{"ip":"34.79.174.178","total_events":20,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["20 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,010 bytes sent","bytes_sent":1010,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-02T03:57:54","last_seen":"2026-10-02T07:42:32","events_24h":20,"events_7d":20,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"178.174.79.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":990,"proto":"tcp","label":"FTPS","count":20}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c003036fb910e5edbcc2a080be749e37d16fea40fb03692fdb752143f3c4a8552efc3520183b9961a77c13369f1e4ec017688f52f99306142452d45edb5cb5c840c271660032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c07d3569c8048148b43fe3f776174616d623354f297275ec2899e843d1d86bfedbbdfea25e6324c81aa611c4d798aa349283455f8c6148249a716d030af5c00a6a93543b21ac05786ab4b5b624c5c9e999c6f0c3720587cec4c50cd5d881078abc45d53b4779a9305a0eb7abcea4202a13bc9049b4cbe8569792123f83e24ad61345ed2685085498b6098d393947041552c2f04fb3b6653d6131f5f501d02acb639cb5ed5959a6981a87043201265cf631b729319d8e9b94e1f4a4aaac3913fc6da981b92b444c9a154d7cea44395924393845208c7aa8746abf3a7e4ab6b996f418b7e7ad4b72073105167c8cb069866e75ea23c1c37f6ac806ef7c2fe7b82904db6086303643d8ba4047384558025e8c99e27ba6d8d463e0b62b9e5a5303e5008a6962dd61748d6161d4969eac046500bda0d08788c5094c92ab91d8448409d1ca6185bece5c2e111300c8abc5f1772c27764912f6b414174e4f047ad28070e33c0a357022272069213c13be5bb726e20b8b63af0d96272da552fd46b521997c2d9bb14b22b2467c5fc2332c388c9b3744777561359df834bb365dd56987e7d7c4807509dbea5afda90678c0a5e3e5a58c41810da48a33e2cda5d69a542161f614a1a03b0d53097605e070526c21ec98173d363666ab074b3411d76934fb1344c54ac6a991becd397435e724a7ac6fdb598df2f13aa316bac70563fe2931b3113cc09102ea6397db072de08848e7a8819e00a949363438852a1dd0574dab4e228aa68f900a5bf6a545941eb5a6349c269f24cc570f1a08ef8a07f5cc7f3ea55218cb83fa19cb21b09a16b6bf0e36b5f73a4bac83ab273ba21bb4366a85082b964ae1b7a9767217e985a35885ba907759071a925c10982af24a4b8b8ea2399790fc87bd70bdea0c923182c2c33955fac30e76fb7a24b6c06d4ac74c9c43bd7603c131b1bedbaddd3a1446932cc6371cccb753f46098b806a65e7bce7218037ae9a85985bfddc67948a3bfbf05c5a033628dd05a0a53820d81349eb296eb3a4a7e53529a5c06ef36833a32a954c76bb5a93c46e75b1ab224cc9490ef8089874c3bdcc471e708cf444a7aaa5055886a1df48228d86c66fb64a9fef987d2929a126a3d8b645a4b0931d2c2723e9c8e9ed21fd6ac1055db389df9bc15f7bdcf8a9ef630b44c9b8f3c431e420b975bd51af0980d5a764a66189d649a37afc895be644355a3491ca3a14b729573239c5e91591fdc3c3160903bd45d144abc052281e7716ca7358c510ac3e7306f64c3358d9551b3b51e1ad1033033a65be623abd2cf1618517d109b2a233c088b3143d086a8914a31e24dca170b3baabf35187deb4a0af993370bf9b1e162c8d9c34b9f79444ce58a8f0931c189b8066119aff659d433680dcc5c72283a2bdc5187d33233676852c352d9e7c00aca8977e17e148abb06a2332df7499e46c5e7ac9234f4b005b260b5a03b5eca48a98360b96a56e276735a89859c292059c584efb7360293181d67cd42c8b6abb30527fa8b31367301d384dbd636f3961a1c8a9c84e38d1bd41bcd525aad02156eb274a700617d1711022c891f54082d80957d2138c6b66dd80a7d5d182857d3b6744c342c24065e81791d96e0a5e6cb8b90d8c8e05336f4d7cdb93aba068cde1c39629e93199c4ebb43a1e8c75fd1c0015be1f6fbb91abd1fb27582e16fd6f0922e6fe29a19f5d74729001d0020a1e8c75fd1c0015be1f6fbb91abd1fb27582e16fd6f0922e6fe29a19","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["b11cun030_00040012_13ee3d34"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":2002,"b11cun030_00040012_13ee3d34":5052},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-02","count":20}],"recent_events":[{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:990\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3939300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132372e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","ja3":"9b72665518dedb3531426284fdec8237","session":"700af188-6cda-4606-889e-0a37ced58c76","seq":1,"duration_ms":11,"bytes_in":191,"bytes_out":34},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO