{"ip":"64.34.81.199","total_events":28155,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"4 exploit-path hits","confidence":"high","network_type":"CDN","why":["4 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","Under 5 hits, so confidence is medium.","Not in any known-scanner range.","Sent 4,391,176 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"4,391,176 bytes sent","bytes_sent":4391176,"session_seconds":23,"persistent":false}},"first_seen":"2026-09-10T15:41:17","last_seen":"2026-09-12T14:40:41","events_24h":0,"events_7d":28155,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":396356,"org":"Latitude.sh"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as396356","label":"Latitude.sh AS396356","category":"cdn","url":"https://www.peeringdb.com/asn/396356"},"cve_matches":[],"malware":[],"top_ports":[{"port":5173,"proto":"tcp","label":"","count":27759},{"port":5174,"proto":"tcp","label":"","count":78},{"port":3000,"proto":"tcp","label":"Web-alt","count":72},{"port":3001,"proto":"tcp","label":"","count":72},{"port":4321,"proto":"tcp","label":"","count":72},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":72},{"port":24678,"proto":"tcp","label":"","count":8},{"port":5172,"proto":"tcp","label":"","count":8},{"port":5171,"proto":"tcp","label":"","count":8},{"port":5175,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0700_e40f0b498849","ge11nn0400_17292dadbc7b","ge11nn0500_522165ba7483","ge11nn0800_a7e14248b941"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":1174,"ge11nn0400_88d30a62b7ad":5755,"ge11nn0700_e40f0b498849":4,"ge11nn0500_522165ba7483":3,"ge11nn0800_a7e14248b941":3,"ge11nn0400_17292dadbc7b":1633},"user_agents":["CryptoHunter-Vite-2026/1.0","vitesweep/1"],"timeline":[{"date":"2026-09-10","count":433},{"date":"2026-09-11","count":144},{"date":"2026-09-12","count":27578}],"recent_events":[{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/nope-18d499c93ef90983.js.map","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f6e6f70652d313864343939633933656639303938332e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"f3c68649-9b95-4fd4-8dfa-3a1f9287766a","seq":8,"duration_ms":1544,"bytes_in":1334,"bytes_out":616},{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"3351d39d-2a1d-44db-9fbd-56d1aba2e8b7","seq":2,"duration_ms":741,"bytes_in":350,"bytes_out":154},{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"sec-fetch-dest\":\"script\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570732f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a5365632d46657463682d446573743a207363726970740d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"3578e580-33fe-4013-88cf-1ec192703f9e","seq":2,"duration_ms":612,"bytes_in":374,"bytes_out":154},{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/nope-18d499c928256e4b.js.map","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f6e6f70652d313864343939633932383235366534622e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"e429fc53-d2dd-4d49-ba5b-6c02865d0479","seq":2,"duration_ms":486,"bytes_in":367,"bytes_out":154},{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"d27aa155-2eaa-4342-85f7-5bedcb25b6a6","seq":2,"duration_ms":357,"bytes_in":354,"bytes_out":154},{"timestamp":"2026-09-12T14:40:41","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"sec-fetch-dest\":\"script\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/node_modules/.vite/deps_ssr/_metadata.json","summary":"","payload_hex":"474554202f6e6f64655f6d6f64756c65732f2e766974652f646570735f7373722f5f6d657461646174612e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a5365632d46657463682d446573743a207363726970740d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"f3c68649-9b95-4fd4-8dfa-3a1f9287766a","seq":7,"duration_ms":906,"bytes_in":1150,"bytes_out":539},{"timestamp":"2026-09-12T14:40:40","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/index.js","summary":"","payload_hex":"474554202f7372632f696e6465782e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"3351d39d-2a1d-44db-9fbd-56d1aba2e8b7","seq":1,"duration_ms":103,"bytes_in":180,"bytes_out":77},{"timestamp":"2026-09-12T14:40:40","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/main.jsx","summary":"","payload_hex":"474554202f7372632f6d61696e2e6a737820485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"3578e580-33fe-4013-88cf-1ec192703f9e","seq":1,"duration_ms":103,"bytes_in":180,"bytes_out":77},{"timestamp":"2026-09-12T14:40:40","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/main.ts","summary":"","payload_hex":"474554202f7372632f6d61696e2e747320485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"e429fc53-d2dd-4d49-ba5b-6c02865d0479","seq":1,"duration_ms":101,"bytes_in":179,"bytes_out":77},{"timestamp":"2026-09-12T14:40:40","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/javascript,text/plain;q=0.9\",\"accept-encoding\":\"gzip, deflate, br\",\"host\":\"<HONEYPOT>:5173\",\"user-agent\":\"CryptoHunter-Vite-2026/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/src/main.tsx","summary":"","payload_hex":"474554202f7372632f6d61696e2e74737820485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a2043727970746f48756e7465722d566974652d323032362f312e300d0a4163636570743a206170706c69636174696f6e2f6a6176617363726970742c746578742f706c61696e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a0d0a","method":"GET","user_agent":"CryptoHunter-Vite-2026/1.0","ja3":"","session":"d27aa155-2eaa-4342-85f7-5bedcb25b6a6","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":77}],"http_methods":[{"method":"GET","count":28149},{"method":"POST","count":6}],"distinct_ports_total":10,"top_paths":[{"path":"/","count":249,"ports":10},{"path":"/@vite/env","count":30,"ports":6},{"path":"/@vite/client","count":28,"ports":6},{"path":"/bundledDevClient.mjs","count":26,"ports":6},{"path":"/vite/hmr.js","count":24,"ports":6},{"path":"/__hmrClient.js","count":24,"ports":6},{"path":"/vite/client.js","count":24,"ports":6},{"path":"/vite/client.mjs","count":24,"ports":6},{"path":"/vite/client","count":24,"ports":6},{"path":"/vite/hmr","count":24,"ports":6},{"path":"/__hmrClient.mjs","count":24,"ports":6},{"path":"/vite/hmr.mjs","count":24,"ports":6},{"path":"/@vite/client.mjs","count":24,"ports":6},{"path":"/@vite/client.js","count":24,"ports":6},{"path":"/@hmr.mjs","count":24,"ports":6}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[{"value":"file","count":2},{"value":"vite-posture-probe.invalid","count":2},{"value":"miner-hostcheck-16812838.invalid","count":2},{"value":"miner-hostcheck-d498cba6.invalid","count":2}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","Sec-Fetch-Dest","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Host","value":"<HONEYPOT>:5173","notable":false},{"name":"Sec-Fetch-Dest","value":"script","notable":false},{"name":"User-Agent","value":"CryptoHunter-Vite-2026/1.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-13T23:13:01.497571+00:00"}