlesrjlzf�\u0014kywulsodspjvlesrjlzf","payload_hex":"303a02046906225760320201030417636e3d6b7977756c736f6473706a766c6573726a6c7a6680146b7977756c736f6473706a766c6573726a6c7a66","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"8655abfa-cc84-4e87-a7ab-5a9dcc64b3e4","seq":1,"duration_ms":101,"bytes_in":60,"bytes_out":34,"enriched":{"digest":"80b0e4c01726f08c","strings":["\"W`2","cn=kywulsodspjvlesrjlzf","kywulsodspjvlesrjlzf"]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:990","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-02T21:48:53.365420+00:00"}