{"ip":"34.34.137.196","total_events":29,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["29 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,504 bytes sent","bytes_sent":1504,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T02:29:56","last_seen":"2026-09-28T06:58:34","events_24h":0,"events_7d":29,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"196.137.34.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":20},{"port":110,"proto":"tcp","label":"POP3","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c003035534d5c7bf18324aa4332988d1b49ccf05478415365dc9287663a4c62fb182e4201b0848cdb3af01ece98a9526a2a5aa88266f0ac90ca4a20410456ffaed6f9ce70032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c0afb017c26977ff2ab72ab5347edb43c2ec8a69f36b358a7207e146151a92bffccc0bd5172f680d7e97cf0d0746ac43af6e0228371199aa8aaffa163bb581c181caa82b15866eeca5326b3b63a612056750a63a914e1949fc7532038551d87ca04c242885241fb98b43010864ced63b26361478b98b35c4aa9b73787190b8914c04a4732ba75c93c2044a20abcb8304bc7e46b2b39a910bf79f1368835ba53dc6ec2d381a9b418c91106476b215b25ddcc8c1157f9fe9c007eab5a12040044436da0b6194b9680064c86421bcfcb07bd96c490ac8a2e909aa980691d06ca7feb663d65caaec24ced8b585beabcbe8a2cebc7cceb4209a41131a9d2aab03b34d52250e4b81b42f231498516e9f0b04b7c0977534365b5cab2ffc77a4f42ee1f8ad5d13c29afc3bbc04a14edbb084d4500d08683cc5b25de70f37611d2e672f54b723cb6733bc6a5ecbb270900a5607a96bbc09316fb647e02c691eb46c4a742d89e97259518f12e83286e694a6c554f4b831d9634115695bfacb1a048035a0c19978b04492d289cb7cc4d31ab6d3d61128c70198a09bcbcc53a114616c2907bf4337bd361e1ba626a417484126861e36ca2a15a9fa1543fc6c2f3e3880be296e074b93afba330d3cb064f5956e1c1e44aa0ef8762e8ff24060ca036130b632050c351c01d05b7f771a9aa2bb51fad9173a84aa3b13bce0696ed7685d12f64b83b3382fb694289193719564728683bbe023603b01bb8962165b7e8bb9021113071787a3e68b8acbe974b5bc4ce2e64aacd03481220075397dd9e54e573b40e9e185cac9047e472b3be93c67120a5aa471d2186087390e21d2aa774144fde62a735aaa8012aa71a1c3332c55104abb4553c8d7865269f1822ec0b38fc32c26904e14d65894b141dd13bd742b6c26993b4e9b15af8c9dae79acbf150ba341aa77bc630ad8c0975634cc7790a294cde174081aecc1d8917bf81294e219832b75cbb48c38ed063fe6d40bcbd91ec1bac96c9c72947a53164a9343d31a99b889d4f41ee7176b2666c30e54b0f0abbbebabc8e973a7af3225df71b327325e07006138f6a4922bad2183969f871026356558677fdb7802b1db4cbbfa2c8e8199a9a74045347feb640b1d2a90e136b535e53aaee9374dea3d6f8cc571555b4cea6d892b5e81654a7ad54b9b035486590b98d72ab1346425a1099f68241362adf22056201b850cd836f76a8c7329cec52312e5112aff3b334244c52f005bb02a5c491b7e688865c67a86e5ecb2a314032f07661732778c828d45e6ce582a0093cb02e3741349a6b741bb5da5251e35447e9b97bb78a0ac2a6b1ed503535516962e7687ebe523d32b9e929a4c005782918227c9640b4c464c1ae40885a6623406a37d275e39740339c9b6c21760aad08959a2742c7521e41b23942011ff1c5b141618cb8679e1d8cfa0c0ad97c0656e3ac57ac28baa3318e428b560845e80c30485134787754bed325eaf9aba16f350c6e71ab9c117a3386885c08e4bd86cf911685c8958bd01c2cd15a11411aa074840c1e8509f89a747e0156201181e07750ada9f5d6894751961beeca626295667b96b28dc519ea20753287a316719abf8263dd26e9722088e7d6c4d9086969d02152b50cee90ec293c30f42ca502987dd93fe2646723d48363e9f5975f46b428aa52659ce9ef3894c87806d7c363f6ff01d6a589702c564001d0020363e9f5975f46b428aa52659ce9ef3894c87806d7c363f6ff01d6a58","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1928,"b11cun030_00040012_13ee3d34":5092},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":29}],"recent_events":[{"timestamp":"2026-09-28T06:58:34","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1043e313-6291-4a25-965a-fb308e7ebb2a","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T06:58:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b97823da-638c-4825-9c44-4850d87ea368","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-28T06:58:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006HDQqUY","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006484451715559","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"8ed721d3-6285-45fb-b279-46ed5165ed65","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"a62e11bedb0e0b9e","strings":["adminclient-5","HDQqUY"]}},{"timestamp":"2026-09-28T06:58:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1b41bcf0-e62f-4643-b594-954dffe72884","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T06:58:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c85e82cb-e27a-4a9d-bcff-fb1e0d8f1f13","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T06:58:32","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004V�}*`2\u0002\u0001\u0003\u0004\u0017cn=ebehfwrmjmpxemciqnvw�\u0014ebehfwrmjmpxemciqnvw","payload_hex":"303a020456f07d2a60320201030417636e3d656265686677726d6a6d7078656d6369716e76778014656265686677726d6a6d7078656d6369716e7677","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"aa206aa5-ff4f-49e1-8312-09e9bba7e27d","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"f575af6bf78a45bf","strings":["}*`2","cn=ebehfwrmjmpxemciqnvw","ebehfwrmjmpxemciqnvw"]}},{"timestamp":"2026-09-28T06:58:32","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"eeaea9da-03a8-41e8-89b0-279e36e4081e","seq":1,"duration_ms":195,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-09-28T06:58:31","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c5e396f6-518f-40ee-9423-f2dbcb2fc08b","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-28T06:58:31","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"21a5817e-7be6-46c2-83a4-99dcf35f2c48","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-28T06:58:30","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"e9c09cc2-84ee-42ab-abf0-235370161a10","seq":1,"duration_ms":95,"bytes_in":191,"bytes_out":20}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T11:33:21.195177+00:00"}