{"ip":"207.175.0.21","total_events":116,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"79+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 79 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-05-28T16:41:41","last_seen":"2026-07-03T09:37:32","events_24h":0,"events_7d":17,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"21.0.175.207.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":445,"proto":"tcp","label":"SMB","count":10},{"port":9200,"proto":"tcp","label":"Elastic","count":6},{"port":873,"proto":"tcp","label":"Rsync","count":6},{"port":8873,"proto":"tcp","label":"","count":4},{"port":139,"proto":"tcp","label":"SMB","count":4},{"port":1023,"proto":"tcp","label":"","count":3},{"port":443,"proto":"tcp","label":"HTTPS","count":3},{"port":2049,"proto":"tcp","label":"NFS","count":3},{"port":17,"proto":"tcp","label":"","count":2},{"port":18264,"proto":"tcp","label":"","count":2},{"port":8649,"proto":"tcp","label":"","count":2},{"port":27017,"proto":"tcp","label":"MongoDB","count":2},{"port":9981,"proto":"tcp","label":"","count":2},{"port":4840,"proto":"tcp","label":"","count":2},{"port":16018,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6"],"tls_ja3":["f80d3d09f61892c5846c854dd84ac403"],"ja4h":["ge11nn0500_2d30dc89d981","ge11nn0300_042112399351"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":302,"ge11nn0300_042112399351":3366,"ge11nn0500_2d30dc89d981":1143},"user_agents":["Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0","python-requests/2.32.5"],"timeline":[{"date":"2026-05-28","count":7},{"date":"2026-05-29","count":2},{"date":"2026-05-31","count":8},{"date":"2026-06-01","count":9},{"date":"2026-06-02","count":5},{"date":"2026-06-08","count":2},{"date":"2026-06-13","count":19},{"date":"2026-06-14","count":3},{"date":"2026-06-15","count":9},{"date":"2026-06-16","count":2},{"date":"2026-06-17","count":1},{"date":"2026-06-19","count":1},{"date":"2026-06-24","count":2},{"date":"2026-06-25","count":14},{"date":"2026-06-26","count":5},{"date":"2026-06-27","count":10},{"date":"2026-06-29","count":1},{"date":"2026-06-30","count":11},{"date":"2026-07-03","count":5}],"recent_events":[{"timestamp":"2026-07-03T09:37:32","port":30700,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:30700\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a33303730300d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:/H51AZN/9HRykutFIvT6LF6ZMLg=","ja3":"","session":"36efdf65-2916-482d-8648-dab45be93be5","seq":1,"duration_ms":100,"bytes_in":151,"bytes_out":77},{"timestamp":"2026-07-03T08:11:58","port":3570,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3570\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333537300d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:x2JQTVkzDIKgxfGfmbd1z+Ho/9A=","ja3":"","session":"17d01c5d-887e-4a81-adcf-11f5260d3b11","seq":1,"duration_ms":100,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-07-03T07:42:01","port":1023,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1023\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313032330d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:XdjJLSOTPwmDi1Jn6b3Qzzfin8E=","ja3":"","session":"2dfa0173-ae13-40a6-bef4-216eba7bb010","seq":1,"duration_ms":100,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-07-03T07:05:01","port":16098,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:16098\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31363039380d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:8N9JM2vYqeSzGhOVVy+mNuYvfrA=","ja3":"","session":"92cffafe-01de-4a5a-bcf7-4376a6077cc9","seq":1,"duration_ms":100,"bytes_in":151,"bytes_out":77},{"timestamp":"2026-07-03T06:06:10","port":5901,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5901\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353930310d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:hG2rrGjYXadcr92S5NeTKdomxis=","ja3":"","session":"2e3ec8a1-7ca3-41af-8820-fb1e68ff1852","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":77},{"timestamp":"2026-06-30T10:16:34","port":55521,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:55521\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35353532310d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:g8JoTh3lTgQuAyNwH+DsNON66qY=","ja3":"","session":"a16a6942-8d93-4f96-8116-fe43e0ad1b07","seq":1,"duration_ms":100,"bytes_in":151,"bytes_out":77},{"timestamp":"2026-06-30T10:03:30","port":18081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18081\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038310d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:aCninjsy0q1GDHn8sBCZWJzSaNM=","ja3":"","session":"a2be84db-c8dd-442e-a405-60981de7417e","seq":1,"duration_ms":100,"bytes_in":151,"bytes_out":77},{"timestamp":"2026-06-30T10:01:15","port":45666,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:45666\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34353636360d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:xThFAq9oGWyz5CC7wd+KgmXLpgw=","ja3":"","session":"58c033ea-47d0-43b7-9c82-64fd8504442b","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":77},{"timestamp":"2026-06-30T09:50:38","port":7441,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:7441\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a373434310d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:GgG7qO4YL2TE7Aamh9BLEKo5H7A=","ja3":"","session":"cd807ec6-dd1d-40c4-a020-24fcdf03605f","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":77},{"timestamp":"2026-06-30T09:10:53","port":6633,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:6633\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363633330d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33322e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.32.5","community_id":"1:kQs5Fprfj8HB54uw/SjcsPnsjWM=","ja3":"","session":"8f1a6cd1-67ba-4d9c-9f75-cb3ce3160c61","seq":1,"duration_ms":100,"bytes_in":148,"bytes_out":77}],"http_methods":[{"method":"GET","count":86}],"distinct_ports_total":79,"top_paths":[{"path":"/","count":86,"ports":72}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":3}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:30700","notable":false},{"name":"User-Agent","value":"python-requests/2.32.5","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-07-04T10:05:16.736261+00:00"}