{"ip":"34.65.98.115","total_events":99092,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"4 exploit-path probe(s)","confidence":"medium","network_type":null},"first_seen":"2026-06-14T10:52:20","last_seen":"2026-06-14T20:48:27","events_24h":0,"events_7d":46670,"geo":{"country_code":"CH","country_name":"Switzerland","region":"Zurich","city":"Zurich","lat":47.3643,"lon":8.5437,"asn":396982,"org":"Google LLC"},"source_domain":"115.98.65.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"}],"top_ports":[{"port":83,"proto":"tcp","label":"","count":99092}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1313h2_f57a46bbacb6_fb48f8b98a29","t13i1314h2_f57a46bbacb6_3b244d8fbcc8"],"tls_ja3":["e56c72ec790d5898f89528f5c080ca3b","bbfe3507a810aa6c11c659bd4c7b4cbd"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t13i1313h2_f57a46bbacb6_fb48f8b98a29":699,"t13i1314h2_f57a46bbacb6_3b244d8fbcc8":21,"ge11nn0400_88d30a62b7ad":7424},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"],"timeline":[{"date":"2026-06-14","count":99092}],"recent_events":[{"timestamp":"2026-06-14T20:48:27","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/frontend.tgz","summary":"","payload_hex":"474554202f6275696c642f66726f6e74656e642e74677a20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4834,"duration_ms":1766066,"bytes_in":896283,"bytes_out":372218},{"timestamp":"2026-06-14T20:48:26","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/frontend.tar.gz","summary":"","payload_hex":"474554202f6275696c642f66726f6e74656e642e7461722e677a20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4833,"duration_ms":1765709,"bytes_in":896097,"bytes_out":372141},{"timestamp":"2026-06-14T20:48:26","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/frontend.zip","summary":"","payload_hex":"474554202f6275696c642f66726f6e74656e642e7a697020485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4832,"duration_ms":1765349,"bytes_in":895908,"bytes_out":372064},{"timestamp":"2026-06-14T20:48:25","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.sql","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e73716c20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4831,"duration_ms":1765006,"bytes_in":895722,"bytes_out":371987},{"timestamp":"2026-06-14T20:48:25","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.sql.bz2","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e73716c2e627a3220485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4830,"duration_ms":1764652,"bytes_in":895533,"bytes_out":371910},{"timestamp":"2026-06-14T20:48:25","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.sql.gz","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e73716c2e677a20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4829,"duration_ms":1764299,"bytes_in":895340,"bytes_out":371833},{"timestamp":"2026-06-14T20:48:24","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.zst","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e7a737420485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4828,"duration_ms":1763949,"bytes_in":895148,"bytes_out":371756},{"timestamp":"2026-06-14T20:48:24","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.bz2","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e627a3220485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4827,"duration_ms":1763603,"bytes_in":894959,"bytes_out":371679},{"timestamp":"2026-06-14T20:48:24","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.gz","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e677a20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4826,"duration_ms":1763274,"bytes_in":894770,"bytes_out":371602},{"timestamp":"2026-06-14T20:48:23","port":83,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/build/application.rar","summary":"","payload_hex":"474554202f6275696c642f6170706c69636174696f6e2e72617220485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132342e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","community_id":"1:h39cFQr1tjnybCfzRF7O/LzHqe0=","ja3":"bbfe3507a810aa6c11c659bd4c7b4cbd","session":"c1252ecf-d316-489d-8f2d-90640a9af6f2","seq":4825,"duration_ms":1762922,"bytes_in":894582,"bytes_out":371525}],"http_methods":[{"method":"GET","count":99092}],"distinct_ports_total":1,"top_paths":[{"path":"/content/virtualenv.sql","count":1,"ports":1},{"path":"/backups/testing.tgz","count":1,"ports":1},{"path":"/api/wordpress.zst","count":1,"ports":1},{"path":"/server/restore.tar.gz","count":1,"ports":1},{"path":"/frontend/pip.tar.bz2","count":1,"ports":1},{"path":"/src/requirements.tar","count":1,"ports":1},{"path":"/frontend/.env.7z","count":1,"ports":1},{"path":"/internal/strapi.bz2","count":1,"ports":1},{"path":"/static/assets.7z","count":1,"ports":1},{"path":"/static/documents.zip","count":1,"ports":1},{"path":"/content/microservice.gz","count":1,"ports":1},{"path":"/api/v3/api-docs.sql.gz","count":1,"ports":1},{"path":"/backend/db_dump.sql","count":1,"ports":1},{"path":"/private/archive.zip","count":1,"ports":1},{"path":"/backup/error_log.tar.xz","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":99092}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:83","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]}],"data_as_of":"2026-06-21T16:08:42.578341+00:00"}