{"ip":"34.78.147.129","data_as_of":"2026-10-25T02:33:15+00:00","observed":true,"total_events":21,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["21 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,237 bytes sent","bytes_sent":1237,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T03:57:00","last_seen":"2026-10-13T06:51:19","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"129.147.78.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":110,"proto":"tcp","label":"POP3","count":21}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2679,"b11cun030_00040012_13ee3d34":5328},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-13","count":21}],"recent_events":[{"timestamp":"2026-10-13T06:51:19","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:110\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3131300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"83e08875-28e7-4aea-80b0-e03117514004","seq":1,"duration_ms":11,"bytes_in":191,"bytes_out":5},{"timestamp":"2026-10-13T06:51:19","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"bfe15587-8cb1-4ef9-8f50-404b6c391268","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-13T06:51:19","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"6fbc32ba-e47d-40f0-b28b-a5d8f12fd6e1","seq":1,"duration_ms":112,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"983aa819-86f7-4c7f-977c-36ed261870d7","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b5098184-235a-43b3-96b1-fe38f1181e48","seq":1,"duration_ms":111,"bytes_in":16,"bytes_out":5,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004w�S|`2\u0002\u0001\u0003\u0004\u0017cn=eyacjafieahvowekniju�\u0014eyacjafieahvowekniju","payload_hex":"303a0204778c537c60320201030417636e3d657961636a616669656168766f77656b6e696a758014657961636a616669656168766f77656b6e696a75","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"44918049-4ab5-491e-a0f4-c847fed924f0","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"7b7a01326bbdc771","strings":["S|`2","cn=eyacjafieahvowekniju","eyacjafieahvowekniju"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"5b200695-f37f-482f-890f-58065ded10f6","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":5,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006zCynwd","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100067a43796e7764","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"00e1b3f7-3634-4754-94f6-e153bef3149c","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":5,"enriched":{"digest":"79966c93d622d66d","strings":["adminclient-5","zCynwd"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c8fc8d98-e2b4-42fe-a77a-6c0ac155a7f7","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-13T06:01:34","port":110,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f8104dba-b180-4313-8553-ef5066e93812","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":5,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:110","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}