{"ip":"35.205.88.64","total_events":42,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"29 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["29 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,553 bytes sent","bytes_sent":13553,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-29T23:04:00","last_seen":"2026-09-29T23:04:01","events_24h":0,"events_7d":42,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"64.88.205.35.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":42}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1115h2_c5d436628c5c_934397ce148c","t13d111400_c5d436628c5c_934397ce148c","t13d1114h2_c5d436628c5c_d2ecb6802617"],"tls_client_hello":"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","tls_ja3":["72904ca78b64c594073f154004c89f6d","fc6a00f80c3469f8b779058d9283c761","c4ae0642545df6d0ee7359453e2471c7"],"http_akin":["b11cun050_0004001e_a3d0c27a","b11cun030_00040012_f6d8d797"]},"fingerprint_peers":{"t13d1115h2_c5d436628c5c_934397ce148c":3,"t13d111400_c5d436628c5c_934397ce148c":3,"t13d1114h2_c5d436628c5c_d2ecb6802617":3,"b11cun050_0004001e_a3d0c27a":5,"b11cun030_00040012_f6d8d797":66},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-29","count":42}],"recent_events":[{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.aws/config","summary":"","payload_hex":"474554202f2e6177732f636f6e66696720485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"e0e5c418-be63-48f0-94b7-340b9acd9de4","seq":1,"duration_ms":365,"bytes_in":164,"bytes_out":77},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.example","summary":"","payload_hex":"474554202f2e656e762e6578616d706c6520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"89d8ded3-e17d-4a7d-83ea-47a6521c7316","seq":2,"duration_ms":360,"bytes_in":345,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.live","summary":"","payload_hex":"474554202f2e656e762e6c69766520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"04f8f924-3581-442a-98c6-fe468b5955fd","seq":2,"duration_ms":341,"bytes_in":335,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.git/HEAD","summary":"","payload_hex":"474554202f2e6769742f4845414420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"e0e5c418-be63-48f0-94b7-340b9acd9de4","seq":2,"duration_ms":568,"bytes_in":326,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.old","summary":"","payload_hex":"474554202f2e656e762e6f6c6420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"c4ae0642545df6d0ee7359453e2471c7","session":"5bed89c8-33c2-485a-b4ec-8dc68fe5b8de","seq":4,"duration_ms":1024,"bytes_in":650,"bytes_out":308},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.openai","summary":"","payload_hex":"474554202f2e656e762e6f70656e616920485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"5a6be0ca-e5c8-4ec9-bbb1-5a070b6da633","seq":2,"duration_ms":382,"bytes_in":338,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.php","summary":"","payload_hex":"474554202f2e656e762e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a7d1db92-1a98-4fd8-b320-f867d6b574cd","seq":2,"duration_ms":330,"bytes_in":325,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"8544b936-3ef8-4d11-b33a-16bbf6908083","seq":2,"duration_ms":382,"bytes_in":332,"bytes_out":154},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.test","summary":"","payload_hex":"474554202f2e656e762e7465737420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"e55f7aba-78c6-46da-8ccd-5e9e99fc7e63","seq":3,"duration_ms":510,"bytes_in":486,"bytes_out":231},{"timestamp":"2026-09-29T23:04:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.prod","summary":"","payload_hex":"474554202f2e656e762e70726f6420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"54609f2d-4cbc-492b-815d-31a97ba68b2c","seq":2,"duration_ms":396,"bytes_in":335,"bytes_out":154}],"http_methods":[{"method":"GET","count":42}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/.docker/secrets.json","count":1,"ports":1},{"path":"/.env~","count":1,"ports":1},{"path":"/.env-sample","count":1,"ports":1},{"path":"/.env.testing","count":1,"ports":1},{"path":"/.env.staging","count":1,"ports":1},{"path":"/.docker/.env","count":1,"ports":1},{"path":"/.env-example","count":1,"ports":1},{"path":"/.env.docker","count":1,"ports":1},{"path":"/.env.aws","count":1,"ports":1},{"path":"/.env.test","count":1,"ports":1},{"path":"/.env","count":1,"ports":1},{"path":"/.env.dev","count":1,"ports":1},{"path":"/.env.local","count":1,"ports":1},{"path":"/.env.openai","count":1,"ports":1}],"distinct_paths_total":42,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":42}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":42}],"top_alpns":[{"value":"h2, http/1.1","count":5}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T16:08:54.410677+00:00"}