example.com\r\n","payload_hex":"45484c4f206578616d706c652e636f6d0d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"62002ad2-5bc1-45b8-9d0f-a4e3542dc66e","seq":1,"duration_ms":111,"bytes_in":18,"bytes_out":34,"enriched":{"digest":"cbacbcd31c19589f","label":"SMTP","strings":["EHLO example.com"],"iocs":{"domains":["example.com"]}}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"07�\u0003\u0002\u0001`�00.0,�*\u0004(NTLMSSP\u0000\u0001\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3037a003020160a130302e302ca02a04284e544c4d5353500001000000f7badbe2000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"12b14280-66c5-4d4e-a9c2-1c1b96bcf27c","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":34,"enriched":{"digest":"dc4c1983cd3d4350","strings":["00.0,","(NTLMSSP"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"Not a command \r\n","payload_hex":"4e6f74206120636f6d6d616e64200d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"9ed593ef-69b6-4012-b57c-f2acec5e25bd","seq":1,"duration_ms":111,"bytes_in":16,"bytes_out":34,"enriched":{"digest":"ba8182e82cf8725d","strings":["Not a command"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"0:\u0002\u0004M{�s`2\u0002\u0001\u0003\u0004\u0017cn=hqknszvzhpzabzzqpufo�\u0014hqknszvzhpzabzzqpufo","payload_hex":"303a02044d7b8d7360320201030417636e3d68716b6e737a767a68707a61627a7a717075666f801468716b6e737a767a68707a61627a7a717075666f","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"8368b07c-88e0-4f6d-b5bb-53f547d34e4a","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":34,"enriched":{"digest":"e36aa85c4727bc31","strings":["cn=hqknszvzhpzabzzqpufo","hqknszvzhpzabzzqpufo"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000C\u0000\u0012\u0000\u0000\u001e3��\u0000\u001fconsumer-Offset Explorer 2.2-18\u0000\u0012apache-kafka-java\u00062.4.0\u0000","payload_hex":"00000043001200001e33f481001f636f6e73756d65722d4f6666736574204578706c6f72657220322e322d313800126170616368652d6b61666b612d6a61766106322e342e3000","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"0d387d38-e6f9-4ead-80c0-98f7f27a6950","seq":1,"duration_ms":101,"bytes_in":71,"bytes_out":34,"enriched":{"digest":"5205d1d8e7086ced","strings":["consumer-Offset Explorer 2.2-18","apache-kafka-java","2.4.0"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000#\u0000\u0003\u0000\u0000\u001e3��\u0000\radminclient-5\u0000\u0000\u0000\u0001\u0000\u0006McPcBI","payload_hex":"00000023000300001e33f481000d61646d696e636c69656e742d350000000100064d6350634249","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"7cfb801b-f364-404a-984a-c3a6da4427ed","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":34,"enriched":{"digest":"bd826e1793d3c5f0","strings":["adminclient-5","McPcBI"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"c10a6037-a4f1-4227-a695-0a1ecb8587af","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":34,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0011\u0000\u0004MQTT\u0003\u0002\u0000<\u0000\u0005AAAAA","payload_hex":"101100044d5154540302003c00054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"12895188-f99e-4339-8db4-c97387044654","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":34,"enriched":{"digest":"d4b335fe12cd8784","label":"MQTT","strings":["MQTT","AAAAA"]}},{"timestamp":"2026-10-02T07:42:32","port":990,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000\u0005AAAAA","payload_hex":"101200044d5154540502003c0000054141414141","method":"","user_agent":"","ja3":"9b72665518dedb3531426284fdec8237","session":"089793cc-fcc3-443c-b9d1-4ab55dec9973","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":34,"enriched":{"digest":"03018dd9d8971729","label":"MQTT","strings":["MQTT","AAAAA"]}}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:990","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-02T21:48:38.865276+00:00"}