{"ip":"34.62.191.200","data_as_of":"2026-10-25T02:40:36+00:00","observed":true,"total_events":28,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["28 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,481 bytes sent","bytes_sent":1481,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-11T06:11:21","last_seen":"2026-10-11T07:02:30","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"200.191.62.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":18},{"port":143,"proto":"tcp","label":"IMAP","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-11","count":28}],"recent_events":[{"timestamp":"2026-10-11T07:02:30","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5e43fb4d-c01d-4f6e-8713-b7b254123802","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":20,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-11T07:02:30","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"4dff2e2e-77b6-4aaa-9275-e8ca0e8abddd","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":20,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-11T07:02:29","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"733d8a20-7377-44da-92fb-5519fda14ecf","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":20,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-11T07:02:29","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006jjtODD","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100066a6a744f4444","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b0218874-0cd0-4aba-87d0-2ba4e89e687d","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":20,"enriched":{"digest":"bc335308466b22cb","strings":["adminclient-5","jjtODD"]}},{"timestamp":"2026-10-11T07:02:29","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e8ad6e86-92eb-4724-bddc-c2a4d98ed5e4","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":20,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-11T07:02:28","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0ae13658-f742-4955-8f9c-bd6780975194","seq":1,"duration_ms":195,"bytes_in":16,"bytes_out":20,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-11T07:02:28","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004v)�\u0005`2\u0002\u0001\u0003\u0004\u0017cn=kvnsjhthbzjwbykjcctz�\u0014kvnsjhthbzjwbykjcctz","payload_hex":"303a02047629980560320201030417636e3d6b766e736a687468627a6a7762796b6a6363747a80146b766e736a687468627a6a7762796b6a6363747a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"993ed5da-6471-4a40-8a07-61d55b1b1862","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":20,"enriched":{"digest":"dcfe538d0b15d468","strings":["cn=kvnsjhthbzjwbykjcctz","kvnsjhthbzjwbykjcctz"]}},{"timestamp":"2026-10-11T07:02:28","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"7FYWU8I4 CAPABILITY\r\n","payload_hex":"3746595755384934204341504142494c4954590d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"55496462-7f61-4df3-8443-5120f2db6e29","seq":1,"duration_ms":195,"bytes_in":21,"bytes_out":20,"enriched":{"digest":"d8979da7d9551275","strings":["7FYWU8I4 CAPABILITY"]}},{"timestamp":"2026-10-11T07:02:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:143\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3134330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"d5ed33ed-09ae-4553-b8dd-f793e6948c41","seq":1,"duration_ms":94,"bytes_in":190,"bytes_out":20},{"timestamp":"2026-10-11T07:02:27","port":143,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0821a608-069b-4c73-8915-d746aa51473b","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":20,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:143","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}