{"ip":"79.124.58.82","observed":true,"total_events":4356,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":"residential ISP","why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,214,740 bytes sent","bytes_sent":2214740,"session_seconds":2,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-03T02:22:25","last_seen":"2026-10-09T17:33:42","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BG","country_name":"Bulgaria","region":"","city":"","lat":42.696,"lon":23.332,"asn":50360,"org":"Tamatiya EOOD"},"source_domain":"ip-58-82.superbithost.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":1500},{"port":443,"proto":"tcp","label":"HTTPS","count":1400},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":791},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":665}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":3094,"b11cun040_00040016_aa48e2c8":5447},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-10-03","count":1527},{"date":"2026-10-04","count":856},{"date":"2026-10-05","count":814},{"date":"2026-10-06","count":709},{"date":"2026-10-09","count":450}],"recent_events":[{"timestamp":"2026-10-09T17:33:42","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/compose/.env","summary":"","payload_hex":"474554202f636f6d706f73652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"c72b1f27-3de3-4e28-bccb-6b366a715f6b","seq":3,"duration_ms":441,"bytes_in":542,"bytes_out":231},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/credentials.py","summary":"","payload_hex":"474554202f63726564656e7469616c732e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"0de6b659-7c08-4775-82ed-eb9433cdd426","seq":6,"duration_ms":974,"bytes_in":1052,"bytes_out":462},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/docker/compose/withPostgres/.env","summary":"","payload_hex":"474554202f646f636b65722f636f6d706f73652f77697468506f7374677265732f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"c098d841-1b2d-403b-a644-a7b0be6b6642","seq":3,"duration_ms":446,"bytes_in":546,"bytes_out":231},{"timestamp":"2026-10-09T17:33:42","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/html/.env","summary":"","payload_hex":"474554202f68746d6c2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"aedf7564-f267-48ad-9e68-c9a71a844cae","seq":3,"duration_ms":446,"bytes_in":525,"bytes_out":231},{"timestamp":"2026-10-09T17:33:42","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/docker-compose/.env","summary":"","payload_hex":"474554202f646f636b65722d636f6d706f73652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"b54f563d-5a3a-4a73-9707-c2a8128ba553","seq":3,"duration_ms":446,"bytes_in":549,"bytes_out":231},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.tmp","summary":"","payload_hex":"474554202f2e656e762e746d7020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"6ed8639c-8707-4907-807d-f393bf49f285","seq":5,"duration_ms":738,"bytes_in":858,"bytes_out":385},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"6ed8639c-8707-4907-807d-f393bf49f285","seq":3,"duration_ms":419,"bytes_in":517,"bytes_out":231},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env_backup","summary":"","payload_hex":"474554202f2e656e765f6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"c098d841-1b2d-403b-a644-a7b0be6b6642","seq":5,"duration_ms":782,"bytes_in":898,"bytes_out":385},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.json","summary":"","payload_hex":"474554202f2e656e762e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"0de6b659-7c08-4775-82ed-eb9433cdd426","seq":5,"duration_ms":815,"bytes_in":876,"bytes_out":385},{"timestamp":"2026-10-09T17:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/www/.env","summary":"","payload_hex":"474554202f7777772f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"c098d841-1b2d-403b-a644-a7b0be6b6642","seq":6,"duration_ms":938,"bytes_in":1068,"bytes_out":462}],"http_methods":[{"method":"GET","count":4356}],"distinct_ports_total":4,"top_paths":[{"path":"/env.txt","count":33,"ports":4},{"path":"/.env.default","count":33,"ports":4},{"path":"/.env.old~","count":32,"ports":4},{"path":"/docker/compose/withMongo/.env","count":32,"ports":4},{"path":"/compose/.env","count":32,"ports":4},{"path":"/.env.example","count":32,"ports":4},{"path":"/.env_old","count":32,"ports":4},{"path":"/docker-compose/.env","count":32,"ports":4},{"path":"/env","count":32,"ports":4},{"path":"/.env.json","count":32,"ports":4},{"path":"/.env.yml","count":32,"ports":4},{"path":"/.docker/.env","count":32,"ports":4},{"path":"/.env.toml","count":32,"ports":4},{"path":"/.env_dev","count":32,"ports":4},{"path":"/.env.txt","count":32,"ports":4}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:8443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-18T19:47:49.597767+00:00"}