{"ip":"34.78.2.103","total_events":158,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"128+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 128 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,315 bytes sent","bytes_sent":21315,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T09:48:18","last_seen":"2026-09-29T16:34:57","events_24h":7,"events_7d":46,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"103.2.78.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":5433,"proto":"tcp","label":"","count":6},{"port":445,"proto":"tcp","label":"SMB","count":6},{"port":9200,"proto":"tcp","label":"Elastic","count":6},{"port":139,"proto":"tcp","label":"SMB","count":3},{"port":5432,"proto":"tcp","label":"Postgres","count":3},{"port":80,"proto":"tcp","label":"HTTP","count":3},{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":8873,"proto":"tcp","label":"","count":2},{"port":83,"proto":"tcp","label":"","count":2},{"port":2049,"proto":"tcp","label":"NFS","count":2},{"port":21249,"proto":"tcp","label":"","count":2},{"port":36470,"proto":"tcp","label":"","count":2},{"port":27017,"proto":"tcp","label":"MongoDB","count":2},{"port":2082,"proto":"tcp","label":"","count":2},{"port":8083,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["d18b223ce817c861b7829130500395c2"],"http_akin":["a11cun030_00000049_54d07b6d","a11cun050_0000004f_0d8a8ff5"]},"fingerprint_peers":{"t13i3612h1_bcee18a5b459_8537cf56674e":303,"a11cun030_00000049_54d07b6d":2701,"a11cun050_0000004f_0d8a8ff5":563},"akin_families":{"a11cun030_00000049_54d07b6d":{"head":"a11cun030_00000049_54d07b6d","shapes":2,"ips":2704},"a11cun050_0000004f_0d8a8ff5":{"head":"a11cun050_0000004f_0d8a8ff5","shapes":3,"ips":563}},"user_agents":["python-requests/2.34.2","Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0","python-requests/2.32.5"],"timeline":[{"date":"2026-09-04","count":11},{"date":"2026-09-06","count":18},{"date":"2026-09-11","count":27},{"date":"2026-09-12","count":19},{"date":"2026-09-16","count":5},{"date":"2026-09-17","count":4},{"date":"2026-09-18","count":17},{"date":"2026-09-20","count":9},{"date":"2026-09-22","count":2},{"date":"2026-09-23","count":3},{"date":"2026-09-24","count":15},{"date":"2026-09-25","count":14},{"date":"2026-09-28","count":6},{"date":"2026-09-29","count":8}],"recent_events":[{"timestamp":"2026-09-29T16:34:57","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"5f494d51-7a94-476b-9697-5e1904da8436","seq":1,"duration_ms":100,"bytes_in":145,"bytes_out":76},{"timestamp":"2026-09-29T13:22:36","port":5433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\b\u0004�\u0016/","payload_hex":"0000000804d2162f","method":"","user_agent":"","ja3":"","session":"b043a8d3-c09d-4390-a49c-6cfe1eaa9b79","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":11},{"timestamp":"2026-09-29T11:52:16","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"a0795ae5-0739-4426-a204-cff0633201e8","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":76},{"timestamp":"2026-09-29T09:28:20","port":27017,"proto":"tcp","app_proto":"","app_protocol":"mongodb","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":";\u0001\u0000\u0000MZ�N\u0000\u0000\u0000\u0000�\u0007\u0000\u0000\u0000\u0000\u0000\u0000admin.$cmd\u0000\u0000\u0000\u0000\u0000����\u0014\u0001\u0000\u0000\u0010ismaster\u0000\u0001\u0000\u0000\u0000\bhelloOk\u0000\u0001\u0003client\u0000�\u0000\u0000\u0000\u0003driver\u0000-\u0000\u0000\u0000\u0002name\u0000\n\u0000\u0000\u0000PyMongo|c\u0000\u0002version\u0000\u0007\u0000\u0000\u00004.13.2\u0000\u0000\u0003os\u0000T\u0000\u0000\u0000\u0002type\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002name\u0000\u0006\u0000\u0000\u0000Linux\u0000\u0002architecture\u0000\u0007\u0000\u0000\u0000x86_64\u0000\u0002version\u0000\t\u0000\u0000\u00006.12.85+\u0000\u0000\u0002platform\u0000\u0018\u0000\u0000\u0000CPython 3.13.14.final.0\u0000\u0003env\u00002\u0000\u0000\u0000\u0003container\u0000\"\u0000\u0000\u0000\u0002orchestrator\u0000\u000b\u0000\u0000\u0000kubernetes\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e4909d13-10ef-4e8b-b0ed-001ae3a18511","seq":1,"duration_ms":100,"bytes_in":315,"bytes_out":11,"enriched":{"digest":"fd1411f21827ab57","strings":["admin.$cmd","ismaster","helloOk","client","driver","name","PyMongo|c","version","4.13.2","type"]}},{"timestamp":"2026-09-29T09:18:51","port":5433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\b\u0004�\u0016/","payload_hex":"0000000804d2162f","method":"","user_agent":"","ja3":"","session":"32e691ad-a05f-4e9f-8218-3904a3aee512","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":11},{"timestamp":"2026-09-29T08:23:08","port":8083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8083\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038330d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"fb633fa2-afb9-4d71-8853-983bd6f06597","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":76},{"timestamp":"2026-09-29T08:17:39","port":8800,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8800\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383830300d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"0c93d035-e447-4e17-996a-e8b4ebb22fd2","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":76},{"timestamp":"2026-09-29T03:12:38","port":5433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\b\u0004�\u0016/","payload_hex":"0000000804d2162f","method":"","user_agent":"","ja3":"","session":"934e7829-bc6f-4b6c-b124-4b87d84a32ed","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":11},{"timestamp":"2026-09-28T12:42:31","port":12555,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:12555\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31323535350d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"fcd57d2c-4a7d-4b13-81f5-db67d7d4da42","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":76},{"timestamp":"2026-09-28T12:42:12","port":21025,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"python-requests/2.34.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32313032350d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33342e320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"python-requests/2.34.2","ja3":"","session":"ee2a3d06-28e5-4b12-bdc1-18d79c4fa1df","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":76}],"http_methods":[{"method":"GET","count":133}],"distinct_ports_total":128,"top_paths":[{"path":"/","count":133,"ports":120}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"python-requests/2.34.2","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T03:54:23.381981+00:00"}