{"ip":"124.221.131.234","observed":true,"total_events":129,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"128 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["128 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,173,910 bytes sent","bytes_sent":1173910,"session_seconds":48,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-09T10:07:06","last_seen":"2026-10-12T16:31:02","events_24h":0,"events_7d":128,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"Shanghai","city":"Shanghai","lat":31.2222,"lon":121.4581,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":128},{"port":5432,"proto":"tcp","label":"Postgres","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun040_00040015_b03a935b"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun040_00040015_b03a935b":9},"akin_families":{},"user_agents":["Go Web Pentest Tool"],"timeline":[{"date":"2026-10-09","count":1},{"date":"2026-10-12","count":128}],"recent_events":[{"timestamp":"2026-10-12T16:31:02","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/php-myadmin/index.php?lang=en","summary":"","payload_hex":"474554202f7068702d6d7961646d696e2f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":128,"duration_ms":48229,"bytes_in":18160,"bytes_out":10240},{"timestamp":"2026-10-12T16:31:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpMyAdmin1/index.php?lang=en","summary":"","payload_hex":"474554202f7068704d7941646d696e312f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":125,"duration_ms":47182,"bytes_in":17742,"bytes_out":10000},{"timestamp":"2026-10-12T16:31:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/sql/sql-admin/index.php?lang=en","summary":"","payload_hex":"474554202f73716c2f73716c2d61646d696e2f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":126,"duration_ms":47531,"bytes_in":17884,"bytes_out":10080},{"timestamp":"2026-10-12T16:31:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/sql/sql/index.php?lang=en","summary":"","payload_hex":"474554202f73716c2f73716c2f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":127,"duration_ms":47880,"bytes_in":18020,"bytes_out":10160},{"timestamp":"2026-10-12T16:31:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpMyAdmin-latest/index.php?lang=en","summary":"","payload_hex":"474554202f7068704d7941646d696e2d6c61746573742f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":122,"duration_ms":46134,"bytes_in":17315,"bytes_out":9760},{"timestamp":"2026-10-12T16:31:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/mysql/sqlmanager/index.php?lang=en","summary":"","payload_hex":"474554202f6d7973716c2f73716c6d616e616765722f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":123,"duration_ms":46483,"bytes_in":17460,"bytes_out":9840},{"timestamp":"2026-10-12T16:31:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpMyAdmin6.0/index.php?lang=en","summary":"","payload_hex":"474554202f7068704d7941646d696e362e302f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":124,"duration_ms":46833,"bytes_in":17602,"bytes_out":9920},{"timestamp":"2026-10-12T16:30:59","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpmyadmin2018/index.php?lang=en","summary":"","payload_hex":"474554202f7068706d7961646d696e323031382f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":119,"duration_ms":45087,"bytes_in":16889,"bytes_out":9520},{"timestamp":"2026-10-12T16:30:59","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpmyadmin1/index.php?lang=en","summary":"","payload_hex":"474554202f7068706d7961646d696e312f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":120,"duration_ms":45436,"bytes_in":17029,"bytes_out":9600},{"timestamp":"2026-10-12T16:30:59","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Go Web Pentest Tool\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/2phpmyadmin/index.php?lang=en","summary":"","payload_hex":"474554202f327068706d7961646d696e2f696e6465782e7068703f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a20476f205765622050656e7465737420546f6f6c0d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Go Web Pentest Tool","ja3":"","session":"8f03ef8c-ab8d-4911-9bde-1dc680032918","seq":121,"duration_ms":45785,"bytes_in":17169,"bytes_out":9680}],"http_methods":[{"method":"GET","count":128}],"distinct_ports_total":2,"top_paths":[{"path":"/admin/index.php?lang=en","count":1,"ports":1},{"path":"/db/phpMyAdmin-5/index.php?lang=en","count":1,"ports":1},{"path":"/phpmy/index.php?lang=en","count":1,"ports":1},{"path":"/mysql/index.php?lang=en","count":1,"ports":1},{"path":"/index.php?lang=en","count":1,"ports":1},{"path":"/pma/index.php?lang=en","count":1,"ports":1},{"path":"/db/index.php?lang=en","count":1,"ports":1},{"path":"/pmahomme/index.php?lang=en","count":1,"ports":1},{"path":"/phpMyAdmin-5.2/index.php?lang=en","count":1,"ports":1},{"path":"/mysql/sqlmanager/index.php?lang=en","count":1,"ports":1},{"path":"/sql/phpmy-admin/index.php?lang=en","count":1,"ports":1},{"path":"/db/phpmyadmin3/index.php?lang=en","count":1,"ports":1},{"path":"/sql/phpmanager/index.php?lang=en","count":1,"ports":1},{"path":"/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en","count":1,"ports":1},{"path":"/administrator/pma/index.php?lang=en","count":1,"ports":1}],"distinct_paths_total":128,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Go Web Pentest Tool","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-17T07:05:27.024751+00:00"}