{"ip":"34.76.90.3","total_events":23,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["23 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,276 bytes sent","bytes_sent":1276,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T04:40:15","last_seen":"2026-09-28T06:52:02","events_24h":0,"events_7d":23,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"3.90.76.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":990,"proto":"tcp","label":"FTPS","count":20},{"port":3389,"proto":"tcp","label":"RDP","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2002,"b11cun030_00040012_13ee3d34":5052},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":23}],"recent_events":[{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:990\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3939300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"6e7499f8-85f9-4490-94f6-22f7db0fdcf0","seq":1,"duration_ms":7,"bytes_in":191,"bytes_out":34},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO example.com\r\n","payload_hex":"45484c4f206578616d706c652e636f6d0d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c443c72b-2301-4adc-80e4-720371752701","seq":1,"duration_ms":108,"bytes_in":18,"bytes_out":34,"enriched":{"digest":"cbacbcd31c19589f","label":"SMTP","strings":["EHLO example.com"],"iocs":{"domains":["example.com"]}}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"f1c379cc-84a2-4853-b393-2549bbcfa5ba","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":34,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"7db0055c-45d0-4709-b9c3-21e4b9ae1297","seq":1,"duration_ms":113,"bytes_in":16,"bytes_out":34,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004~��.`2\u0002\u0001\u0003\u0004\u0017cn=jyvbzptifbztwpbpypfe�\u0014jyvbzptifbztwpbpypfe","payload_hex":"303a02047eafc82e60320201030417636e3d6a7976627a70746966627a74777062707970666580146a7976627a70746966627a747770627079706665","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"70786a16-28c8-41a9-b110-dccdf794157a","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":34,"enriched":{"digest":"9ff687a9463e9f3f","strings":["cn=jyvbzptifbztwpbpypfe","jyvbzptifbztwpbpypfe"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"96d9c44f-3b23-4d57-95fa-010535f22749","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":34,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006Pyuctd","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006507975637464","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"476a91f7-2334-4039-98d4-67efb55ccc70","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":34,"enriched":{"digest":"2a94804cec12e828","strings":["adminclient-5","Pyuctd"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"02f3a722-a47c-4291-b02e-e1c2436151b0","seq":1,"duration_ms":101,"bytes_in":14,"bytes_out":34,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"7e4cedd6-05e6-4318-916f-f505cfc972b9","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":34,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-28T06:52:02","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"abe24607-465a-454d-98d3-41b87c38b1e9","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":34,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:990","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-02T21:47:27.602093+00:00"}