{"ip":"34.76.171.253","data_as_of":"2026-10-25T02:30:37+00:00","observed":true,"total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"974 bytes sent","bytes_sent":974,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T02:50:16","last_seen":"2026-10-13T06:21:00","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"253.171.76.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-13","count":18}],"recent_events":[{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"d0978b28-24c4-4bc2-9585-3f0d4f31aef2","seq":1,"duration_ms":11,"bytes_in":191,"bytes_out":5},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d9c6668b-5bdc-4944-8417-c16418f9de1e","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d4bd4757-d501-4a2d-b5d8-81d1f7a0ec1a","seq":1,"duration_ms":110,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004(p85`2\u0002\u0001\u0003\u0004\u0017cn=mrigmjujxaeoucutguuw�\u0014mrigmjujxaeoucutguuw","payload_hex":"303a02042870383560320201030417636e3d6d7269676d6a756a7861656f756375746775757780146d7269676d6a756a7861656f7563757467757577","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5842437f-354b-4807-9fd2-bf28bce26717","seq":1,"duration_ms":101,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"10e7a39793847f56","strings":["(p85`2","cn=mrigmjujxaeoucutguuw","mrigmjujxaeoucutguuw"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"3bef9e84-f482-4a47-98f3-43f843d936af","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006R4jNRK","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d3500000001000652346a4e524b","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b34126d2-883e-4dd7-a1d5-d5b5607ae6f0","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"5028860b14c31eb6","strings":["adminclient-5","R4jNRK"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ae668d31-1751-4892-8e69-661282105427","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5005f1ed-fc46-4af0-929b-3b858c9ecdce","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-13T06:21:00","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"d4852e62-120d-4bd2-ace7-025f49d60d05","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":5,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-13T02:50:19","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"db08f964-f933-4fc0-8c41-ca9f7c18e0a7","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}