{"ip":"64.34.80.225","total_events":68454,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"59 exploit-path hits","confidence":"high","network_type":"CDN","why":["59 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 10,984,980 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,984,980 bytes sent","bytes_sent":10984980,"session_seconds":7,"persistent":false}},"first_seen":"2026-09-25T18:09:39","last_seen":"2026-09-26T00:37:53","events_24h":0,"events_7d":68454,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7126,"lon":-74.0066,"asn":396356,"org":"Latitude.sh"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as396356","label":"Latitude.sh AS396356","category":"cdn","url":"https://www.peeringdb.com/asn/396356"},"cve_matches":[],"malware":[],"top_ports":[{"port":5173,"proto":"tcp","label":"","count":68373},{"port":24678,"proto":"tcp","label":"","count":21},{"port":5172,"proto":"tcp","label":"","count":18},{"port":5171,"proto":"tcp","label":"","count":18},{"port":5175,"proto":"tcp","label":"","count":12},{"port":5174,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"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","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"http_akin":["a11cun040_0000004d_4110f156","a11cun030_0000004a_c91eaf54","a11cun071_e000004a_cfe69652","a11cun050_0400004d_a4d001fa","a11cun040_0000004b_4c87b06e"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":823,"a11cun040_0000004d_4110f156":38,"a11cun030_0000004a_c91eaf54":214,"a11cun071_e000004a_cfe69652":5,"a11cun050_0400004d_a4d001fa":1,"a11cun040_0000004b_4c87b06e":205},"akin_families":{"a11cun040_0000004d_4110f156":{"head":"a11cun040_0000004d_4110f156","shapes":2,"ips":38},"a11cun030_0000004a_c91eaf54":{"head":"a11cun030_0000004a_c91eaf54","shapes":2,"ips":214}},"user_agents":["CryptoHunter-Vite-2026/1.0"],"timeline":[{"date":"2026-09-25","count":19792},{"date":"2026-09-26","count":48662}],"recent_events":[{"timestamp":"2026-09-26T00:37:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/nope-18d8b7eb5f36e947.js.map","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f6e6f70652d313864386237656235663336653934372e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"1182cba5-779e-4afb-bf8d-2f123c56b823","seq":8,"duration_ms":1435,"bytes_in":1302,"bytes_out":616},{"timestamp":"2026-09-26T00:37:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"09dc5fde-1630-4714-9e13-2cb62603c1ca","seq":2,"duration_ms":696,"bytes_in":342,"bytes_out":154},{"timestamp":"2026-09-26T00:37:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"sec-fetch-dest\":\"script\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a5365632d46657463682d446573743a207363726970740d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"68a2df38-82d3-483c-9d4d-efcedc42b28d","seq":2,"duration_ms":577,"bytes_in":366,"bytes_out":154},{"timestamp":"2026-09-26T00:37:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/nope-18d8b7eb4a120c1c.js.map","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f6e6f70652d313864386237656234613132306331632e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"4c8a136d-8376-4b69-8430-ef65e869f13a","seq":2,"duration_ms":459,"bytes_in":360,"bytes_out":154},{"timestamp":"2026-09-26T00:37:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"0abe59e3-3b80-4b91-a74e-9e39d0124202","seq":2,"duration_ms":341,"bytes_in":345,"bytes_out":154},{"timestamp":"2026-09-26T00:37:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"sec-fetch-dest\":\"script\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a5365632d46657463682d446573743a207363726970740d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"1182cba5-779e-4afb-bf8d-2f123c56b823","seq":7,"duration_ms":842,"bytes_in":1122,"bytes_out":539},{"timestamp":"2026-09-26T00:37:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"1182cba5-779e-4afb-bf8d-2f123c56b823","seq":1,"duration_ms":100,"bytes_in":128,"bytes_out":77},{"timestamp":"2026-09-26T00:37:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/index.js","summary":"","payload_hex":"474554202f7372632f696e6465782e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"68a2df38-82d3-483c-9d4d-efcedc42b28d","seq":1,"duration_ms":102,"bytes_in":176,"bytes_out":77},{"timestamp":"2026-09-26T00:37:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/main.tsx","summary":"","payload_hex":"474554202f7372632f6d61696e2e74737820485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"09dc5fde-1630-4714-9e13-2cb62603c1ca","seq":1,"duration_ms":103,"bytes_in":176,"bytes_out":77},{"timestamp":"2026-09-26T00:37:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/@vite/env","summary":"","payload_hex":"474554202f40766974652f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"1182cba5-779e-4afb-bf8d-2f123c56b823","seq":3,"duration_ms":346,"bytes_in":407,"bytes_out":231}],"http_methods":[{"method":"GET","count":68445},{"method":"POST","count":9}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":166,"ports":6},{"path":"/node_modules/.vite/deps/_metadata.json","count":14,"ports":1},{"path":"/@fs/etc/passwd?import&raw","count":12,"ports":1},{"path":"/project.json","count":9,"ports":1},{"path":"/vite.config.ts","count":7,"ports":1},{"path":"/node_modules/.vite/deps_ssr/_metadata.json","count":7,"ports":1},{"path":"/@vite/env","count":7,"ports":1},{"path":"/static/%2e%2e%2fpackage.json","count":6,"ports":1},{"path":"/assets%2f..%2f.env","count":6,"ports":1},{"path":"/favicon.ico/","count":6,"ports":1},{"path":"/dist/..%2fpackage.json","count":6,"ports":1},{"path":"/build/../.env","count":6,"ports":1},{"path":"/static/assets/../../package.json","count":6,"ports":1},{"path":"/vite.svg/","count":6,"ports":1},{"path":"/dist/../.env","count":6,"ports":1}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[{"value":"file","count":3},{"value":"vite-posture-probe.invalid","count":3},{"value":"miner-hostcheck-48e42912.invalid","count":2},{"value":"miner-hostcheck-66b332bb.invalid","count":2},{"value":"miner-hostcheck-19b6e935.invalid","count":2}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","Sec-Fetch-Dest","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"<HONEYPOT>:5173","notable":false},{"name":"Sec-Fetch-Dest","value":"script","notable":false},{"name":"User-Agent","value":"CryptoHunter-Vite-2026/1.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-28T21:35:00.785340+00:00"}