{"ip":"94.154.46.242","total_events":2556,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,439,491 bytes sent","bytes_sent":1439491,"session_seconds":13,"persistent":false}},"first_seen":"2026-09-12T04:29:52","last_seen":"2026-09-27T07:52:01","events_24h":0,"events_7d":600,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":1350},{"port":443,"proto":"tcp","label":"HTTPS","count":1206}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4920,"a11cun040_0000004d_aa48e2c8":3432},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3435}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-12","count":305},{"date":"2026-09-13","count":600},{"date":"2026-09-16","count":1},{"date":"2026-09-17","count":600},{"date":"2026-09-21","count":450},{"date":"2026-09-27","count":600}],"recent_events":[{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.inc.php","summary":"","payload_hex":"474554202f636f6e6669672e696e632e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"43fc54cf-2144-4704-9982-1050d95b3c19","seq":5,"duration_ms":924,"bytes_in":868,"bytes_out":390},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/web/.env","summary":"","payload_hex":"474554202f7765622f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"fac0b2f1-2719-4d5c-9c6f-a8bc25a13212","seq":5,"duration_ms":925,"bytes_in":871,"bytes_out":390},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/.env","summary":"","payload_hex":"474554202f6170702f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"1b30dd4b-4ebc-4f71-8236-37ff7fefa733","seq":5,"duration_ms":932,"bytes_in":874,"bytes_out":390},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/frontend/.env","summary":"","payload_hex":"474554202f66726f6e74656e642f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"33b977f9-006e-4b6e-85ca-fa2c3c153bf8","seq":5,"duration_ms":933,"bytes_in":890,"bytes_out":390},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.py","summary":"","payload_hex":"474554202f636f6e6669672e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"0ecba7ee-c191-47cf-b375-26b7f679552b","seq":6,"duration_ms":1048,"bytes_in":1053,"bytes_out":468},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/web/.env.local","summary":"","payload_hex":"474554202f7765622f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"364e2180-da36-4c90-9697-92a4046ae773","seq":6,"duration_ms":1037,"bytes_in":1041,"bytes_out":468},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.inc.php.bak","summary":"","payload_hex":"474554202f636f6e6669672e696e632e7068702e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"ea07d35f-4110-4d6d-9565-9e6349659285","seq":6,"duration_ms":1036,"bytes_in":1048,"bytes_out":468},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/database.yml","summary":"","payload_hex":"474554202f636f6e6669672f64617461626173652e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"0ecba7ee-c191-47cf-b375-26b7f679552b","seq":5,"duration_ms":933,"bytes_in":882,"bytes_out":390},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/settings.py","summary":"","payload_hex":"474554202f636f6e6669672f73657474696e67732e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"1b30dd4b-4ebc-4f71-8236-37ff7fefa733","seq":6,"duration_ms":1045,"bytes_in":1054,"bytes_out":468},{"timestamp":"2026-09-27T07:52:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app.json","summary":"","payload_hex":"474554202f6170702e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b52e639f-0f56-4111-9937-88696bdf7ec0","seq":6,"duration_ms":1036,"bytes_in":1041,"bytes_out":468}],"http_methods":[{"method":"GET","count":2556}],"distinct_ports_total":2,"top_paths":[{"path":"/.env.default","count":18,"ports":2},{"path":"/.dockerenv","count":18,"ports":2},{"path":"/.env.production.local","count":18,"ports":2},{"path":"/myapp/settings.py","count":18,"ports":2},{"path":"/wp-config.php.bak","count":18,"ports":2},{"path":"/.env.2","count":18,"ports":2},{"path":"/config/environment.rb","count":18,"ports":2},{"path":"/package-lock.json","count":18,"ports":2},{"path":"/docker-compose.yaml","count":18,"ports":2},{"path":"/.htpasswd","count":18,"ports":2},{"path":"/config/credentials.yml.enc","count":18,"ports":2},{"path":"/config/database.php","count":18,"ports":2},{"path":"/app/settings.py","count":18,"ports":2},{"path":"/.env.new","count":18,"ports":2},{"path":"/settings.php","count":18,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:02:20.141418+00:00"}