{"ip":"34.58.231.245","total_events":262,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"195 exploit-path hits","confidence":"high","network_type":null,"why":["195 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 11,168,011 bytes: sustained payload delivery, not a single opportunistic request.","Held a session open for 67s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"11,168,011 bytes sent, longest session 67s","bytes_sent":11168011,"session_seconds":67,"persistent":true}},"first_seen":"2026-09-24T03:13:42","last_seen":"2026-09-24T03:14:49","events_24h":262,"events_7d":262,"geo":{"country_code":"US","country_name":"United States","region":"Iowa","city":"Council Bluffs","lat":41.2591,"lon":-95.8517,"asn":396982,"org":"Google LLC"},"source_domain":"245.231.58.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"},{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":262}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d4312h1_c7886603b240_b26ce05bbdd6"],"tls_client_hello":"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","tls_ja3":["07ff1e545ef8ab3fcf8a4dc9272221c2"],"http_akin":["a11cun072_0000004f_c865e68f","a11cuq092_0000064f_b0aff7c5","a11cun050_0000004f_3faed46e"]},"fingerprint_peers":{"t13d4312h1_c7886603b240_b26ce05bbdd6":2,"a11cun072_0000004f_c865e68f":2,"a11cuq092_0000064f_b0aff7c5":2,"a11cun050_0000004f_3faed46e":2},"akin_families":{"a11cun072_0000004f_c865e68f":{"head":"a11cun072_0000004f_c865e68f","shapes":2,"ips":3},"a11cun050_0000004f_3faed46e":{"head":"a11cun072_0000004f_c865e68f","shapes":2,"ips":3}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":262}],"recent_events":[{"timestamp":"2026-09-24T03:14:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"application/json\",\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"64397ae4-3acd-493d-8afd-f273a33aa4e5","seq":1,"duration_ms":100,"bytes_in":309,"bytes_out":78},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/www/phpinfo.php","summary":"","payload_hex":"474554202f7777772f706870696e666f2e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4e6578742d416374696f6e3a20780d0a582d4e6578746a732d526571756573742d49643a2063383562313736340d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":254,"duration_ms":65887,"bytes_in":80150,"bytes_out":19812},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/htdocs/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":255,"duration_ms":66000,"bytes_in":80462,"bytes_out":19890},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/public_html/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":256,"duration_ms":66114,"bytes_in":80779,"bytes_out":19968},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/site/phpinfo.php","summary":"","payload_hex":"474554202f736974652f706870696e666f2e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4e6578742d416374696f6e3a20780d0a582d4e6578746a732d526571756573742d49643a2063383562313736340d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":257,"duration_ms":66227,"bytes_in":81089,"bytes_out":20046},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/docs/phpinfo.php","summary":"","payload_hex":"474554202f646f63732f706870696e666f2e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4e6578742d416374696f6e3a20780d0a582d4e6578746a732d526571756573742d49643a2063383562313736340d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":258,"duration_ms":66340,"bytes_in":81399,"bytes_out":20124},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/wp-admin/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":259,"duration_ms":66454,"bytes_in":81713,"bytes_out":20202},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/administrator/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":260,"duration_ms":66569,"bytes_in":82032,"bytes_out":20280},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/core/phpinfo.php","summary":"","payload_hex":"474554202f636f72652f706870696e666f2e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4e6578742d416374696f6e3a20780d0a582d4e6578746a732d526571756573742d49643a2063383562313736340d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":261,"duration_ms":66683,"bytes_in":82342,"bytes_out":20358},{"timestamp":"2026-09-24T03:14:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-nextjs-request-id\":\"c85b1764\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/includes/phpinfo.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"07ff1e545ef8ab3fcf8a4dc9272221c2","session":"3e04731a-b4e2-4f7f-b3e3-70d333e10a99","seq":262,"duration_ms":66797,"bytes_in":82656,"bytes_out":20436}],"http_methods":[{"method":"GET","count":258},{"method":"POST","count":4}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":5,"ports":1},{"path":"/app/.env","count":1,"ports":1},{"path":"/webroot/index.php/_environment","count":1,"ports":1},{"path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","count":1,"ports":1},{"path":"/staging/phpinfo.php","count":1,"ports":1},{"path":"/server-status.php","count":1,"ports":1},{"path":"/hosting/phpinfo.php","count":1,"ports":1},{"path":"/preview/phpinfo.php","count":1,"ports":1},{"path":"/admin/phpinfo.php","count":1,"ports":1},{"path":"/administrator/.env","count":1,"ports":1},{"path":"/wp-admin/phpinfo.php","count":1,"ports":1},{"path":"/smtp/phpinfo.php","count":1,"ports":1},{"path":"/public/phpinfo.php","count":1,"ports":1},{"path":"/transactional/.env","count":1,"ports":1},{"path":"/public_html/.env","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":262}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":262}],"top_alpns":[{"value":"http/1.1","count":262}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","Next-Action","User-Agent","X-Nextjs-Request-Id"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","notable":false},{"name":"X-Nextjs-Request-Id","value":"c85b1764","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]},{"tag_id":"CVE-2026-4020","tag_type":"cve","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","reference_urls":[]}],"data_as_of":"2026-09-24T16:13:07.941914+00:00"}