{"ip":"34.38.151.53","data_as_of":"2026-10-25T02:39:43+00:00","observed":true,"total_events":37,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["37 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,968 bytes sent","bytes_sent":1968,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-17T04:18:55","last_seen":"2026-10-17T06:09:00","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"53.151.38.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":27},{"port":143,"proto":"tcp","label":"IMAP","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-17","count":37}],"recent_events":[{"timestamp":"2026-10-17T06:09:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"689fda2a-d2f8-42ec-8a37-97c9190c901d","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-17T06:09:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ecb58e2b-7fa2-4efc-a121-71e22358a5a7","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-17T06:09:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"a129746f-f370-465a-b32d-39dd382a3af6","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-17T06:09:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006LyYh0a","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100064c7959683061","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b9dce586-d2b7-4c06-8bc0-98994c72796f","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"77bd472c8320e627","strings":["adminclient-5","LyYh0a"]}},{"timestamp":"2026-10-17T06:08:59","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f297fe24-06f4-4987-b092-8b8d4a7daff4","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-17T06:08:59","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004\rf��`2\u0002\u0001\u0003\u0004\u0017cn=tukaabmkxexymaggbwin�\u0014tukaabmkxexymaggbwin","payload_hex":"303a02040d66cfdf60320201030417636e3d74756b6161626d6b786578796d6167676277696e801474756b6161626d6b786578796d6167676277696e","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d7b0c3ca-9409-401b-8dbd-8d1ec2aed504","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"90bbfb1514ff5fa1","strings":["cn=tukaabmkxexymaggbwin","tukaabmkxexymaggbwin"]}},{"timestamp":"2026-10-17T06:08:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"13d6ba44-c215-44e1-ad6b-d64b3d4d1298","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-17T06:08:58","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"94c34084-6af5-4563-bdcf-afb4d8d22361","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-17T06:08:57","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"e8c95275-ceb9-4ba1-aa31-b69d8b0e8c41","seq":1,"duration_ms":94,"bytes_in":190,"bytes_out":5},{"timestamp":"2026-10-17T05:02:19","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"6d2da0d0-7280-4ced-8340-4eb146720356","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}