{"ip":"94.154.46.243","total_events":3925,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,383,552 bytes sent","bytes_sent":2383552,"session_seconds":3,"persistent":false}},"first_seen":"2026-09-01T16:37:21","last_seen":"2026-09-28T17:54:21","events_24h":600,"events_7d":600,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2125},{"port":80,"proto":"tcp","label":"HTTP","count":1800}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4917,"a11cun040_0000004d_aa48e2c8":3447},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3451}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-01","count":600},{"date":"2026-09-02","count":600},{"date":"2026-09-11","count":300},{"date":"2026-09-13","count":25},{"date":"2026-09-14","count":1200},{"date":"2026-09-22","count":600},{"date":"2026-09-28","count":600}],"recent_events":[{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.2","summary":"","payload_hex":"474554202f2e656e762e3220485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"ca796f26-34f7-4d6c-a2d4-9d56aac13eb8","seq":5,"duration_ms":575,"bytes_in":856,"bytes_out":390},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env~","summary":"","payload_hex":"474554202f2e656e767e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"aeb65b1e-a977-4cec-8ecd-3ed26190f309","seq":5,"duration_ms":563,"bytes_in":870,"bytes_out":390},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.yml","summary":"","payload_hex":"474554202f2e656e762e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"e12de243-fafd-4705-b544-e89b0061be63","seq":5,"duration_ms":563,"bytes_in":867,"bytes_out":390},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.ssh/id_dsa","summary":"","payload_hex":"474554202f2e7373682f69645f64736120485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b71686cc-7588-453b-a759-e893a66912cc","seq":5,"duration_ms":558,"bytes_in":873,"bytes_out":390},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.ssh/id_rsa","summary":"","payload_hex":"474554202f2e7373682f69645f72736120485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"2c262c7a-c913-4253-9382-6ef3293ae118","seq":5,"duration_ms":556,"bytes_in":860,"bytes_out":390},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.git/config","summary":"","payload_hex":"474554202f2e6769742f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"2c262c7a-c913-4253-9382-6ef3293ae118","seq":4,"duration_ms":441,"bytes_in":687,"bytes_out":312},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env_backup","summary":"","payload_hex":"474554202f2e656e765f6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"183e0443-eeff-4b3e-b56c-735ffefdbed3","seq":4,"duration_ms":461,"bytes_in":709,"bytes_out":312},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.npmrc","summary":"","payload_hex":"474554202f2e6e706d726320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"bc149b94-4d0a-4026-a4db-e123477ec37e","seq":4,"duration_ms":462,"bytes_in":669,"bytes_out":312},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/Jenkinsfile","summary":"","payload_hex":"474554202f4a656e6b696e7366696c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"02ecf069-32d7-47b8-b67f-5a5f115dffec","seq":4,"duration_ms":464,"bytes_in":707,"bytes_out":312},{"timestamp":"2026-09-28T17:54:21","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/composer.lock","summary":"","payload_hex":"474554202f636f6d706f7365722e6c6f636b20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b71686cc-7588-453b-a759-e893a66912cc","seq":4,"duration_ms":444,"bytes_in":700,"bytes_out":312}],"http_methods":[{"method":"GET","count":3925}],"distinct_ports_total":2,"top_paths":[{"path":"/secrets.json","count":27,"ports":2},{"path":"/Gemfile.lock","count":27,"ports":2},{"path":"/laravel/.env.example","count":27,"ports":2},{"path":"/configuration.php","count":27,"ports":2},{"path":"/server/.env.local","count":27,"ports":2},{"path":"/package-lock.json","count":27,"ports":2},{"path":"/docker-compose.yaml","count":27,"ports":2},{"path":"/wp-config.old","count":27,"ports":2},{"path":"/config/secrets.yml","count":27,"ports":2},{"path":"/ecosystem.config.js","count":27,"ports":2},{"path":"/config/settings.py","count":27,"ports":2},{"path":"/composer.json","count":27,"ports":2},{"path":"/.htpasswd","count":27,"ports":2},{"path":"/.env.new","count":27,"ports":2},{"path":"/site/.env","count":27,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:54:09.613187+00:00"}