{"ip":"167.99.12.84","total_events":57,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"10 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["10 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"63,675 bytes sent","bytes_sent":63675,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T16:31:07","last_seen":"2026-09-27T18:00:09","events_24h":0,"events_7d":57,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":7001,"proto":"tcp","label":"WebLogic","count":40},{"port":9090,"proto":"tcp","label":"Prometheus","count":10},{"port":4000,"proto":"tcp","label":"","count":2},{"port":2082,"proto":"tcp","label":"","count":2},{"port":8082,"proto":"tcp","label":"","count":2},{"port":81,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun060_00c0004e_0af44bea","a11cun050_0000005d_7266f93a"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":38,"a11cun060_00c0004e_0af44bea":39,"a11cun050_0000005d_7266f93a":42},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/5.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36","Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-25","count":7},{"date":"2026-09-27","count":50}],"recent_events":[{"timestamp":"2026-09-27T18:00:09","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31323b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131352e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":9,"duration_ms":1644,"bytes_in":1998,"bytes_out":693},{"timestamp":"2026-09-27T18:00:09","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e32205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":10,"duration_ms":1836,"bytes_in":2235,"bytes_out":770},{"timestamp":"2026-09-27T18:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.development","summary":"","payload_hex":"474554202f2e656e762e646576656c6f706d656e7420485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":4,"duration_ms":682,"bytes_in":917,"bytes_out":308},{"timestamp":"2026-09-27T18:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_2; en) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.18\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f323b20656e29204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e31205361666172692f3532352e31380d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_2; en) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.18","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":5,"duration_ms":874,"bytes_in":1161,"bytes_out":385},{"timestamp":"2026-09-27T18:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.backup","summary":"","payload_hex":"474554202f2e656e762e6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a31322e3029204765636b6f2f32303130303130312046697265666f782f31322e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":6,"duration_ms":1068,"bytes_in":1356,"bytes_out":462},{"timestamp":"2026-09-27T18:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31353b2072763a3133342e3029204765636b6f2f32303130303130312046697265666f782f3133342e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":7,"duration_ms":1259,"bytes_in":1564,"bytes_out":539},{"timestamp":"2026-09-27T18:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202853533b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":8,"duration_ms":1450,"bytes_in":1786,"bytes_out":616},{"timestamp":"2026-09-27T18:00:07","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env","summary":"","payload_hex":"474554202f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e37204d6f62696c652f313545313438205361666172692f3630342e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Mobile/15E148 Safari/604.1","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":77},{"timestamp":"2026-09-27T18:00:07","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.production","summary":"","payload_hex":"474554202f2e656e762e70726f64756374696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285a5a3b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134312e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":2,"duration_ms":291,"bytes_in":477,"bytes_out":154},{"timestamp":"2026-09-27T18:00:07","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.staging","summary":"","payload_hex":"474554202f2e656e762e73746167696e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e372e323029204765636b6f2f2046697265666f782f332e362e340d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4","ja3":"","session":"64e08f7b-f86a-4728-ba88-9e1e48a1edac","seq":3,"duration_ms":482,"bytes_in":668,"bytes_out":231}],"http_methods":[{"method":"GET","count":57}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":7,"ports":4},{"path":"/.env","count":5,"ports":2},{"path":"/.env.staging","count":5,"ports":2},{"path":"/app/.env","count":5,"ports":2},{"path":"/api/.env","count":5,"ports":2},{"path":"/.env.local","count":5,"ports":2},{"path":"/.env.backup","count":5,"ports":2},{"path":"/.env.bak","count":5,"ports":2},{"path":"/backend/.env","count":5,"ports":2},{"path":"/.env.production","count":5,"ports":2},{"path":"/.env.development","count":5,"ports":2}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:9090","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T20:46:51.927192+00:00"}