{"ip":"146.190.74.36","total_events":65,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"10 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["10 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"74,796 bytes sent","bytes_sent":74796,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T17:29:09","last_seen":"2026-09-27T18:12:28","events_24h":0,"events_7d":65,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8444,"proto":"tcp","label":"","count":20},{"port":10443,"proto":"tcp","label":"","count":20},{"port":5001,"proto":"tcp","label":"","count":10},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":10},{"port":8081,"proto":"tcp","label":"","count":1},{"port":15672,"proto":"tcp","label":"RabbitMQ","count":1},{"port":8800,"proto":"tcp","label":"","count":1},{"port":2375,"proto":"tcp","label":"Docker","count":1},{"port":9200,"proto":"tcp","label":"Elastic","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun060_00c0004e_0af44bea","a11cun050_0000005d_7266f93a"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":38,"a11cun060_00c0004e_0af44bea":39,"a11cun050_0000005d_7266f93a":42},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1","Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/14.0","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.8","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0","Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Safari/602.4.8"],"timeline":[{"date":"2026-09-25","count":5},{"date":"2026-09-27","count":60}],"recent_events":[{"timestamp":"2026-09-27T18:12:28","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f395f3329204170706c655765624b69742f3533372e37352e313420284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f372e302e33205361666172692f4537464241460d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":7,"duration_ms":1221,"bytes_in":1527,"bytes_out":546},{"timestamp":"2026-09-27T18:12:28","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f355f343b20656e2d676229204170706c655765624b69742f3532382e342b20284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f342e30647031205361666172692f3532362e31312e320d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":8,"duration_ms":1420,"bytes_in":1777,"bytes_out":624},{"timestamp":"2026-09-27T18:12:28","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.12\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e352e323029204765636b6f2f2046697265666f782f332e362e31320d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.12","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":9,"duration_ms":1603,"bytes_in":1969,"bytes_out":702},{"timestamp":"2026-09-27T18:12:28","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3132362e3029204765636b6f2f32303130303130312046697265666f782f3132362e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":10,"duration_ms":1787,"bytes_in":2163,"bytes_out":780},{"timestamp":"2026-09-27T18:12:27","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.production","summary":"","payload_hex":"474554202f2e656e762e70726f64756374696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284665646f72613b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134312e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":2,"duration_ms":295,"bytes_in":425,"bytes_out":156},{"timestamp":"2026-09-27T18:12:27","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.staging","summary":"","payload_hex":"474554202f2e656e762e73746167696e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e35204d6f62696c652f313545313438205361666172692f3630342e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":3,"duration_ms":483,"bytes_in":681,"bytes_out":234},{"timestamp":"2026-09-27T18:12:27","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.development","summary":"","payload_hex":"474554202f2e656e762e646576656c6f706d656e7420485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e340d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":4,"duration_ms":668,"bytes_in":893,"bytes_out":312},{"timestamp":"2026-09-27T18:12:27","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e352e323029204765636b6f2f2046697265666f782f332e362e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.15","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":5,"duration_ms":851,"bytes_in":1083,"bytes_out":390},{"timestamp":"2026-09-27T18:12:27","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.backup","summary":"","payload_hex":"474554202f2e656e762e6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b205562756e74753b204c696e757820616172636836343b2072763a39302e3029204765636b6f2f32303130303130312046697265666f782f39302e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":6,"duration_ms":1038,"bytes_in":1287,"bytes_out":468},{"timestamp":"2026-09-27T18:12:26","port":10443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env","summary":"","payload_hex":"474554202f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3133382e3029204765636b6f2f32303130303130312046697265666f782f3133382e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0","ja3":"","session":"fc5f929a-bd00-482a-9408-a4c85569ad73","seq":1,"duration_ms":100,"bytes_in":190,"bytes_out":78}],"http_methods":[{"method":"GET","count":65}],"distinct_ports_total":9,"top_paths":[{"path":"/.env","count":6,"ports":4},{"path":"/.env.staging","count":6,"ports":4},{"path":"/app/.env","count":6,"ports":4},{"path":"/api/.env","count":6,"ports":4},{"path":"/.env.local","count":6,"ports":4},{"path":"/.env.backup","count":6,"ports":4},{"path":"/.env.bak","count":6,"ports":4},{"path":"/backend/.env","count":6,"ports":4},{"path":"/.env.production","count":6,"ports":4},{"path":"/.env.development","count":6,"ports":4},{"path":"/","count":5,"ports":5}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:10443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T20:50:48.679326+00:00"}