{"ip":"45.138.12.27","total_events":46,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"29 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["29 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"16,354 bytes sent","bytes_sent":16354,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-28T03:04:44","last_seen":"2026-09-28T03:04:46","events_24h":0,"events_7d":46,"geo":{"country_code":"LT","country_name":"Lithuania","region":"","city":"","lat":55.4167,"lon":24.0,"asn":218785,"org":"Tc Datacenter Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":46}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1213h2_a538d02d76d5_bdbfad5f0873","t13d121200_a538d02d76d5_bdbfad5f0873","t13d1212h2_a538d02d76d5_f6eeaf393d2e"],"tls_client_hello":"16030101b9010001b503034b67ce151002aa88e0c9bda7ce8ad2cf28bcb6829564cfe257aa72665a22cd24208274780ec3ee6ffdf28402f67aad162c6f0d31514aac89673ae844e7bc49186a0018130213031301c02cc02bc030c02fc024c023c028c02700ff010001540000001a001800001576706e2e6368696361676f2e76706e69676f2e6465000b000403000102000a00160014001d0017001e0019001801000101010201030104002300000005000501000000000016000000170000000d002a0028040305030603080708080809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003300260024001d002013a40c8f6f1c13fe0852de1ec3071bde74e74c7c88d613e047b11c185194960900290094006f0069d4f29d5ec9590be47d59afaa0f1b93cc552b6a32475d5784358edfd2e07402fce8c173f5e1fd563b24481857f420bbf8762a5ea948b7c90b0ee35138910051403e4706a22d70230e146e21618069d932d769d239e4d7670c7d01aa63ed3333d0bc0ca23f41284cbd5927e00cbc002120beac30c26664e79e4d1319c930758f9bf427d3b029283c095413913cd43a15","tls_ja3":["3dd7722e35af71a5714920be822a2cf8","6b085700712ac68dd995a3f0b513f185","6ba5ebcd44d8e8d8b1fca175de0cbc31"],"http_akin":["b11cun050_0004001e_a3d0c27a","b11cun030_00040012_f6d8d797"]},"fingerprint_peers":{"t13d1213h2_a538d02d76d5_bdbfad5f0873":1,"t13d121200_a538d02d76d5_bdbfad5f0873":1,"t13d1212h2_a538d02d76d5_f6eeaf393d2e":1,"b11cun050_0004001e_a3d0c27a":5,"b11cun030_00040012_f6d8d797":66},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-28","count":46}],"recent_events":[{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.git/logs/HEAD","summary":"","payload_hex":"474554202f2e6769742f6c6f67732f4845414420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"df6c734a-2e49-4a09-9e1b-b010884382d1","seq":3,"duration_ms":445,"bytes_in":495,"bytes_out":231},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.production","summary":"","payload_hex":"474554202f2e656e762e70726f64756374696f6e20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"c3cc79ba-de98-48b2-b79f-ed27f5d8a176","seq":2,"duration_ms":397,"bytes_in":345,"bytes_out":154},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.prod","summary":"","payload_hex":"474554202f2e656e762e70726f6420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"6f34b40e-7408-4c96-8f96-acb9bc3efb0f","seq":3,"duration_ms":566,"bytes_in":502,"bytes_out":231},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.sample","summary":"","payload_hex":"474554202f2e656e762e73616d706c6520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"20d16afb-7eeb-4b63-926f-b3c02a298edc","seq":2,"duration_ms":319,"bytes_in":325,"bytes_out":154},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.staging","summary":"","payload_hex":"474554202f2e656e762e73746167696e6720485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"79ceccb7-0ec1-4e06-8379-715c16349acc","seq":3,"duration_ms":529,"bytes_in":487,"bytes_out":231},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env-sample","summary":"","payload_hex":"474554202f2e656e762d73616d706c6520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"df6c734a-2e49-4a09-9e1b-b010884382d1","seq":1,"duration_ms":107,"bytes_in":164,"bytes_out":77},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.test","summary":"","payload_hex":"474554202f2e656e762e7465737420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"f4119bda-7044-422f-8227-43498e5fef1f","seq":4,"duration_ms":748,"bytes_in":678,"bytes_out":308},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env~","summary":"","payload_hex":"474554202f2e656e767e20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"2aede477-0ad1-4e63-b93d-4fb3a6c4eefb","seq":2,"duration_ms":317,"bytes_in":320,"bytes_out":154},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.swp","summary":"","payload_hex":"474554202f2e656e762e73777020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"f62a6bc0-61db-4f51-9966-f83742fd39f8","seq":4,"duration_ms":745,"bytes_in":659,"bytes_out":308},{"timestamp":"2026-09-28T03:04:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.testing","summary":"","payload_hex":"474554202f2e656e762e74657374696e6720485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"6ba5ebcd44d8e8d8b1fca175de0cbc31","session":"ccac8aa2-2d08-48e2-bedf-6145db7fae18","seq":3,"duration_ms":532,"bytes_in":538,"bytes_out":231}],"http_methods":[{"method":"GET","count":46}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/.git-credentials","count":1,"ports":1},{"path":"/.env~","count":1,"ports":1},{"path":"/.boto","count":1,"ports":1},{"path":"/.env-sample","count":1,"ports":1},{"path":"/.git/logs/HEAD","count":1,"ports":1},{"path":"/.env.testing","count":1,"ports":1},{"path":"/.env.staging","count":1,"ports":1},{"path":"/.docker/.env","count":1,"ports":1},{"path":"/.env-example","count":1,"ports":1},{"path":"/.env.docker","count":1,"ports":1},{"path":"/.env.aws","count":1,"ports":1},{"path":"/.env","count":1,"ports":1},{"path":"/.env.test","count":1,"ports":1},{"path":"/.env.prod","count":1,"ports":1}],"distinct_paths_total":46,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":46}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":46}],"top_alpns":[{"value":"h2, http/1.1","count":6}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T16:09:22.711951+00:00"}