{"ip":"77.90.185.243","observed":true,"total_events":5681,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"4 interactive session(s) carried an exploit attempt","confidence":"high","network_type":null,"why":["4 interactive session(s) carried an exploit attempt.","Under 5 sessions, so confidence is medium.","The first-packet sensors recorded 5,681 event(s) from this address as well.","Not in any known-scanner range.","Sent 92,029,871 bytes: sustained payload delivery, not a single opportunistic request.","Held a session open for 93s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"92,029,871 bytes sent, longest session 93s","bytes_sent":92029871,"session_seconds":93,"persistent":true},"basis":"interactive"},"first_seen":"2026-10-13T22:50:03","last_seen":"2026-10-15T00:29:23","events_24h":4277,"events_7d":5681,"interactive_sessions":613,"interactive_sessions_24h":613,"interactive_sessions_7d":613,"interactive_protocols":[{"protocol":"http","sessions":546},{"protocol":"tls","sessions":51}],"geo":{"country_code":"DE","country_name":"Germany","region":"","city":"","lat":51.2993,"lon":9.491,"asn":213790,"org":"Limited Network LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2024-50340","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo"}],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":613,"first_seen":"2026-10-14T18:01:13","last_seen":"2026-10-15T00:29:23","verdicts":[{"verdict":"scan","sessions":542},{"verdict":"unknown","sessions":67},{"verdict":"exploit-attempt","sessions":4}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":546}],"services":[{"protocol":"http","port":5173,"sessions":292},{"protocol":"http","port":2375,"sessions":254},{"protocol":"tls","port":2375,"sessions":39},{"protocol":"tls","port":5173,"sessions":12},{"protocol":"tcp","port":51005,"sessions":6},{"protocol":"tcp","port":81,"sessions":3},{"protocol":"tcp","port":5001,"sessions":3},{"protocol":"tcp","port":2375,"sessions":2},{"protocol":"tcp","port":5173,"sessions":2}],"logins":[],"commands":[],"downloads":[],"files":[]},"top_ports":[{"port":5173,"proto":"tcp","label":"","count":1016,"sessions":306},{"port":2375,"proto":"tcp","label":"Docker","count":1016,"sessions":295},{"port":6070,"proto":"tcp","label":"","count":1016,"sessions":0},{"port":8007,"proto":"tcp","label":"","count":975,"sessions":0},{"port":3001,"proto":"tcp","label":"","count":896,"sessions":0},{"port":2222,"proto":"tcp","label":"SSH-alt","count":762,"sessions":0},{"port":51005,"proto":"tcp","label":"","count":0,"sessions":6},{"port":81,"proto":"tcp","label":"","count":0,"sessions":3},{"port":5001,"proto":"tcp","label":"","count":0,"sessions":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4"],"http_akin":["b11cun050_0004003c_a47bb3dc","b11cun060_0004003d_f55b17ef","b11cun060_0004003d_8084a027"]},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":30,"b11cun050_0004003c_a47bb3dc":6,"b11cun060_0004003d_f55b17ef":6,"b11cun060_0004003d_8084a027":6},"akin_families":{"b11cun050_0004003c_a47bb3dc":{"head":"b11cun060_0004003d_f55b17ef","shapes":3,"ips":6},"b11cun060_0004003d_f55b17ef":{"head":"b11cun060_0004003d_f55b17ef","shapes":3,"ips":6},"b11cun060_0004003d_8084a027":{"head":"b11cun060_0004003d_f55b17ef","shapes":3,"ips":6}},"user_agents":["Mozilla/5.0 (Mobile; $LYF/$F30C/$LYF_F30C-000-09-09-010218; Android; rv:48.0) Gecko/48.0 Firefox/48.0 KAIOS/2.0","Mozilla/5.0 (Linux; U; Android 4.1.1; en-us; Prestige 7L_4.1 Build/Prestige) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30","Opera/9.63 (Windows NT 6.0; U; cs) Presto/2.1.1","Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; yie9)","Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.4) Gecko/20091007 Firefox/3.5.4","Mozilla/5.0 (iPad; CPU OS 5_0_1 like Mac OS X) qjyBrowser/77618.1.15526 AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A405 Safari/7534.48.3","Mozilla/5.0 (iPad; U; CPU OS 4_3_5 like Mac OS X; en-gb) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8L1 