{"ip":"45.148.10.183","total_events":31041,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"80 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["80 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range.","Held a session open for 3033s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"47,757,544,338 bytes sent, longest session 3033s","bytes_sent":47757544338,"session_seconds":3033,"persistent":true}},"first_seen":"2026-06-10T10:27:24","last_seen":"2026-08-13T02:03:43","events_24h":0,"events_7d":30909,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":48090,"org":"Techoff Srv Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":15511},{"port":80,"proto":"tcp","label":"HTTP","count":15398},{"port":3389,"proto":"tcp","label":"RDP","count":132}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3111h2_e8f1e7e78f70_8d633dac7124"],"tls_ja3":["9b55a9609c756df436b6aa0a2adee99e"],"ja4h":["ge11nn0300_042112399351"]},"fingerprint_peers":{"t13i3111h2_e8f1e7e78f70_8d633dac7124":8,"ge11nn0300_042112399351":3332},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"],"timeline":[{"date":"2026-06-10","count":66},{"date":"2026-06-11","count":66},{"date":"2026-08-13","count":30909}],"recent_events":[{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/secrets/keys.txt","summary":"","payload_hex":"474554202f736563726574732f6b6579732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15212,"duration_ms":2989743,"bytes_in":3094275,"bytes_out":1186536},{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/_profiler/security.php","summary":"","payload_hex":"474554202f5f70726f66696c65722f73656375726974792e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15211,"duration_ms":2989547,"bytes_in":3094074,"bytes_out":1186458},{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/old/lara/phpinfo.php","summary":"","payload_hex":"474554202f6f6c642f6c6172612f706870696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15210,"duration_ms":2989352,"bytes_in":3093867,"bytes_out":1186380},{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/actix.log.copy.backup.original","summary":"","payload_hex":"474554202f61637469782e6c6f672e636f70792e6261636b75702e6f726967696e616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15209,"duration_ms":2989156,"bytes_in":3093662,"bytes_out":1186302},{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/netlify.json~","summary":"","payload_hex":"474554202f6e65746c6966792e6a736f6e7e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15208,"duration_ms":2988960,"bytes_in":3093447,"bytes_out":1186224},{"timestamp":"2026-08-13T02:03:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-config.original","summary":"","payload_hex":"474554202f77702d636f6e6669672e6f726967696e616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15207,"duration_ms":2988764,"bytes_in":3093249,"bytes_out":1186146},{"timestamp":"2026-08-13T02:03:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/public/config.env","summary":"","payload_hex":"474554202f7075626c69632f636f6e6669672e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15206,"duration_ms":2988565,"bytes_in":3093046,"bytes_out":1186068},{"timestamp":"2026-08-13T02:03:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/config/settings.py","summary":"","payload_hex":"474554202f636f6e6669672f73657474696e67732e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15205,"duration_ms":2988370,"bytes_in":3092844,"bytes_out":1185990},{"timestamp":"2026-08-13T02:03:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.git/credentials.swp.swp","summary":"","payload_hex":"474554202f2e6769742f63726564656e7469616c732e7377702e73777020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15204,"duration_ms":2988169,"bytes_in":3092641,"bytes_out":1185912},{"timestamp":"2026-08-13T02:03:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/koa.log.original.bak","summary":"","payload_hex":"474554202f6b6f612e6c6f672e6f726967696e616c2e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31325f3329204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f35362e302e323932342e3837205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","ja3":"9b55a9609c756df436b6aa0a2adee99e","session":"2587bb26-3398-446e-9a15-62dfd9f9cc7f","seq":15203,"duration_ms":2987974,"bytes_in":3092432,"bytes_out":1185834}],"http_methods":[{"method":"GET","count":30909}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":2},{"path":"/processor/.env","count":4,"ports":2},{"path":"/admins/php.php","count":4,"ports":2},{"path":"/build.sh","count":4,"ports":2},{"path":"/nuxt.config.mjs.swp","count":4,"ports":2},{"path":"/settings.cfg","count":4,"ports":2},{"path":"/ftp/.env","count":4,"ports":2},{"path":"/administration/service/info.php","count":4,"ports":2},{"path":"/packages/client/.env","count":4,"ports":2},{"path":"/test/infos.php","count":4,"ports":2},{"path":"/Dockerfile~","count":4,"ports":2},{"path":"/products/laravel.log","count":4,"ports":2},{"path":"/terraform.tf.save","count":4,"ports":2},{"path":"/warp.log.copy.original.original","count":4,"ports":2},{"path":"/*.env.production","count":4,"ports":2}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":15511}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-15T07:00:37.315653+00:00"}