{"ip":"34.21.89.109","total_events":8428,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"56 exploit-path hits","confidence":"high","network_type":null,"why":["56 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 19,787,186 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,787,186 bytes sent","bytes_sent":19787186,"session_seconds":13,"persistent":false}},"first_seen":"2026-09-05T20:09:42","last_seen":"2026-09-05T20:11:00","events_24h":0,"events_7d":8428,"geo":{"country_code":"US","country_name":"United States","region":"District of Columbia","city":"Washington","lat":38.894,"lon":-77.0365,"asn":396982,"org":"Google LLC"},"source_domain":"109.89.21.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2019-11248","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof"},{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"}],"malware":[],"top_ports":[{"port":8081,"proto":"tcp","label":"","count":643},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":643},{"port":80,"proto":"tcp","label":"HTTP","count":643},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":643},{"port":9443,"proto":"tcp","label":"","count":643},{"port":443,"proto":"tcp","label":"HTTPS","count":643},{"port":2375,"proto":"tcp","label":"Docker","count":643},{"port":2376,"proto":"tcp","label":"Docker-TLS","count":643},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":643},{"port":9000,"proto":"tcp","label":"Web-alt","count":491},{"port":9090,"proto":"tcp","label":"Prometheus","count":469},{"port":3000,"proto":"tcp","label":"Web-alt","count":448},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":446},{"port":5173,"proto":"tcp","label":"","count":400},{"port":5000,"proto":"tcp","label":"Web-alt","count":387}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131100_f57a46bbacb6_9249cab70c77","t13i131200_f57a46bbacb6_7e55ffd90fc1"],"tls_ja3":["d8e37a40e57dedd5cdf50f846ffca8f8","879fcbac0ba29304629c82b09581bd46"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0300_0db47b7d240d","po11nr0900_e84d48e0c8fb","ge11nn05en_813e32c09d15","ge11nn0600_3e3d7a122305"]},"fingerprint_peers":{"t13i131100_f57a46bbacb6_9249cab70c77":27,"t13i131200_f57a46bbacb6_7e55ffd90fc1":26,"ge11nn0400_88d30a62b7ad":5908,"ge11nn0300_0db47b7d240d":5159,"po11nr0900_e84d48e0c8fb":19,"ge11nn05en_813e32c09d15":88,"ge11nn0600_3e3d7a122305":27},"user_agents":["Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/91.0.6424.59 Safari/537.36","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0","Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Version/19.4 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/147.0.8673.126 Mobile Safari/537.36","Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.2) Gecko/20100101 Firefox/105.2; compatible; GPTBot/1.2; +https://openai.com/gptbot","Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4739.31 Mobile Safari/537.36; compatible; ClaudeBot/1.0; +claudebot@anthropic.com","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"],"timeline":[{"date":"2026-09-05","count":8428}],"recent_events":[{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/service_account.json","summary":"","payload_hex":"474554202f736572766963655f6163636f756e742e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20436c617564652d557365722f312e303b202b436c617564652d5573657240616e7468726f7069632e636f6d290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)","ja3":"","session":"a2883b4d-75b0-4693-a3f4-3afbf237c872","seq":11,"duration_ms":1967,"bytes_in":3997,"bytes_out":847},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/v2/settings","summary":"","payload_hex":"474554202f6170692f76322f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"","session":"2a282dfb-23be-441e-bad1-30f12aebd81f","seq":10,"duration_ms":1967,"bytes_in":3331,"bytes_out":770},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/v2/config","summary":"","payload_hex":"474554202f6170692f76322f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2047726f6b426f742f312e303b202b68747470733a2f2f782e61692f67726f6b626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)","ja3":"","session":"f62b1fcc-fc54-4ecf-9731-ecb2be0463e9","seq":10,"duration_ms":1966,"bytes_in":3093,"bytes_out":770},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/130.0.6580.15 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/manifest.webmanifest","summary":"","payload_hex":"474554202f6d616e69666573742e7765626d616e696665737420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/130.0.6580.15 Safari/537.36","ja3":"","session":"27c3172a-813c-4be9-bfd7-6f0363cbfbed","seq":11,"duration_ms":1965,"bytes_in":3689,"bytes_out":847},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/122.0.7188.221 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/gcp-key.json","summary":"","payload_hex":"474554202f6763702d6b65792e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/122.0.7188.221 Mobile Safari/537.36","ja3":"","session":"996b9bbf-345b-4643-9da0-fed017df91e1","seq":12,"duration_ms":2370,"bytes_in":4119,"bytes_out":924},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/gc-service.json","summary":"","payload_hex":"474554202f67632d736572766963652e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f293b20636f6d70617469626c653b2054776974746572626f742f312e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0","ja3":"","session":"f2e8b4d3-93e8-4ef9-a6dd-7a606fce9d76","seq":12,"duration_ms":2119,"bytes_in":4096,"bytes_out":924},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.2170.139 Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.s3cfg","summary":"","payload_hex":"474554202f2e733363666720485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.2170.139 Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot","ja3":"","session":"bda1b50f-95ba-4832-9235-bda8a76bc544","seq":9,"duration_ms":2119,"bytes_in":3023,"bytes_out":693},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/key.json","summary":"","payload_hex":"474554202f6b65792e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20436c617564652d536561726368426f742f312e303b202b68747470733a2f2f7777772e616e7468726f7069632e636f6d2f636c617564652d736561726368626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)","ja3":"","session":"0a215161-67a7-4400-a0a4-7de2ff955b43","seq":10,"duration_ms":2117,"bytes_in":3518,"bytes_out":770},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/__/firebase/init.json","summary":"","payload_hex":"474554202f5f5f2f66697265626173652f696e69742e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","ja3":"","session":"d86330e3-1bd6-4be5-86c9-22c3a26f6874","seq":11,"duration_ms":2117,"bytes_in":3860,"bytes_out":847},{"timestamp":"2026-09-05T20:11:00","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/rclone.conf","summary":"","payload_hex":"474554202f72636c6f6e652e636f6e6620485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)","ja3":"","session":"444e8fd9-b2f2-4e5e-84fc-09b64228736c","seq":10,"duration_ms":2117,"bytes_in":3398,"bytes_out":770}],"http_methods":[{"method":"GET","count":8262},{"method":"POST","count":166}],"distinct_ports_total":15,"top_paths":[{"path":"/fetch","count":53,"ports":15},{"path":"/","count":29,"ports":15},{"path":"/actuator","count":28,"ports":15},{"path":"/proxy","count":27,"ports":14},{"path":"/.env.development.local","count":15,"ports":15},{"path":"/config/jenkins.xml","count":15,"ports":15},{"path":"/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":15,"ports":15},{"path":"/.env","count":15,"ports":15},{"path":"/.aws/credentials","count":15,"ports":15},{"path":"/.env.openai","count":15,"ports":15},{"path":"/app/.env","count":15,"ports":15},{"path":"/server/.env","count":15,"ports":15},{"path":"/api/.env","count":15,"ports":15},{"path":"/.env.azure","count":15,"ports":15},{"path":"/.cursor/mcp.json","count":15,"ports":15}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Host","value":"<HONEYPOT>:5173","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2019-11248","tag_type":"cve","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof","reference_urls":["https://medium.com/bugbountywriteup/my-first-bug-bounty-21d3203ffdb0","http://mmcloughlin.com/posts/your-pprof-is-showing","https://github.com/kubernetes/kubernetes/issues/81023","https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ","https://nvd.nist.gov/vuln/detail/CVE-2019-11248"]},{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]}],"data_as_of":"2026-09-11T01:48:08.853217+00:00"}