{"ip":"34.156.107.43","total_events":48,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"45+ ports swept","confidence":"medium","network_type":null},"first_seen":"2026-05-24T06:31:55","last_seen":"2026-05-31T07:23:10","events_24h":0,"events_7d":25,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":396982,"org":"Google LLC"},"source_domain":"43.107.156.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"top_ports":[{"port":27017,"proto":"tcp","label":"MongoDB","count":2},{"port":445,"proto":"tcp","label":"SMB","count":2},{"port":21025,"proto":"tcp","label":"","count":2},{"port":16020,"proto":"tcp","label":"","count":1},{"port":48001,"proto":"tcp","label":"","count":1},{"port":16148,"proto":"tcp","label":"","count":1},{"port":61616,"proto":"tcp","label":"ActiveMQ","count":1},{"port":2375,"proto":"tcp","label":"Docker","count":1},{"port":8340,"proto":"tcp","label":"","count":1},{"port":35554,"proto":"tcp","label":"","count":1},{"port":9105,"proto":"tcp","label":"","count":1},{"port":9069,"proto":"tcp","label":"","count":1},{"port":503,"proto":"tcp","label":"","count":1},{"port":11,"proto":"tcp","label":"","count":1},{"port":17000,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"ja4h":["ge11nn0500_2d30dc89d981"]},"fingerprint_peers":{"ge11nn0500_2d30dc89d981":1254},"user_agents":["python-requests/2.32.5"],"timeline":[{"date":"2026-05-24","count":12},{"date":"2026-05-27","count":4},{"date":"2026-05-28","count":7},{"date":"2026-05-29","count":21},{"date":"2026-05-30","count":1},{"date":"2026-05-31","count":3}],"recent_events":[{"timestamp":"2026-05-31T07:23:10","port":9069,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:9069\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-31T07:21:40","port":8140,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8140\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-31T07:18:50","port":8066,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8066\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-30T01:35:46","port":27017,"proto":"tcp","app_proto":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":\u0001\u0000\u0000�*\u0000\u0000\u0000\u0000�\u0007\u0000\u0000\u0000\u0000\u0000\u0000admin.$cmd\u0000\u0000\u0000\u0000\u0000����\u0013\u0001\u0000\u0000\u0010ismaster\u0000\u0001\u0000\u0000\u0000\bhelloOk\u0000\u0001\u0003client\u0000�\u0000\u0000\u0000\u0003driver\u0000-\u0000\u0000\u0000\u0002name\u0000\n\u0000\u0000\u0000PyMongo|c\u0000\u0002version\u0000\u0007\u0000\u0000\u00004.13.2\u0000\u0000\u0003os\u0000T\u0000\u0000\u0000\u0002type\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002name\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002architecture\u0000\u0007\u0000\u0000\u0000x86_64\u0000\u0002version\u0000\t\u0000\u0000\u00006.12.68+\u0000\u0000\u0002platform\u0000\u0017\u0000\u0000\u0000CPython 3.13.3.final.0\u0000\u0003env\u00002\u0000\u0000\u0000\u0003container\u0000\"\u0000\u0000\u0000\u0002orchestrator\u0000\u000b\u0000\u0000\u0000kubernetes\u0000\u0000\u0000\u0000\u0000","method":"","user_agent":"","enriched":{"digest":"e5ceed9fa76c9bbe","strings":["admin.$cmd","ismaster","helloOk","client","driver","name","PyMongo|c","version","4.13.2","type"]}},{"timestamp":"2026-05-29T23:03:46","port":80,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-29T18:39:24","port":27017,"proto":"tcp","app_proto":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":":\u0001\u0000\u0000��I=\u0000\u0000\u0000\u0000�\u0007\u0000\u0000\u0000\u0000\u0000\u0000admin.$cmd\u0000\u0000\u0000\u0000\u0000����\u0013\u0001\u0000\u0000\u0010ismaster\u0000\u0001\u0000\u0000\u0000\bhelloOk\u0000\u0001\u0003client\u0000�\u0000\u0000\u0000\u0003driver\u0000-\u0000\u0000\u0000\u0002name\u0000\n\u0000\u0000\u0000PyMongo|c\u0000\u0002version\u0000\u0007\u0000\u0000\u00004.13.2\u0000\u0000\u0003os\u0000T\u0000\u0000\u0000\u0002type\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002name\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002architecture\u0000\u0007\u0000\u0000\u0000x86_64\u0000\u0002version\u0000\t\u0000\u0000\u00006.12.68+\u0000\u0000\u0002platform\u0000\u0017\u0000\u0000\u0000CPython 3.13.3.final.0\u0000\u0003env\u00002\u0000\u0000\u0000\u0003container\u0000\"\u0000\u0000\u0000\u0002orchestrator\u0000\u000b\u0000\u0000\u0000kubernetes\u0000\u0000\u0000\u0000\u0000","method":"","user_agent":"","enriched":{"digest":"da04fe387f11d562","strings":["admin.$cmd","ismaster","helloOk","client","driver","name","PyMongo|c","version","4.13.2","type"]}},{"timestamp":"2026-05-29T11:53:57","port":8883,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8883\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-29T11:33:39","port":21235,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:21235\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-29T11:30:25","port":21025,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"},{"timestamp":"2026-05-29T11:30:17","port":21025,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"python-requests/2.32.5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"python-requests/2.32.5"}],"http_methods":[{"method":"GET","count":42}],"distinct_ports_total":45,"top_paths":[{"path":"/","count":42,"ports":41}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:9069","notable":false},{"name":"User-Agent","value":"python-requests/2.32.5","notable":false}],"distinct_sets":1,"events_with_headers":8},"tags":[],"data_as_of":"2026-06-04T20:05:19.233387+00:00"}