{"ip":"34.11.82.15","total_events":263,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"195 exploit-path hits","confidence":"high","network_type":null,"why":["195 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 10,727,299 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,727,299 bytes sent","bytes_sent":10727299,"session_seconds":31,"persistent":false}},"first_seen":"2026-09-24T04:51:07","last_seen":"2026-09-24T04:51:38","events_24h":263,"events_7d":263,"geo":{"country_code":"US","country_name":"United States","region":"District of Columbia","city":"Washington","lat":38.894,"lon":-77.0365,"asn":396982,"org":"Google LLC"},"source_domain":"15.82.11.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"},{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":263}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d4312h1_c7886603b240_b26ce05bbdd6"],"tls_client_hello":"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","tls_ja3":["07ff1e545ef8ab3fcf8a4dc9272221c2"],"http_akin":["a11cun072_0000004f_c865e68f","a11cuq092_0000064f_b0aff7c5","a11cun050_0000004f_3faed46e"]},"fingerprint_peers":{"t13d4312h1_c7886603b240_b26ce05bbdd6":2,"a11cun072_0000004f_c865e68f":2,"a11cuq092_0000064f_b0aff7c5":2,"a11cun050_0000004f_3faed46e":2},"akin_families":{"a11cun072_0000004f_c865e68f":{"head":"a11cun072_0000004f_c865e68f","shapes":2,"ips":3},"a11cun050_0000004f_3faed46e":{"head":"a11cun072_0000004f_c865e68f","shapes":2,"ips":3}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":263}],"recent_events":[{"timestamp":"2026-09-24T04:51:38","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"application/json\",\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"b7277a24-8626-4047-9a30-2fe505994b2d","seq":1,"duration_ms":100,"bytes_in":312,"bytes_out":76},{"timestamp":"2026-09-24T04:51:38","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/includes/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":262,"duration_ms":31185,"bytes_in":79250,"bytes_out":19912},{"timestamp":"2026-09-24T04:51:38","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/core/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":261,"duration_ms":31067,"bytes_in":78949,"bytes_out":19836},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/www/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":254,"duration_ms":30238,"bytes_in":76848,"bytes_out":19304},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/preview/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":253,"duration_ms":30119,"bytes_in":76552,"bytes_out":19228},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/htdocs/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":255,"duration_ms":30356,"bytes_in":77147,"bytes_out":19380},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/administrator/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":260,"duration_ms":30948,"bytes_in":78652,"bytes_out":19760},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/wp-admin/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":259,"duration_ms":30829,"bytes_in":78346,"bytes_out":19684},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/qa/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":252,"duration_ms":29999,"bytes_in":76252,"bytes_out":19152},{"timestamp":"2026-09-24T04:51:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"pihole.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c747f552\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/public_html/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"148cdee6-fe3d-473d-9472-81d566525e72","seq":256,"duration_ms":30475,"bytes_in":77451,"bytes_out":19456}],"http_methods":[{"method":"GET","count":259},{"method":"POST","count":4}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":5,"ports":1},{"path":"/app/.env","count":1,"ports":1},{"path":"/webroot/index.php/_environment","count":1,"ports":1},{"path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","count":1,"ports":1},{"path":"/staging/phpinfo.php","count":1,"ports":1},{"path":"/server-status.php","count":1,"ports":1},{"path":"/hosting/phpinfo.php","count":1,"ports":1},{"path":"/preview/phpinfo.php","count":1,"ports":1},{"path":"/admin/phpinfo.php","count":1,"ports":1},{"path":"/administrator/.env","count":1,"ports":1},{"path":"/wp-admin/phpinfo.php","count":1,"ports":1},{"path":"/smtp/phpinfo.php","count":1,"ports":1},{"path":"/public/phpinfo.php","count":1,"ports":1},{"path":"/transactional/.env","count":1,"ports":1},{"path":"/public_html/.env","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":263}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":263}],"top_alpns":[{"value":"http/1.1","count":263}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","Next-Action","User-Agent","X-Nextjs-Request-Id"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"pihole.chicago.vpnigo.de","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","notable":false},{"name":"X-Nextjs-Request-Id","value":"c747f552","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]},{"tag_id":"CVE-2026-4020","tag_type":"cve","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","reference_urls":[]}],"data_as_of":"2026-09-24T16:13:07.941577+00:00"}