{"ip":"134.122.71.111","total_events":75,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"10 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["10 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"87,592 bytes sent","bytes_sent":87592,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T16:40:52","last_seen":"2026-09-27T16:38:28","events_24h":0,"events_7d":75,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":2087,"proto":"tcp","label":"","count":22},{"port":808,"proto":"tcp","label":"","count":20},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":11},{"port":5000,"proto":"tcp","label":"Web-alt","count":10},{"port":2086,"proto":"tcp","label":"","count":10},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun060_00c0004e_0af44bea","a11cun050_0000005d_7266f93a"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":38,"a11cun060_00c0004e_0af44bea":39,"a11cun050_0000005d_7266f93a":42},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.5.20","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36","Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-25","count":5},{"date":"2026-09-27","count":70}],"recent_events":[{"timestamp":"2026-09-27T16:38:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202843656e744f533b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"","session":"b4f0cf24-01e7-48fd-81fa-53f221ce2025","seq":10,"duration_ms":1941,"bytes_in":2141,"bytes_out":790},{"timestamp":"2026-09-27T16:38:28","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133332e3029204765636b6f2f32303130303130312046697265666f782f3133332e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":10,"duration_ms":1934,"bytes_in":2290,"bytes_out":790},{"timestamp":"2026-09-27T16:38:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285a5a3b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36","ja3":"","session":"b4f0cf24-01e7-48fd-81fa-53f221ce2025","seq":9,"duration_ms":1730,"bytes_in":1917,"bytes_out":711},{"timestamp":"2026-09-27T16:38:28","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/13.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a312e392e352e323029204765636b6f2f2046697265666f782f31332e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/13.0","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":9,"duration_ms":1729,"bytes_in":2088,"bytes_out":711},{"timestamp":"2026-09-27T16:38:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202844656269616e3b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133342e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","ja3":"","session":"b4f0cf24-01e7-48fd-81fa-53f221ce2025","seq":8,"duration_ms":1526,"bytes_in":1693,"bytes_out":632},{"timestamp":"2026-09-27T16:38:28","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132352e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":8,"duration_ms":1526,"bytes_in":1898,"bytes_out":632},{"timestamp":"2026-09-27T16:38:27","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.staging","summary":"","payload_hex":"474554202f2e656e762e73746167696e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e31205361666172692f3630352e362e32350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":3,"duration_ms":510,"bytes_in":724,"bytes_out":237},{"timestamp":"2026-09-27T16:38:27","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131332e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":7,"duration_ms":1322,"bytes_in":1659,"bytes_out":553},{"timestamp":"2026-09-27T16:38:27","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.9\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e390d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.9","ja3":"","session":"b4f0cf24-01e7-48fd-81fa-53f221ce2025","seq":7,"duration_ms":1322,"bytes_in":1467,"bytes_out":553},{"timestamp":"2026-09-27T16:38:27","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.development","summary":"","payload_hex":"474554202f2e656e762e646576656c6f706d656e7420485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031345f375f3629204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e34205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15","ja3":"","session":"9ed7130d-464c-486b-a4f9-2d9bdb6783db","seq":4,"duration_ms":713,"bytes_in":970,"bytes_out":316}],"http_methods":[{"method":"GET","count":75}],"distinct_ports_total":6,"top_paths":[{"path":"/.env","count":7,"ports":5},{"path":"/.env.staging","count":7,"ports":5},{"path":"/app/.env","count":7,"ports":5},{"path":"/api/.env","count":7,"ports":5},{"path":"/.env.local","count":7,"ports":5},{"path":"/.env.backup","count":7,"ports":5},{"path":"/.env.bak","count":7,"ports":5},{"path":"/backend/.env","count":7,"ports":5},{"path":"/.env.production","count":7,"ports":5},{"path":"/.env.development","count":7,"ports":5},{"path":"/","count":5,"ports":3}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:8443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T20:50:38.043544+00:00"}