{"ip":"34.79.59.208","total_events":9,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["9 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,334 bytes sent","bytes_sent":1334,"session_seconds":3,"persistent":false}},"first_seen":"2026-09-07T10:24:38","last_seen":"2026-09-07T10:24:41","events_24h":0,"events_7d":0,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"208.59.79.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":9411,"proto":"tcp","label":"","count":1},{"port":28017,"proto":"tcp","label":"","count":1},{"port":8084,"proto":"tcp","label":"","count":1},{"port":2087,"proto":"tcp","label":"","count":1},{"port":12000,"proto":"tcp","label":"","count":1},{"port":9202,"proto":"tcp","label":"","count":1},{"port":8090,"proto":"tcp","label":"","count":1},{"port":6443,"proto":"tcp","label":"k8s API","count":1},{"port":7575,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3111h1_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"","tls_ja3":["755cbaaa441626ab9e759e8982278df5"],"http_akin":["b11cun050_00040017_97f1d74f"]},"fingerprint_peers":{"t13i3111h1_e8f1e7e78f70_d41ae481755e":20,"b11cun050_00040017_97f1d74f":38},"akin_families":{"b11cun050_00040017_97f1d74f":{"head":"b11cun050_00040017_97f1d74f","shapes":2,"ips":38}},"user_agents":["Python/3.12 aiohttp/3.14.3"],"timeline":[{"date":"2026-09-07","count":9}],"recent_events":[{"timestamp":"2026-09-07T10:24:41","port":7575,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7575\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a373537350d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"a735fcfc-3058-4083-a0be-98cb8145ebd2","seq":1,"duration_ms":3051,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:41","port":28017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:28017\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32383031370d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"32b127b4-1002-4fd4-bce7-f57c073f3bc5","seq":1,"duration_ms":3163,"bytes_in":149,"bytes_out":77},{"timestamp":"2026-09-07T10:24:40","port":9411,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9411\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393431310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"bd442c70-80f2-4917-9750-ca0cbde29238","seq":1,"duration_ms":2237,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:40","port":6443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363434330d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"d2baa749-c3a5-4a51-964c-5afb27f963ee","seq":1,"duration_ms":2694,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:39","port":8084,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"e389d4a8-c4a8-468b-88e8-ec0b968b91b1","seq":1,"duration_ms":1275,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:39","port":8090,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383039300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"f669e7d7-6e1b-4ebf-85f9-d7d97d3d2433","seq":1,"duration_ms":1341,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:39","port":12000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:12000\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31323030300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"ef2afc41-daf2-4d50-9e1f-4e39a8f1fbb7","seq":1,"duration_ms":1406,"bytes_in":149,"bytes_out":77},{"timestamp":"2026-09-07T10:24:39","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"f10dfe1f-f9dd-4e94-8307-0dec0267668b","seq":1,"duration_ms":1467,"bytes_in":148,"bytes_out":77},{"timestamp":"2026-09-07T10:24:38","port":9202,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9202\",\"user-agent\":\"Python/3.12 aiohttp/3.14.3\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393230320d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a557365722d4167656e743a20507974686f6e2f332e31322061696f687474702f332e31342e330d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python/3.12 aiohttp/3.14.3","ja3":"755cbaaa441626ab9e759e8982278df5","session":"e5db5b15-1011-4fd1-b1df-40af00db12b7","seq":1,"duration_ms":951,"bytes_in":148,"bytes_out":77}],"http_methods":[{"method":"GET","count":9}],"distinct_ports_total":9,"top_paths":[{"path":"/","count":9,"ports":9}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":9}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:7575","notable":false},{"name":"User-Agent","value":"Python/3.12 aiohttp/3.14.3","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[],"data_as_of":"2026-10-01T19:40:48.482385+00:00"}