{"ip":"34.62.154.179","total_events":20,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["20 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,016 bytes sent","bytes_sent":1016,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-29T02:44:01","last_seen":"2026-09-29T04:30:27","events_24h":0,"events_7d":20,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"179.154.62.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":143,"proto":"tcp","label":"IMAP","count":20}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c00303853b0592422baac3e7ace4492ec78d7072dfa0a09264c13e1644d70a288d7c5920a40f61bf054e7cda8f37ffbf3b2ffdbf987cd3dbbd2b7de1fa8dd884c8a1e3cb0032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c09dcc9da826b7b9925f47f52b36cb0d49932862c875a720b345a771964c2896d01834846916eb5dbf855c2aaa5ba59ca12fb2b5c6a40583f1abf3ba5a94c41b1f6cb9d1e27271e580badcbac7dc9edc1730548b3ef564412783b72d3b9d64756792aaa634ab93823174b5694e5efb249357637b8a2abccb6510c81026f68f72e29165e14f68e35eb18b6e460a33bcc20a0663930e81aaa0241daddc7ea8a88a328a7fd857cfc606a1a0b58c2d151a1b8b82dca431e89490ab5765d09c1008786eb8a10606b5c48fd0b30e4868585885bcac19f805939bd140d544310ad98d431b99d4bc36b705c07b85309afc8723f9aa4ee19261f119b8d8c3fdfb7c86aa7516571c33a256c917669d8ca1f995a838942511111f334b6c6ea0742df22f0d2319fe2b57005b44211313fb1781748a475bf047a9f85007688fd5f9a6069471b6d5b79333b6ed1895f312b5ee8436f4b6713605138c4b3bf74537c9579f97e2291c601e23028ae1d8c267f6494ff4b714fc3c56325a83eba4fa9777f40a73b1427eb2c8187ca7bd7c21a798bcbf23a37cb48233da1aa0427a97fe492a7b747ddbb8ab4ab6b26b7979960c08eb79c293f409d78798e224283b34845a41bf1e64a95fb098a447083116559228b351b5a0da36aa69782d910310003a376e25b384249de2675e01d582b737393ed069b0240069333f8a94490a3c2b25a0c802b42d1e3c14b9e4218151a463d1912df38dab27846d113dff275003984df3a920f6f147ed658274b252909b59ab04798e3798c6f96241e44c027473a361469977be78b1b37d361367768454225eede764d30ab6bd13138c0b4d5d741e84970b8cf065ca943bd87286e1f136e0c31ed82b25997b0752d137e30546bee3121c97b6c0b41a12173a0f9618f324a8eb9c38e4c0c969c3c617829c76bcb26fa4605620c6bfe5229f1b85521b3a9a68a014a0883fca8a37016d80c7824fd975db7b2426a38feb071cc2e31bc5f5873a9231d9299cce98b80c45928484102ad4357e87cfc3e56763476b76b0935903a3dc1a1721717217378620ab1f58f42b37dc4c618643e2377d58060c05430436455cc1e9a379747900451641278f1f65cfe27189fbe252ae0479a5a48055e18e85348e8bc1c4a61b877813bc8ce173814621a684c7f6a2bee06461a9e815595024af68a2d2fa817cc9464e9a65b6325d7cf38a31a585f33988a2755d9649692c406e4e18067b5a2b3c45928c135a32bc44536c4ffff0495764ca8434ac9845120ac30e51948f4243548240ccd6a136414b88b3396a97a9c98d346497e08333113132b420e0c897edccc281978c049323ea94cca6e54c08210469639140823af9c6191e3204d8053c3cb3797557c6edd98b5b594e56534bb5d45d5ac5412b50c817c9b3865386f0ba0d30355a5e84c3cf901640c9431300733652a66773aad2e69b7a637e1c653dd9408411a88affe2070a905bfc0cbcb059c44d735f8b8897686c02eae148ad43544e2b3428c8943d89c7ac119dd1971609369b561758ddd2c4a051bc5440cc5e72ba3d33a9a4c1747b05b19ab70ab7a6050ea00c6cb0a5a065a50efb83b010b39274125b486dfc5673a6e406302260d1a169555a7f4e31a919064478cd0416e4d2dc71ad4817057b6fd8ecad18ea0bf1862f943df63dc21fc14ae5bff33fb6ce69bf32859e87c4ef8cc45408fde3ffc5e33e001d0020943df63dc21fc14ae5bff33fb6ce69bf32859e87c4ef8cc45408fde3","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1928,"b11cun030_00040012_13ee3d34":5092},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-29","count":20}],"recent_events":[{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"ff752cef-c872-4a9d-8aff-2151aa59572f","seq":1,"duration_ms":10,"bytes_in":191,"bytes_out":20},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f4e60528-e98b-4638-b551-077cd5f9ff1c","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"51044a71-ede6-4aa2-bd91-1e2bbbdcf070","seq":1,"duration_ms":110,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u00042�(\u001c`2\u0002\u0001\u0003\u0004\u0017cn=oloosuxvntbsksaayots�\u0014oloosuxvntbsksaayots","payload_hex":"303a0204328a281c60320201030417636e3d6f6c6f6f737578766e7462736b736161796f747380146f6c6f6f737578766e7462736b736161796f7473","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"bb001974-bad4-4d6f-ae32-0a2c3f723cf0","seq":1,"duration_ms":101,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"b84d8cbf21d62025","strings":["cn=oloosuxvntbsksaayots","oloosuxvntbsksaayots"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b0c33f35-93fc-497c-b42e-d95ce0677733","seq":1,"duration_ms":111,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"58c74c93-2c44-4af0-a768-06306f55a8ae","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006jUYPYt","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066a5559505974","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"a22b724c-02f2-41d4-bb6f-7868a65c665a","seq":1,"duration_ms":101,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"23a6515fd81784d6","strings":["adminclient-5","jUYPYt"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d22b4676-6cc1-47fc-b17e-ff22369b4661","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"08e41f07-9e10-41dc-b3e2-6baa4f2da728","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-29T04:30:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"1026879d-6d37-4d44-94de-267187bba9e6","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T10:48:57.715862+00:00"}