{"ip":"20.204.110.107","total_events":279,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"139 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["139 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,146,180 bytes sent","bytes_sent":1146180,"session_seconds":45,"persistent":false}},"first_seen":"2026-09-24T18:27:14","last_seen":"2026-09-25T22:53:23","events_24h":0,"events_7d":279,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Pune","lat":18.5211,"lon":73.8502,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":279}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun010_00000008_c4b2c4aa"]},"fingerprint_peers":{"a11cun010_00000008_c4b2c4aa":494},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-24","count":139},{"date":"2026-09-25","count":140}],"recent_events":[{"timestamp":"2026-09-25T22:53:23","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/photo.php","summary":"","payload_hex":"474554202f70686f746f2e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":140,"duration_ms":41504,"bytes_in":8820,"bytes_out":11060},{"timestamp":"2026-09-25T22:53:23","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/opsh.php","summary":"","payload_hex":"474554202f6f7073682e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":139,"duration_ms":41207,"bytes_in":8761,"bytes_out":10981},{"timestamp":"2026-09-25T22:53:22","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wafs.php","summary":"","payload_hex":"474554202f776166732e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":137,"duration_ms":40614,"bytes_in":8635,"bytes_out":10823},{"timestamp":"2026-09-25T22:53:22","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/mo.php?p=","summary":"","payload_hex":"474554202f6d6f2e7068703f703d20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":136,"duration_ms":40318,"bytes_in":8577,"bytes_out":10744},{"timestamp":"2026-09-25T22:53:22","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/aboutt.php","summary":"","payload_hex":"474554202f61626f7574742e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":135,"duration_ms":40022,"bytes_in":8518,"bytes_out":10665},{"timestamp":"2026-09-25T22:53:22","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-file-reader.php","summary":"","payload_hex":"474554202f77702d66696c652d7265616465722e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":138,"duration_ms":40911,"bytes_in":8703,"bytes_out":10902},{"timestamp":"2026-09-25T22:53:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dz0.php","summary":"","payload_hex":"474554202f647a302e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":134,"duration_ms":39726,"bytes_in":8458,"bytes_out":10586},{"timestamp":"2026-09-25T22:53:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/32x1337.php","summary":"","payload_hex":"474554202f333278313333372e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":132,"duration_ms":39133,"bytes_in":8341,"bytes_out":10428},{"timestamp":"2026-09-25T22:53:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/matcha.php","summary":"","payload_hex":"474554202f6d61746368612e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":133,"duration_ms":39429,"bytes_in":8401,"bytes_out":10507},{"timestamp":"2026-09-25T22:53:20","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"//wp-content/plugins/erinyani/","summary":"","payload_hex":"474554202f2f77702d636f6e74656e742f706c7567696e732f6572696e79616e692f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f5ac06b5-13e1-4f47-a334-86a76f5ad63a","seq":130,"duration_ms":38537,"bytes_in":8211,"bytes_out":10270}],"http_methods":[{"method":"GET","count":279}],"distinct_ports_total":1,"top_paths":[{"path":"/myglu.php","count":4,"ports":1},{"path":"/wp-content/themes/index.php","count":4,"ports":1},{"path":"/wp-logis.php","count":2,"ports":1},{"path":"/i99z7zzbwtpteujvv6s8hiCdefault.php","count":2,"ports":1},{"path":"/inputs.php","count":2,"ports":1},{"path":"/wp-manager.php","count":2,"ports":1},{"path":"/flm.php","count":2,"ports":1},{"path":"/mac.php","count":2,"ports":1},{"path":"/xyn.php","count":2,"ports":1},{"path":"/b8.php","count":2,"ports":1},{"path":"/k.php","count":2,"ports":1},{"path":"/ops.php","count":2,"ports":1},{"path":"/155.php","count":2,"ports":1},{"path":"/sb.php","count":2,"ports":1},{"path":"/wp.php","count":2,"ports":1}],"distinct_paths_total":139,"top_snis":[],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":140},{"value":"chicago.vpnigo.de","count":139}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host"],"representative":[{"name":"Host","value":"pihole.chicago.vpnigo.de","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T08:37:49.260979+00:00"}