{"ip":"185.177.72.138","total_events":45,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"3 exploit-path hits","confidence":"medium","network_type":null,"why":["3 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","Under 5 hits, so confidence is medium.","Not in any known-scanner range."]},"first_seen":"2026-03-15T00:13:28","last_seen":"2026-03-18T05:33:45","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"","region":"","city":"","lat":48.8582,"lon":2.3387,"asn":211590,"org":"Bucklog SARL"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2026-8181","title":"WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/wp/v2/users"},{"cve_id":"CVE-2025-4302","title":"Stop User Enumeration WordPress plugin - Authentication Bypass","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/wp/v2/users"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":25},{"port":8087,"proto":"tcp","label":"","count":20}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1514h2_8daaf6152771_de4a06bb82e3","t13i130900_f57a46bbacb6_e7c285222651"],"tls_ja3":[],"ja4h":["po11nn22ja_4a2bb769158e","ge11nr11fr_39145d2b4dff","ge11nr11zh_a863093253e0","ge11nr11zh_96f6fc585bd1"]},"fingerprint_peers":{"t13i1514h2_8daaf6152771_de4a06bb82e3":41,"t13i130900_f57a46bbacb6_e7c285222651":3481},"user_agents":["Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko/20100101 Firefox/123.0","Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"],"timeline":[],"recent_events":[{"timestamp":"2026-03-18T05:33:45","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"pt-BR,pt;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/about","summary":"","payload_hex":"474554202f61626f757420485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f69642031343b20506978656c20382050726f29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30204d6f62696c65205361666172692f3533372e33360d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:44","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"ru-RU,ru;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://github.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/servers/save.cgi","summary":"","payload_hex":"474554202f736572766572732f736176652e63676920485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f69642031343b20506978656c20382050726f29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30204d6f62696c65205361666172692f3533372e33360d0a486f73743a20<HONEYPOT>3a383038370d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a446e743a20310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a5365632d46657463682d4d6f64653a206e617669676174650d0a43616368652d436f6e74726f6c3a206d61782d6167653d300d0a4163636570742d4c616e67756167653a2072752d52552c72753b713d302e392c656e3b713d302e380d0a526566657265723a2068747470733a2f2f6769746875622e636f6d2f0d0a557067726164652d496e7365637572652d52657175657374733a20310d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d536974653a206e6f6e650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:43","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"ja-JP,ja;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://stackoverflow.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/profile/*","summary":"","payload_hex":"474554202f70726f66696c652f2a20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286950686f6e653b20435055206950686f6e65204f532031375f33206c696b65204d6163204f53205829204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e33204d6f62696c652f313545313438205361666172692f3630342e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:41","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"es-ES,es;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://duckduckgo.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/data/*","summary":"","payload_hex":"474554202f6170692f646174612f2a20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132332e3029204765636b6f2f32303130303130312046697265666f782f3132332e300d0a486f73743a20<HONEYPOT>3a383038370d0a446e743a20310d0a557067726164652d496e7365637572652d52657175657374733a20310d0a5365632d46657463682d446573743a20646f63756d656e740d0a526566657265723a2068747470733a2f2f6475636b6475636b676f2e636f6d2f0d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a2065732d45532c65733b713d302e392c656e3b713d302e380d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a43616368652d436f6e74726f6c3a206d61782d6167653d300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:38","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://www.bing.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Googlebot/2.1 (+http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/form-test/*","summary":"","payload_hex":"474554202f666f726d2d746573742f2a20485454502f312e310d0a557365722d4167656e743a20476f6f676c65626f742f322e3120282b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a486f73743a20<HONEYPOT>3a383038370d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a43616368652d436f6e74726f6c3a206d61782d6167653d300d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a526566657265723a2068747470733a2f2f7777772e62696e672e636f6d2f0d0a446e743a20310d0a0d0a","method":"GET","user_agent":"Googlebot/2.1 (+http://www.google.com/bot.html)","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:36","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://www.reddit.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/package-updates/*.cgi","summary":"","payload_hex":"474554202f7061636b6167652d757064617465732f2a2e63676920485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f69642031343b20506978656c20382050726f29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30204d6f62696c65205361666172692f3533372e33360d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:35","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/rest/credential-translation","summary":"","payload_hex":"474554202f726573742f63726564656e7469616c2d7472616e736c6174696f6e20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3132332e3029204765636b6f2f32303130303130312046697265666f782f3132332e300d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:34","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"referer\":\"https://www.reddit.com/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/wp/v2/users","summary":"","payload_hex":"474554202f77702d6a736f6e2f77702f76322f757365727320485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30205361666172692f3533372e33360d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:29","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"ja-JP,ja;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.gitlab","summary":"","payload_hex":"474554202f2e6769746c616220485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132312e302e302e30205361666172692f3533372e33360d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-03-18T05:33:23","port":8087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-language\":\"pt-BR,pt;q=0.9,en;q=0.8\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8087\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.github/PULL_REQUEST_TEMPLATE.md","summary":"","payload_hex":"474554202f2e6769746875622f50554c4c5f524551554553545f54454d504c4154452e6d6420485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3132332e3029204765636b6f2f32303130303130312046697265666f782f3132332e300d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0","community_id":"1:PIJmCBsEfsf6J5xtqWni+MsPJQw=","ja3":"","session":"6ee9d4d0-74c5-4c59-bb96-33ca7e2ffd9d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0}],"http_methods":[{"method":"GET","count":34},{"method":"POST","count":1}],"distinct_ports_total":2,"top_paths":[{"path":"/.git","count":1,"ports":1},{"path":"/%2f%2egit/logs/refs/heads/master","count":1,"ports":1},{"path":"/.gitlab","count":1,"ports":1},{"path":"/about","count":1,"ports":1},{"path":"/s3.secret","count":1,"ports":1},{"path":"/%2f%2Egit","count":1,"ports":1},{"path":"/%2f%2egit/HEAD","count":1,"ports":1},{"path":"/form-test/*","count":1,"ports":1},{"path":"/~/.s3cfg","count":1,"ports":1},{"path":"/aws.yml","count":1,"ports":1},{"path":"/laravel/.ENV","count":1,"ports":1},{"path":"/.GIT/index","count":1,"ports":1},{"path":"/api/%c0%2eenv","count":1,"ports":1},{"path":"/profile/*","count":1,"ports":1},{"path":"/srv/.env","count":1,"ports":1}],"distinct_paths_total":35,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":11}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Language","Cache-Control","Connection","Dnt","Host","Referer","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Language","value":"ru-RU,ru;q=0.9,en;q=0.8","notable":false},{"name":"Cache-Control","value":"max-age=0","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"<HONEYPOT>:8087","notable":false},{"name":"Referer","value":"https://github.com/","notable":true},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-8181","tag_type":"cve","title":"WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/wp/v2/users","reference_urls":["https://github.com/murrez/CVE-2026-8181","https://nvd.nist.gov/vuln/detail/CVE-2026-8181"]},{"tag_id":"CVE-2025-4302","tag_type":"cve","title":"Stop User Enumeration WordPress plugin - Authentication Bypass","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/wp/v2/users","reference_urls":["https://wpscan.com/vulnerability/19f67d6e-4ffe-4126-ac42-fb23c5017a3e/","https://github.com/Kazgangap/cve-poc-garage/blob/main/2025/CVE-2025-4302.md","https://nvd.nist.gov/vuln/detail/CVE-2025-4302"]}],"data_as_of":"2026-07-23T13:03:05.827298+00:00"}