{"ip":"34.52.128.86","total_events":29,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["29 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,503 bytes sent","bytes_sent":1503,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T06:36:15","last_seen":"2026-09-30T07:22:34","events_24h":29,"events_7d":29,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"86.128.52.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":20},{"port":110,"proto":"tcp","label":"POP3","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1926,"b11cun030_00040012_13ee3d34":5089},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-30","count":29}],"recent_events":[{"timestamp":"2026-09-30T07:22:34","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1a19afd6-01c0-4b87-87ed-09a605e26025","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:22:34","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9fd84739-9c8e-4d1f-b0a1-9719f454ad78","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:22:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"411350cd-ee9f-4e9c-b9c6-8a33d88a98c6","seq":1,"duration_ms":192,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-09-30T07:22:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"6748e495-c80a-4656-a39b-f53c9007660e","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-30T07:22:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006eR5UPz","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d3500000001000665523555507a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"cb9546e0-ac2a-40fe-9adb-1f1e421c495f","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"547df08392ae3420","strings":["adminclient-5","eR5UPz"]}},{"timestamp":"2026-09-30T07:22:33","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ff1b749f-31f5-4194-a4dd-a69362151cc6","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-30T07:22:32","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0be8fc43-3716-403c-8d7c-592b8caacc82","seq":1,"duration_ms":192,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-30T07:22:32","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004O�u�`2\u0002\u0001\u0003\u0004\u0017cn=gyvtivypxdgqnfvnwuan�\u0014gyvtivypxdgqnfvnwuan","payload_hex":"303a02044fd875b660320201030417636e3d6779767469767970786467716e66766e7775616e80146779767469767970786467716e66766e7775616e","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"3871bee4-a1d4-4f42-8e09-3b7e1a04abc8","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"f82f5dd9bc057055","strings":["cn=gyvtivypxdgqnfvnwuan","gyvtivypxdgqnfvnwuan"]}},{"timestamp":"2026-09-30T07:22:31","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"6f38e5dd-b4bd-421a-ab44-655ae685a56b","seq":1,"duration_ms":90,"bytes_in":191,"bytes_out":20},{"timestamp":"2026-09-30T07:22:31","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"832ae1be-84cc-4d9c-b534-0acb0f9705e5","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T09:59:35.301906+00:00"}