{"ip":"185.177.72.64","total_events":2860,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"121 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["121 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range.","Held a session open for 108s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"108,536,119 bytes sent, longest session 108s","bytes_sent":108536119,"session_seconds":108,"persistent":true}},"first_seen":"2026-09-25T10:51:07","last_seen":"2026-09-29T12:51:12","events_24h":520,"events_7d":2860,"geo":{"country_code":"FR","country_name":"France","region":"","city":"","lat":48.8582,"lon":2.3387,"asn":211590,"org":"Bucklog SARL"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"}],"malware":[],"top_ports":[{"port":8000,"proto":"tcp","label":"HTTP-alt","count":1040},{"port":3000,"proto":"tcp","label":"Web-alt","count":1040},{"port":443,"proto":"tcp","label":"HTTPS","count":780}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4"],"http_akin":["a11cun060_0000007b_8084a027","a11cun060_0000007b_f55b17ef","a11cun050_00000079_a47bb3dc"]},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":2129,"a11cun060_0000007b_8084a027":4,"a11cun060_0000007b_f55b17ef":4,"a11cun050_00000079_a47bb3dc":4},"akin_families":{"a11cun060_0000007b_8084a027":{"head":"a11cun060_0000007b_f55b17ef","shapes":3,"ips":4},"a11cun060_0000007b_f55b17ef":{"head":"a11cun060_0000007b_f55b17ef","shapes":3,"ips":4},"a11cun050_00000079_a47bb3dc":{"head":"a11cun060_0000007b_f55b17ef","shapes":3,"ips":4}},"user_agents":["Mozilla/5.0 (Windows NT 5.1; U; zh-cn; rv:1.8.1) Gecko/20061208 Firefox/2.0.0 Opera 9.50","Mozilla/5.0 (X11; U; Linux i686; sv-SE; rv:1.8.0.8) Gecko/20061108 Fedora/1.5.0.8-1.fc5 Firefox/1.5.0.8","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.2.0.0 Safari/537.22","Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; InfoPath.2)","Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 1520) like Gecko","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.82 Safari/537.36 OPR/35.0.2066.37","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/534.30 (KHTML, like Gecko) Version/8.0 Safari/534.30","Mozilla/5.0 (iPad; CPU OS 9_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) FxiOS/1.2 Mobile/13C75 Safari/601.1.46"],"timeline":[{"date":"2026-09-25","count":260},{"date":"2026-09-26","count":520},{"date":"2026-09-27","count":1560},{"date":"2026-09-29","count":520}],"recent_events":[{"timestamp":"2026-09-29T12:51:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/_static/.env","summary":"","payload_hex":"474554202f5f7374617469632f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a20636c6f73650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":260,"duration_ms":57423,"bytes_in":75321,"bytes_out":20280},{"timestamp":"2026-09-29T12:51:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cron/.env","summary":"","payload_hex":"474554202f63726f6e2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":259,"duration_ms":57211,"bytes_in":75036,"bytes_out":20202},{"timestamp":"2026-09-29T12:51:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/sites/all/libraries/mailchimp/.env","summary":"","payload_hex":"474554202f73697465732f616c6c2f6c69627261726965732f6d61696c6368696d702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":257,"duration_ms":56823,"bytes_in":74461,"bytes_out":20046},{"timestamp":"2026-09-29T12:51:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/mail/.env","summary":"","payload_hex":"474554202f6d61696c2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":256,"duration_ms":56587,"bytes_in":74149,"bytes_out":19968},{"timestamp":"2026-09-29T12:51:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/.env","summary":"","payload_hex":"474554202f6367692d62696e2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":255,"duration_ms":56337,"bytes_in":73862,"bytes_out":19890},{"timestamp":"2026-09-29T12:51:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/.env","summary":"","payload_hex":"474554202f6275696c642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":258,"duration_ms":57004,"bytes_in":74749,"bytes_out":20124},{"timestamp":"2026-09-29T12:51:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/audio/.env","summary":"","payload_hex":"474554202f617564696f2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":254,"duration_ms":56147,"bytes_in":73572,"bytes_out":19812},{"timestamp":"2026-09-29T12:51:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/protected/.env","summary":"","payload_hex":"474554202f70726f7465637465642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":250,"duration_ms":55595,"bytes_in":72419,"bytes_out":19500},{"timestamp":"2026-09-29T12:51:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/private/.env","summary":"","payload_hex":"474554202f707269766174652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":253,"duration_ms":56005,"bytes_in":73284,"bytes_out":19734},{"timestamp":"2026-09-29T12:51:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/shared/.env","summary":"","payload_hex":"474554202f7368617265642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35372e302e323938372e313130205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"81a12315-2639-498a-907f-98d52339b376","seq":249,"duration_ms":55414,"bytes_in":72127,"bytes_out":19422}],"http_methods":[{"method":"GET","count":2860}],"distinct_ports_total":3,"top_paths":[{"path":"/.env.test","count":11,"ports":3},{"path":"/sites/all/libraries/mailchimp/.env","count":11,"ports":3},{"path":"/app_dev.php/_profiler/.env","count":11,"ports":3},{"path":"/frontend/web/debug/default/view","count":11,"ports":3},{"path":"/index.php?file=../../../../../../../../root/.aws/credentials","count":11,"ports":3},{"path":"/app/config/parameters.yml","count":11,"ports":3},{"path":"/debug/default/view?panel=config","count":11,"ports":3},{"path":"/storage/logs/laravel.log","count":11,"ports":3},{"path":"/app_dev.php/_profiler/phpinfo","count":11,"ports":3},{"path":"/.env.production.local","count":11,"ports":3},{"path":"/var/.env.local.php","count":11,"ports":3},{"path":"/administrator/.env","count":11,"ports":3},{"path":"/application.properties","count":11,"ports":3},{"path":"/google-services.json","count":11,"ports":3},{"path":"/public_html/.env","count":11,"ports":3}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":1820}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Language","Connection","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.5","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]}],"data_as_of":"2026-09-30T01:06:30.868646+00:00"}