{"ip":"34.78.28.134","total_events":32,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["32 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,599 bytes sent","bytes_sent":1599,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T04:21:12","last_seen":"2026-09-30T07:28:28","events_24h":0,"events_7d":32,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"134.28.78.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":990,"proto":"tcp","label":"FTPS","count":30},{"port":3389,"proto":"tcp","label":"RDP","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"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","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2002,"b11cun030_00040012_13ee3d34":5052},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-30","count":32}],"recent_events":[{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0ee49fa2-a18b-4abb-821e-2e62383df5f0","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":34,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"b7cd46a1-f959-470f-8b62-0ced39befe74","seq":1,"duration_ms":111,"bytes_in":16,"bytes_out":34,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004A\u0014�U`2\u0002\u0001\u0003\u0004\u0017cn=iikpxwgdmhuqhpihkdff�\u0014iikpxwgdmhuqhpihkdff","payload_hex":"303a02044114db5560320201030417636e3d69696b70787767646d687571687069686b646666801469696b70787767646d687571687069686b646666","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"95089085-c25b-4076-b100-5379c30bc69a","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":34,"enriched":{"digest":"9f29437e5163fbda","strings":["cn=iikpxwgdmhuqhpihkdff","iikpxwgdmhuqhpihkdff"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e873a129-4ba2-47f7-a610-d25106ac44ae","seq":1,"duration_ms":101,"bytes_in":71,"bytes_out":34,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006g20s6h","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d35000000010006673230733668","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"60430b77-a138-41e3-854e-2f4839dc0a33","seq":1,"duration_ms":101,"bytes_in":39,"bytes_out":34,"enriched":{"digest":"95215f5c925c5426","strings":["adminclient-5","g20s6h"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"cacf4c0a-529c-42ff-8862-1bdfa41855cb","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":34,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"ec13c426-9bc1-4e22-bede-711b62e24013","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":34,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:28:28","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"e425544d-1b22-40ab-98b1-12812f3f4cee","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":34,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-09-30T07:28:27","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:990\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3939300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"3037dc40-8eef-49c1-8953-4e1db6e98051","seq":1,"duration_ms":10,"bytes_in":191,"bytes_out":34},{"timestamp":"2026-09-30T07:28:27","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO example.com\r\n","payload_hex":"45484c4f206578616d706c652e636f6d0d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"778c7224-e683-491c-9d16-61943179d894","seq":1,"duration_ms":111,"bytes_in":18,"bytes_out":34,"enriched":{"digest":"cbacbcd31c19589f","label":"SMTP","strings":["EHLO example.com"],"iocs":{"domains":["example.com"]}}}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:990","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-02T21:44:41.813113+00:00"}