{"ip":"46.101.174.66","total_events":86,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"10 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["10 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"100,385 bytes sent","bytes_sent":100385,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T17:02:01","last_seen":"2026-09-27T17:37:29","events_24h":0,"events_7d":86,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":20},{"port":801,"proto":"tcp","label":"","count":20},{"port":2083,"proto":"tcp","label":"","count":20},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":10},{"port":5001,"proto":"tcp","label":"","count":10},{"port":8090,"proto":"tcp","label":"","count":2},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":2},{"port":10000,"proto":"tcp","label":"Webmin","count":1},{"port":2086,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"16030105ee010005ea03039d7d85c147b8d383dde0656b98a89e1a990361e13f905a6eac4f7e51991fd52120cecbaa30e2ea6bc57183450b925c27f45b7f087b1e60310f0cd201f1b9088a420032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c01100051301130213030100056f000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d001c001a090409050906080404030807080508060401050106010503060300320020001e090409050906080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c062063a45fc9af6158a34d7c4250a9cc465b6da573d93d6ad98149506851f0e73345b35906a41b2ee1154283373ac089544ca92944393967123cd072a710b68d4dc48fd84a97de797c2d7cb8cd84452370361e29cb184193c8454727934d470a4075322d6684d8bfb530e825e0862ac69564be413415ee57dd31c6cb463ae1042ae6d88ac12a0c702c20b1e95158bf95238ebc073c03e7883c86c512c5e58785db12f5fab9e99327e3400c8b17cb9d2d17432e41942726f1cb72e6686c16a41ab8b834b4ea46ffe95b3abe2817d001efb14c40f07a87d6cae2df8809091b2e283026546aaaf58569fac388d08cbc88029691ccc777bb830ac20a166396013c362250cb505cc81c324dbd73204a6c9ccd96296b509d25a088acb557470cb09827432897958b65887b61d5e449bc0a0ace21b21b7110ab5b972f1359651057eceea116e28a530255a91c7c2da8391579bb48fea048df47e37821530c29e6c199b3a1b7dc13c46b2d391ef7b7cd980ab7d4780eab3cbcaa33b5ef7aaad2a87ece56f6806aecaf9bd75647adbe49ca293b887128bc4367e0bc725794c81925613134b24398cc275b13c1a65232c69047babb4e5d45cbcf691c8ba9d3527974b747eee79681bb769ce242cf4e3064e835ecf2b18562aad18bbab3dfb3b0da83650804310262d1b20873c42a9203182dc809464d4b4227b487ba128dce6120cd80a7b810306191f2b89730f16b6953b7adc34c3bfd6701c87655156ad2d359c8b706b91db714f4484af73458f8b8662e884d2599fff29512a1a0afed77cebf1b265f72806430b053120c5c9582e377597e8beb5d66e40971f1e04ac0ad49567538526dac1fc07bcf5220907082be0c44bae1a99d1d67fa84c0f825a62df9917363a5e7826bfdad95df6c960731c38615a5274c38a8d18ad22d879aa8b1d5480af804ca69b3883a2b52fd8ba08251645b8f4030c536ef8403b8b836053e94973665bdbc71017e55a644cc556d6c14fe555c9877f88616da4252192044676c889e881b5c73a21b085cb4efc231ad82196844218f1c7b185741e585841718adcd56f73c1b267bb5a61364704e0275f218ab9730b33c31031e58d10e13ababb3ce7eb3fc76a16051a13b0c2b0abb614ca1b96537b02f8d097174b1c48ec2245c97cada7acb532a48765632b06654204907d462e67781ba6d2830ae30098fa03afc342e1a004d2165487d983d3c094319b2ab42a7f3cabae4de21123331ee079c4eff85774f1cac9519b5a44c9f7106cf39a90e30045c591542275055cc1359409c6f55714b98910a5899f29f19049b4278148cc45cb7bfc393e5e52b5d91580dce4c64ae205d6783051cbc253b10b2ae1217dcbb692c9970bd077c98cc009c9c8b0d18238c526d60405ab2030c8795eea7b7995612e06a368bbb64d7d54a15a58a4143099ade1b8ccda37ba5a8ffdb3b416c08bfad1056a7049d67946d0098c5d721dab594acd36c90153c2c2148969269f0790bca56c4f77d50c3e923ed6a69ce99a0e286012bdf2611342b2554b7f26736595a67190d06f078a863ae41b26006dd5491c11776dd016ab0584bc5854b09842c90a1964fad55c1cc5982fa915d6283253e77ccdc6dadf586ba5b7d2bf66ebf37595051b61862985d563de155175a6c145fbe193b4495957dde35c8e4df740b4a41a1ad3fadc401379c6ed3a72641c36fbff7c001d002093b4495957dde35c8e4df740b4a41a1ad3fadc401379c6ed3a72641c","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun060_00c0004e_0af44bea","a11cun050_0000005d_7266f93a"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":38,"a11cun060_00c0004e_0af44bea":39,"a11cun050_0000005d_7266f93a":42},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0","Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-25","count":6},{"date":"2026-09-27","count":80}],"recent_events":[{"timestamp":"2026-09-27T17:37:29","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.backup","summary":"","payload_hex":"474554202f2e656e762e6