{"ip":"94.154.46.244","total_events":6085,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"3,644,304 bytes sent","bytes_sent":3644304,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-02T12:01:31","last_seen":"2026-09-26T14:46:43","events_24h":0,"events_7d":1800,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3123},{"port":80,"proto":"tcp","label":"HTTP","count":2962}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4917,"a11cun040_0000004d_aa48e2c8":3432},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":5,"ips":3438}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-02","count":500},{"date":"2026-09-04","count":600},{"date":"2026-09-12","count":300},{"date":"2026-09-15","count":538},{"date":"2026-09-18","count":1747},{"date":"2026-09-22","count":600},{"date":"2026-09-25","count":1200},{"date":"2026-09-26","count":600}],"recent_events":[{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.inc.php","summary":"","payload_hex":"474554202f636f6e6669672e696e632e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"30417ae0-c758-4b2a-9b95-4ad3de2bab75","seq":5,"duration_ms":580,"bytes_in":880,"bytes_out":390},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/secrets.json","summary":"","payload_hex":"474554202f736563726574732e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"9f1167ff-e715-450f-952b-b9a26956c0a3","seq":5,"duration_ms":593,"bytes_in":865,"bytes_out":390},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.tmp","summary":"","payload_hex":"474554202f2e656e762e746d7020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"9f1167ff-e715-450f-952b-b9a26956c0a3","seq":6,"duration_ms":713,"bytes_in":1034,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.old","summary":"","payload_hex":"474554202f2e656e762e6f6c6420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"c23b0a18-7958-4361-bbff-22878ff62915","seq":6,"duration_ms":697,"bytes_in":1042,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app.json","summary":"","payload_hex":"474554202f6170702e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"78516944-8412-4b38-b2c1-fb207ff67087","seq":6,"duration_ms":698,"bytes_in":1070,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-config.php.orig","summary":"","payload_hex":"474554202f77702d636f6e6669672e7068702e6f72696720485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"ea53d1ec-9498-4b0d-bb88-c844cc1d5e0b","seq":6,"duration_ms":698,"bytes_in":1068,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.old~","summary":"","payload_hex":"474554202f2e656e762e6f6c647e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"1f3466e9-c93e-4c33-98f4-6c5341feb1c4","seq":6,"duration_ms":698,"bytes_in":1035,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpinfo.php","summary":"","payload_hex":"474554202f706870696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"066f6e9e-2cca-41f8-b15b-2f817682976f","seq":6,"duration_ms":698,"bytes_in":1036,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/ecosystem.config.js","summary":"","payload_hex":"474554202f65636f73797374656d2e636f6e6669672e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"74b02fc6-d4a5-40ab-8f5a-4f7f53166f1c","seq":6,"duration_ms":700,"bytes_in":1063,"bytes_out":468},{"timestamp":"2026-09-26T14:46:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.prev","summary":"","payload_hex":"474554202f2e656e762e7072657620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"e93341c3-d8ae-43ca-b9b4-e72b31e3d959","seq":6,"duration_ms":698,"bytes_in":1041,"bytes_out":468}],"http_methods":[{"method":"GET","count":6085}],"distinct_ports_total":2,"top_paths":[{"path":"/.env_backup","count":42,"ports":2},{"path":"/.env.old~","count":42,"ports":2},{"path":"/docker-compose.override.yml","count":42,"ports":2},{"path":"/.npmrc","count":42,"ports":2},{"path":"/configuration.php","count":42,"ports":2},{"path":"/wp-config.php.bak","count":42,"ports":2},{"path":"/.circleci/config.yml","count":42,"ports":2},{"path":"/.yarnrc","count":42,"ports":2},{"path":"/docker-compose/.env","count":42,"ports":2},{"path":"/package-lock.json","count":42,"ports":2},{"path":"/.env.yml","count":42,"ports":2},{"path":"/docker-compose.yaml","count":42,"ports":2},{"path":"/wp-config.php.old","count":42,"ports":2},{"path":"/","count":42,"ports":2},{"path":"/settings.php","count":42,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:05:12.923094+00:00"}