{"ip":"34.62.127.24","total_events":30,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["30 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,525 bytes sent","bytes_sent":1525,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T02:45:22","last_seen":"2026-09-28T06:33:09","events_24h":0,"events_7d":30,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"24.127.62.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1928,"b11cun030_00040012_13ee3d34":5092},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":30}],"recent_events":[{"timestamp":"2026-09-28T06:33:09","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"68771c3d-783f-4264-a695-f185dc2e39f9","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T06:33:08","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006GZFzlD","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006475a467a6c44","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"217efc23-f06d-48f8-b668-8a9c77f26f50","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"698a1106c6d93966","strings":["adminclient-5","GZFzlD"]}},{"timestamp":"2026-09-28T06:33:08","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9410ee32-a433-48ed-aef3-9121eb5aeca7","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T06:33:08","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"4d41c054-8894-48c0-93e6-a251dbe90a67","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T06:33:07","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u00040�\n�`2\u0002\u0001\u0003\u0004\u0017cn=wduefwydwuhmbeiuavlm�\u0014wduefwydwuhmbeiuavlm","payload_hex":"303a020430f90a8160320201030417636e3d77647565667779647775686d6265697561766c6d801477647565667779647775686d6265697561766c6d","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1d5eb1cf-8cdd-4103-9c67-4acdb675f9e4","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"34797926df699024","strings":["cn=wduefwydwuhmbeiuavlm","wduefwydwuhmbeiuavlm"]}},{"timestamp":"2026-09-28T06:33:07","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b7256b17-3750-4e6c-b41c-e6b628b36d89","seq":1,"duration_ms":196,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-09-28T06:33:07","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"bca91540-87fc-4f28-9e29-db272d4f7123","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-28T06:33:06","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f96739fe-6287-4b19-b025-ed5e1df8f407","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-28T06:33:06","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"a1dd9b83-ecb3-4d1e-848a-b9031a581d63","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-28T06:33:05","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"47c86077-e9d3-46e8-a3b6-84fce6a3fe11","seq":1,"duration_ms":95,"bytes_in":191,"bytes_out":20}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T10:48:57.531179+00:00"}