{"ip":"23.234.90.109","total_events":56,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"25 exploit-path hits","confidence":"high","network_type":null,"why":["25 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 76,914 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"76,914 bytes sent","bytes_sent":76914,"session_seconds":3,"persistent":false}},"first_seen":"2026-09-28T17:32:32","last_seen":"2026-09-28T17:32:35","events_24h":0,"events_7d":56,"geo":{"country_code":"US","country_name":"United States","region":"Arizona","city":"Phoenix","lat":33.4532,"lon":-112.0748,"asn":11878,"org":"tzulo, inc."},"source_domain":"static-23-234-90-109.cust.tzulo.com","known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2021-3129","title":"Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/_ignition/execute-solution"},{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":55},{"port":80,"proto":"tcp","label":"HTTP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i2014h2_a09f3c656075_0558b81db3bf","t13i2013h2_a09f3c656075_e42f34c56612"],"tls_client_hello":"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","tls_ja3":["5a527c775ff4ae29b4f0c77b113f9625","3e17546d54d42c7e0a9e2655600eca3d"],"http_akin":["b11cuq110_000d09de_d5fdca12","b11cun090_000c01de_c1d99d8b","b11cun100_000c01fe_65eae678","b11cuq110_000d09de_5e42767d","b11cun121_400c01df_35f0babc_xa81f"]},"fingerprint_peers":{"t13i2014h2_a09f3c656075_0558b81db3bf":1,"t13i2013h2_a09f3c656075_e42f34c56612":1,"b11cuq110_000d09de_d5fdca12":1,"b11cun090_000c01de_c1d99d8b":1,"b11cun100_000c01fe_65eae678":1,"b11cuq110_000d09de_5e42767d":1,"b11cun121_400c01df_35f0babc_xa81f":1},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"],"timeline":[{"date":"2026-09-28","count":56}],"recent_events":[{"timestamp":"2026-09-28T17:32:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.dockerenv","summary":"","payload_hex":"474554202f2e646f636b6572656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a6163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"16dfba80-637a-4ede-aea7-b4a95963923b","seq":6,"duration_ms":2049,"bytes_in":2575,"bytes_out":468},{"timestamp":"2026-09-28T17:32:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/Dockerfile","summary":"","payload_hex":"474554202f446f636b657266696c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a6163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"df5022a3-c4cd-4c1c-9a66-5833508dc666","seq":5,"duration_ms":2031,"bytes_in":2111,"bytes_out":390},{"timestamp":"2026-09-28T17:32:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"0\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"504f5354202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f68746d6c0d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a436f6e74656e742d4c656e6774683a20300d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a0d0a","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"3a006885-0c08-4c9f-b537-8829a5bb00ea","seq":6,"duration_ms":2039,"bytes_in":2535,"bytes_out":468},{"timestamp":"2026-09-28T17:32:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"0\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/dashboard","summary":"","payload_hex":"504f5354202f64617368626f61726420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"d68332d8-ace3-42ee-94ef-b1db7fe4731f","seq":6,"duration_ms":2047,"bytes_in":2577,"bytes_out":468},{"timestamp":"2026-09-28T17:32:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"51\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"{\"email\":[\"admin@admin.com\"],\"password\":{\"test\":1}}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/login","summary":"","payload_hex":"504f5354202f6170692f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"f3bf06b9-c65b-49ff-8483-a183df408e51","seq":6,"duration_ms":2036,"bytes_in":2640,"bytes_out":468},{"timestamp":"2026-09-28T17:32:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"51\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"{\"email\":[\"admin@admin.com\"],\"password\":{\"test\":1}}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/login","summary":"","payload_hex":"504f5354202f6170692f76312f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f68746d6c0d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e74656e742d4c656e6774683a2035310d0a0d0a7b22656d61696c223a5b2261646d696e4061646d696e2e636f6d225d2c2270617373776f7264223a7b2274657374223a317d7d","