{"ip":"20.219.2.60","total_events":298,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"149 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["149 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,753,657 bytes sent","bytes_sent":1753657,"session_seconds":47,"persistent":false}},"first_seen":"2026-09-26T16:14:47","last_seen":"2026-09-27T10:07:58","events_24h":0,"events_7d":298,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Pune","lat":18.5211,"lon":73.8502,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":298}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun010_00000008_c4b2c4aa"]},"fingerprint_peers":{"a11cun010_00000008_c4b2c4aa":494},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-26","count":149},{"date":"2026-09-27","count":149}],"recent_events":[{"timestamp":"2026-09-27T10:07:58","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-includes/widgets/class-wp-widget-tags.php","summary":"","payload_hex":"474554202f77702d696e636c756465732f776964676574732f636c6173732d77702d7769646765742d746167732e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":149,"duration_ms":44911,"bytes_in":12143,"bytes_out":11324},{"timestamp":"2026-09-27T10:07:58","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin/controller/extension/extension/Not_Found.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e74726f6c6c65722f657874656e73696f6e2f657874656e73696f6e2f4e6f745f466f756e642e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":147,"duration_ms":44316,"bytes_in":11964,"bytes_out":11172},{"timestamp":"2026-09-27T10:07:58","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-includes/IXR/moon.php","summary":"","payload_hex":"474554202f77702d696e636c756465732f4958522f6d6f6f6e2e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":146,"duration_ms":44019,"bytes_in":11864,"bytes_out":11096},{"timestamp":"2026-09-27T10:07:58","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-includes/images/wlw/alfa-rex.php","summary":"","payload_hex":"474554202f77702d696e636c756465732f696d616765732f776c772f616c66612d7265782e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":148,"duration_ms":44614,"bytes_in":12049,"bytes_out":11248},{"timestamp":"2026-09-27T10:07:57","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-includes/widgets/aaa.php","summary":"","payload_hex":"474554202f77702d696e636c756465732f776964676574732f6161612e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":144,"duration_ms":43424,"bytes_in":11724,"bytes_out":10944},{"timestamp":"2026-09-27T10:07:57","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/img/wp-login.php","summary":"","payload_hex":"474554202f696d672f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":145,"duration_ms":43722,"bytes_in":11790,"bytes_out":11020},{"timestamp":"2026-09-27T10:07:57","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/classwithtostring.php","summary":"","payload_hex":"474554202f636c61737377697468746f737472696e672e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":143,"duration_ms":43127,"bytes_in":11647,"bytes_out":10868},{"timestamp":"2026-09-27T10:07:56","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-admin/css/colors/modern/alfa-rex.php","summary":"","payload_hex":"474554202f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f616c66612d7265782e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":142,"duration_ms":42828,"bytes_in":11576,"bytes_out":10792},{"timestamp":"2026-09-27T10:07:56","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-admin/maint/home.php","summary":"","payload_hex":"474554202f77702d61646d696e2f6d61696e742f686f6d652e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":140,"duration_ms":42233,"bytes_in":11415,"bytes_out":10640},{"timestamp":"2026-09-27T10:07:56","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"host\":\"pihole.chicago.vpnigo.de\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"//naxc.php","summary":"","payload_hex":"474554202f2f6e6178632e70687020485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"6e4dcbc0-3200-48cd-b401-50c1778cf372","seq":139,"duration_ms":41935,"bytes_in":11342,"bytes_out":10564}],"http_methods":[{"method":"GET","count":298}],"distinct_ports_total":1,"top_paths":[{"path":"/wp-includes/images/crystal/alfa-rex.php","count":2,"ports":1},{"path":"/wp-content/uploads/Nx_230d93a1.php","count":2,"ports":1},{"path":"/wp-admin/css/colors/blue/about.php","count":2,"ports":1},{"path":"/wp-content/upgrade/buy.php","count":2,"ports":1},{"path":"/file.php","count":2,"ports":1},{"path":"//naxc.php","count":2,"ports":1},{"path":"/images/bay.php","count":2,"ports":1},{"path":"/index/data.php","count":2,"ports":1},{"path":"/function.php","count":2,"ports":1},{"path":"/wp-content/index.php","count":2,"ports":1},{"path":"/wp-admin/images/aaa.php","count":2,"ports":1},{"path":"/wp-content/about.php","count":2,"ports":1},{"path":"/wp-admin/maint/yes.php","count":2,"ports":1},{"path":"/images/preupload.php","count":2,"ports":1},{"path":"/wp-admin/js/admin.php","count":2,"ports":1}],"distinct_paths_total":149,"top_snis":[],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":149},{"value":"chicago.vpnigo.de","count":149}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host"],"representative":[{"name":"Host","value":"pihole.chicago.vpnigo.de","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T08:37:00.692558+00:00"}