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30205831313b205562756e74753b204c696e7578207838365f36343b2072763a3132362e30204765636b6f2f32303130303130312046697265666f782f3132362e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":6,"duration_ms":1408,"bytes_in":1360,"bytes_out":468},{"timestamp":"2026-09-27T17:37:29","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.bak","summary":"","payload_hex":"474554202f2e656e762e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31353b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":7,"duration_ms":1515,"bytes_in":1567,"bytes_out":546},{"timestamp":"2026-09-27T17:37:29","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/115.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31353b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131352e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/115.0","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":8,"duration_ms":2048,"bytes_in":1774,"bytes_out":624},{"timestamp":"2026-09-27T17:37:29","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/4.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backend/.env","summary":"","payload_hex":"474554202f6261636b656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e372e323029204765636b6f2f2046697265666f782f342e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/4.0","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":9,"duration_ms":2174,"bytes_in":1962,"bytes_out":702},{"timestamp":"2026-09-27T17:37:29","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e34205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":10,"duration_ms":2275,"bytes_in":2202,"bytes_out":780},{"timestamp":"2026-09-27T17:37:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.staging","summary":"","payload_hex":"474554202f2e656e762e73746167696e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133372e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":3,"duration_ms":1056,"bytes_in":670,"bytes_out":234},{"timestamp":"2026-09-27T17:37:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.development","summary":"","payload_hex":"474554202f2e656e762e646576656c6f706d656e7420485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284b6e6f707069783b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":4,"duration_ms":1197,"bytes_in":904,"bytes_out":312},{"timestamp":"2026-09-27T17:37:28","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.local","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f34322e302e323331312e313335205361666172692f3533372e333620456467652f31322e31303234300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":5,"duration_ms":1307,"bytes_in":1158,"bytes_out":390},{"timestamp":"2026-09-27T17:37:27","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.1) Gecko/20100101 Firefox/65.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env","summary":"","payload_hex":"474554202f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b205562756e74753b204c696e7578207838365f36343b2072763a36352e3129204765636b6f2f32303130303130312046697265666f782f36352e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.1) Gecko/20100101 Firefox/65.1","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":78},{"timestamp":"2026-09-27T17:37:27","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.production","summary":"","payload_hex":"474554202f2e656e762e70726f64756374696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3629204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31332e302e34205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15","ja3":"","session":"ebe0e602-9472-41d5-94b6-aeebbea81dbe","seq":2,"duration_ms":234,"bytes_in":444,"bytes_out":156}],"http_methods":[{"method":"GET","count":86}],"distinct_ports_total":9,"top_paths":[{"path":"/.env","count":8,"ports":5},{"path":"/.env.staging","count":8,"ports":5},{"path":"/app/.env","count":8,"ports":5},{"path":"/api/.env","count":8,"ports":5},{"path":"/.env.local","count":8,"ports":5},{"path":"/.env.backup","count":8,"ports":5},{"path":"/.env.bak","count":8,"ports":5},{"path":"/backend/.env","count":8,"ports":5},{"path":"/.env.production","count":8,"ports":5},{"path":"/.env.development","count":8,"ports":5},{"path":"/","count":6,"ports":4}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:8443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T20:50:37.359915+00:00"}