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"16dfba80-637a-4ede-aea7-b4a95963923b","seq":5,"duration_ms":1660,"bytes_in":2161,"bytes_out":390},{"timestamp":"2026-09-28T17:32:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"51\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"{\"email\":[\"admin@admin.com\"],\"password\":{\"test\":1}}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/graphql","summary":"","payload_hex":"504f5354202f6772617068716c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f68746d6c0d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e74656e742d4c656e6774683a2035310d0a0d0a7b22656d61696c223a5b2261646d696e4061646d696e2e636f6d225d2c2270617373776f7264223a7b2274657374223a317d7d","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"f3bf06b9-c65b-49ff-8483-a183df408e51","seq":5,"duration_ms":1647,"bytes_in":2159,"bytes_out":390},{"timestamp":"2026-09-28T17:32:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"0\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"3e17546d54d42c7e0a9e2655600eca3d","session":"3e96ad88-c86e-4598-ac32-dda13726c1dd","seq":5,"duration_ms":1644,"bytes_in":2107,"bytes_out":390},{"timestamp":"2026-09-28T17:32:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"51\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"{\"email\":[\"admin@admin.com\"],\"password\":{\"test\":1}}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/contact","summary":"","payload_hex":"504f5354202f636f6e7461637420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"bb2852b2-2848-4593-b64d-c753c89c7ced","seq":5,"duration_ms":1651,"bytes_in":2153,"bytes_out":390},{"timestamp":"2026-09-28T17:32:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/html\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"content-length\":\"0\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/admin","summary":"","payload_hex":"504f5354202f61646d696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a7365632d66657463682d646573743a20646f63756d656e740d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e30205361666172692f3630352e312e31350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f68746d6c0d0a7365632d66657463682d736974653a206e6f6e650d0a7365632d66657463682d6d6f64653a206e617669676174650d0a6163636570742d6c616e67756167653a20656e2d55532c656e3b713d302e390d0a7072696f726974793a20753d302c20690d0a6163636570742d656e636f64696e673a20677a69702c206465666c6174652c2062720d0a436f6e74656e742d4c656e6774683a20300d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a0d0a","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"6f95627d-cabb-4523-94ff-b92ab59773f2","seq":5,"duration_ms":1659,"bytes_in":2107,"bytes_out":390}],"http_methods":[{"method":"GET","count":45},{"method":"POST","count":11}],"distinct_ports_total":2,"top_paths":[{"path":"/.git/HEAD","count":3,"ports":2},{"path":"/","count":3,"ports":1},{"path":"/graphql","count":2,"ports":1},{"path":"/env.php","count":1,"ports":1},{"path":"/sysinfo.php","count":1,"ports":1},{"path":"/api/v1/","count":1,"ports":1},{"path":"/phpinfo","count":1,"ports":1},{"path":"/contact","count":1,"ports":1},{"path":"/admin","count":1,"ports":1},{"path":"/login","count":1,"ports":1},{"path":"/info","count":1,"ports":1},{"path":"/phpinf.php","count":1,"ports":1},{"path":"/laravel/.env","count":1,"ports":1},{"path":"/Dockerfile","count":1,"ports":1},{"path":"/.env.uat","count":1,"ports":1}],"distinct_paths_total":51,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":55}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Content-Length","Content-Type","Host","Priority","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/html","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Content-Length","value":"0","notable":false},{"name":"Content-Type","value":"application/x-www-form-urlencoded","notable":true},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Priority","value":"u=0, i","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-3129","tag_type":"cve","title":"Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/_ignition/execute-solution","reference_urls":["https://www.ambionics.io/blog/laravel-debug-rce","https://github.com/vulhub/vulhub/tree/master/laravel/CVE-2021-3129","https://nvd.nist.gov/vuln/detail/CVE-2021-3129","https://github.com/facade/ignition/pull/334","https://github.com/d4n-sec/d4n-sec.github.io"]},{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]}],"data_as_of":"2026-09-30T18:26:44.565902+00:00"}