{"ip":"69.5.20.14","total_events":880,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"4 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["4 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"155,079 bytes sent","bytes_sent":155079,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T00:06:43","last_seen":"2026-09-16T10:01:15","events_24h":0,"events_7d":0,"geo":{"country_code":"ID","country_name":"Indonesia","region":"Yogyakarta","city":"","lat":-7.8035,"lon":110.3646,"asn":150436,"org":"Byteplus Pte. Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as150436","label":"Byteplus Pte. Ltd.","category":"cdn","url":"https://www.peeringdb.com/asn/150436"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":440},{"port":443,"proto":"tcp","label":"HTTPS","count":440}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":[]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2569},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0","Googlebot/2.1 (+http://www.google.com/bot.html)","python-requests/2.28.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","curl/7.68.0"],"timeline":[{"date":"2026-09-15","count":560},{"date":"2026-09-16","count":320}],"recent_events":[{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Googlebot/2.1 (+http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dist/js/app.js.map","summary":"","payload_hex":"474554202f646973742f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20476f6f676c65626f742f322e3120282b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Googlebot/2.1 (+http://www.google.com/bot.html)","ja3":"","session":"069aa6f6-f902-42f9-9acf-f9b05eb9f7ab","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Googlebot/2.1 (+http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/js/config.js.map","summary":"","payload_hex":"474554202f6a732f636f6e6669672e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20476f6f676c65626f742f322e3120282b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Googlebot/2.1 (+http://www.google.com/bot.html)","ja3":"","session":"89f3f641-88af-47bb-a7ed-31b506345a8f","seq":1,"duration_ms":101,"bytes_in":158,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/assets/js/app.js.map","summary":"","payload_hex":"474554202f6173736574732f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132312e3029204765636b6f2f32303130303130312046697265666f782f3132312e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0","ja3":"","session":"360b8bc3-520b-48bf-9083-8f0cf24bd8d4","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/static/js/app.js.map","summary":"","payload_hex":"474554202f7374617469632f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e3336204368726f6d652f3132302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","ja3":"","session":"e01696fb-2713-443c-a82a-fe0d10178b25","seq":1,"duration_ms":100,"bytes_in":225,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dist/js/app.js.map","summary":"","payload_hex":"474554202f646973742f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e3336204368726f6d652f3132302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","ja3":"","session":"50f74418-72ad-4f0f-81bc-f8c8b96eb9ea","seq":1,"duration_ms":101,"bytes_in":223,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Googlebot/2.1 (+http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/bundle.js.map","summary":"","payload_hex":"474554202f62756e646c652e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20476f6f676c65626f742f322e3120282b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Googlebot/2.1 (+http://www.google.com/bot.html)","ja3":"","session":"888caad8-4c9f-4a4a-896c-44e1c90ed027","seq":1,"duration_ms":100,"bytes_in":168,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/js/config.js.map","summary":"","payload_hex":"474554202f6a732f636f6e6669672e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e3336204368726f6d652f3132302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","ja3":"","session":"f81fcf20-9921-442f-b0a0-45e2ab2e0901","seq":1,"duration_ms":101,"bytes_in":205,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/static/js/main.js.map","summary":"","payload_hex":"474554202f7374617469632f6a732f6d61696e2e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132312e3029204765636b6f2f32303130303130312046697265666f782f3132312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0","ja3":"","session":"26598800-fbe3-4f60-a99d-992fe2e1d16a","seq":1,"duration_ms":100,"bytes_in":209,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/js/app.js.map","summary":"","payload_hex":"474554202f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"4b6cc8bf-3da3-48c8-aab4-9ea5f10c8673","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":75},{"timestamp":"2026-09-16T10:01:15","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/assets/js/app.js.map","summary":"","payload_hex":"474554202f6173736574732f6a732f6170702e6a732e6d617020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e3336204368726f6d652f3132302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","ja3":"","session":"b80c7612-a658-4009-963e-bb8dc40b070e","seq":1,"duration_ms":101,"bytes_in":219,"bytes_out":75}],"http_methods":[{"method":"GET","count":880}],"distinct_ports_total":2,"top_paths":[{"path":"/static/js/app.js.map","count":12,"ports":2},{"path":"/config.ini","count":12,"ports":2},{"path":"/.env","count":12,"ports":2},{"path":"/oss.yml","count":12,"ports":2},{"path":"/cos.yml","count":12,"ports":2},{"path":"/tencent.yml","count":12,"ports":2},{"path":"/api.json","count":12,"ports":2},{"path":"/.github/workflows/deploy.yml","count":12,"ports":2},{"path":"/.env.staging","count":12,"ports":2},{"path":"/bundle.js.map","count":12,"ports":2},{"path":"/secrets.json","count":12,"ports":2},{"path":"/config/oss.json","count":12,"ports":2},{"path":"/config.yaml","count":12,"ports":2},{"path":"/cloud.json","count":12,"ports":2},{"path":"/settings.json","count":12,"ports":2}],"distinct_paths_total":80,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T13:38:38.367566+00:00"}