{"ip":"104.248.119.122","total_events":105,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"10 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["10 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"123,472 bytes sent","bytes_sent":123472,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T15:58:00","last_seen":"2026-09-27T17:42:09","events_24h":0,"events_7d":105,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8088,"proto":"tcp","label":"Hadoop","count":31},{"port":444,"proto":"tcp","label":"","count":30},{"port":8001,"proto":"tcp","label":"","count":20},{"port":10000,"proto":"tcp","label":"Webmin","count":10},{"port":8082,"proto":"tcp","label":"","count":10},{"port":82,"proto":"tcp","label":"","count":2},{"port":7001,"proto":"tcp","label":"WebLogic","count":1},{"port":2086,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun060_00c0004e_0af44bea","a11cun050_0000005d_7266f93a"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":38,"a11cun060_00c0004e_0af44bea":39,"a11cun050_0000005d_7266f93a":42},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/617.29 (KHTML, like Gecko) Version/17.7 Safari/617.29","Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15","Mozilla/5.0 (Macintosh; U; Intel Mac OS X; ja-jp) AppleWebKit/523.12.2 (KHTML, like Gecko) Version/3.0.4 Safari/523.12.2","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2"],"timeline":[{"date":"2026-09-25","count":5},{"date":"2026-09-27","count":100}],"recent_events":[{"timestamp":"2026-09-27T17:42:09","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e340d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4","ja3":"","session":"62f5e32c-65de-4ff1-b4a3-83e3d8c99588","seq":10,"duration_ms":1597,"bytes_in":2082,"bytes_out":800},{"timestamp":"2026-09-27T17:42:08","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3629204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e312e32205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15","ja3":"","session":"4ca498b6-0c17-489e-b1bc-fe686f82ef1a","seq":10,"duration_ms":1552,"bytes_in":2217,"bytes_out":800},{"timestamp":"2026-09-27T17:42:08","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a38302e3029204765636b6f2f32303130303130312046697265666f782f38302e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0","ja3":"","session":"4ca498b6-0c17-489e-b1bc-fe686f82ef1a","seq":5,"duration_ms":684,"bytes_in":1075,"bytes_out":400},{"timestamp":"2026-09-27T17:42:08","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a39332e3029204765636b6f2f32303130303130312046697265666f782f39332e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0","ja3":"","session":"4ca498b6-0c17-489e-b1bc-fe686f82ef1a","seq":9,"duration_ms":1386,"bytes_in":1975,"bytes_out":720},{"timestamp":"2026-09-27T17:42:08","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39392e302e343834342e3531205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36","ja3":"","session":"62f5e32c-65de-4ff1-b4a3-83e3d8c99588","seq":8,"duration_ms":1221,"bytes_in":1688,"bytes_out":640},{"timestamp":"2026-09-27T17:42:08","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36","ja3":"","session":"4ca498b6-0c17-489e-b1bc-fe686f82ef1a","seq":8,"duration_ms":1231,"bytes_in":1770,"bytes_out":640},{"timestamp":"2026-09-27T17:42:08","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2072763a39312e3029204765636b6f2f32303130303130312046697265666f782f39312e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0","ja3":"","session":"62f5e32c-65de-4ff1-b4a3-83e3d8c99588","seq":9,"duration_ms":1360,"bytes_in":1880,"bytes_out":720},{"timestamp":"2026-09-27T17:42:08","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a37312e3029204765636b6f2f32303130303130312046697265666f782f37312e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0","ja3":"","session":"4ca498b6-0c17-489e-b1bc-fe686f82ef1a","seq":7,"duration_ms":1080,"bytes_in":1530,"bytes_out":560},{"timestamp":"2026-09-27T17:42:08","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.4\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e352e323029204765636b6f2f2046697265666f782f332e362e340d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.4","ja3":"","session":"62f5e32c-65de-4ff1-b4a3-83e3d8c99588","seq":5,"duration_ms":676,"bytes_in":1009,"bytes_out":400},{"timestamp":"2026-09-27T17:42:08","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f345f3129204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e35205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15","ja3":"","session":"62f5e32c-65de-4ff1-b4a3-83e3d8c99588","seq":7,"duration_ms":1043,"bytes_in":1452,"bytes_out":560}],"http_methods":[{"method":"GET","count":105}],"distinct_ports_total":8,"top_paths":[{"path":"/.env","count":10,"ports":5},{"path":"/.env.staging","count":10,"ports":5},{"path":"/app/.env","count":10,"ports":5},{"path":"/api/.env","count":10,"ports":5},{"path":"/.env.local","count":10,"ports":5},{"path":"/.env.backup","count":10,"ports":5},{"path":"/.env.bak","count":10,"ports":5},{"path":"/backend/.env","count":10,"ports":5},{"path":"/.env.production","count":10,"ports":5},{"path":"/.env.development","count":10,"ports":5},{"path":"/","count":5,"ports":4}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:8088","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T20:50:49.050629+00:00"}