Safari/6533.18.5"],"timeline":[{"date":"2026-10-13","count":1016,"sessions":0},{"date":"2026-10-14","count":4665,"sessions":610},{"date":"2026-10-15","count":0,"sessions":3}],"recent_events":[{"timestamp":"2026-10-14T23:34:55","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"8decf7ef-390c-4e56-8413-e0e24fb0673e","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":78},{"timestamp":"2026-10-14T23:34:54","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_static/.env","summary":"","payload_hex":"474554202f5f7374617469632f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a20636c6f73650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":41,"duration_ms":28205,"bytes_in":11955,"bytes_out":3198},{"timestamp":"2026-10-14T23:34:54","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cron/.env","summary":"","payload_hex":"474554202f63726f6e2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":40,"duration_ms":27805,"bytes_in":11668,"bytes_out":3120},{"timestamp":"2026-10-14T23:34:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/build/.env","summary":"","payload_hex":"474554202f6275696c642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":39,"duration_ms":27178,"bytes_in":11379,"bytes_out":3042},{"timestamp":"2026-10-14T23:34:53","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/sites/all/libraries/mailchimp/.env","summary":"","payload_hex":"474554202f73697465732f616c6c2f6c69627261726965732f6d61696c6368696d702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":38,"duration_ms":26746,"bytes_in":11089,"bytes_out":2964},{"timestamp":"2026-10-14T23:34:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/mail/.env","summary":"","payload_hex":"474554202f6d61696c2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":37,"duration_ms":26312,"bytes_in":10775,"bytes_out":2886},{"timestamp":"2026-10-14T23:34:52","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/system/.env","summary":"","payload_hex":"474554202f73797374656d2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":36,"duration_ms":25864,"bytes_in":10486,"bytes_out":2808},{"timestamp":"2026-10-14T23:34:51","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/back/.env","summary":"","payload_hex":"474554202f6261636b2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":35,"duration_ms":25430,"bytes_in":10195,"bytes_out":2730},{"timestamp":"2026-10-14T23:34:51","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/base/.env","summary":"","payload_hex":"474554202f626173652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":34,"duration_ms":24952,"bytes_in":9906,"bytes_out":2652},{"timestamp":"2026-10-14T23:34:50","port":5173,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5173\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/project/.env","summary":"","payload_hex":"474554202f70726f6a6563742f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a353137330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20505043204d6163204f5320582031305f355f353b2066722d667229204170706c655765624b69742f3532352e313820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e312e32205361666172692f3532352e32302e310d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","ja3":"","session":"716184f3-ca30-4821-95d0-1ef342baf0c1","seq":33,"duration_ms":24498,"bytes_in":9617,"bytes_out":2574}],"http_methods":[{"method":"GET","count":5681}],"distinct_ports_total":9,"top_paths":[{"path":"/","count":90,"ports":6},{"path":"/site.zip","count":90,"ports":6},{"path":"/.env","count":46,"ports":6},{"path":"/sendgrid.env","count":46,"ports":6},{"path":"/api/.env","count":46,"ports":6},{"path":"/../.env","count":46,"ports":6},{"path":"/backend/.env","count":46,"ports":6},{"path":"/.env.example","count":45,"ports":6},{"path":"/demo/.env","count":45,"ports":6},{"path":"/config.dev.php","count":45,"ports":6},{"path":"/apps/.env","count":45,"ports":6},{"path":"/test/.env","count":45,"ports":6},{"path":"/src/.env","count":45,"ports":6},{"path":"/sendgrid/.env","count":45,"ports":6},{"path":"/dev/.env","count":45,"ports":6}],"distinct_paths_total":170,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":2919}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Language","Connection","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.5","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:5173","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_5; fr-fr) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-50340","tag_type":"cve","title":"Symfony Profiler - Remote Access via Injected Arguments","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/_profiler/phpinfo","reference_urls":["https://github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa","https://github.com/symfony/symfony/security/advisories/GHSA-x8vp-gf4q-mw5j","https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7","https://github.com/nollium/CVE-2024-50340-eos-exploit","https://nvd.nist.gov/vuln/detail/CVE-2024-50340"]}],"data_as_of":"2026-10-15T04:43:10.450363+00:00"}