{"ip":"94.154.46.246","total_events":2551,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,503,069 bytes sent","bytes_sent":1503069,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-05T09:57:14","last_seen":"2026-09-28T04:47:10","events_24h":0,"events_7d":600,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1351},{"port":80,"proto":"tcp","label":"HTTP","count":1200}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun040_00040016_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4820,"b11cun040_00040016_aa48e2c8":6194},"akin_families":{"b11cun040_00040016_aa48e2c8":{"head":"b11cun040_00040016_aa48e2c8","shapes":5,"ips":6193}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-05","count":506},{"date":"2026-09-09","count":600},{"date":"2026-09-10","count":600},{"date":"2026-09-12","count":245},{"date":"2026-09-28","count":600}],"recent_events":[{"timestamp":"2026-09-28T04:47:10","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/site/.env","summary":"","payload_hex":"474554202f736974652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"af165bc1-ddd9-45a8-a4df-f405ccd976b6","seq":5,"duration_ms":2347,"bytes_in":861,"bytes_out":390},{"timestamp":"2026-09-28T04:47:10","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/.env","summary":"","payload_hex":"474554202f6170692f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"866b1e10-b053-4808-980c-f9d75d2e6ebb","seq":5,"duration_ms":2346,"bytes_in":902,"bytes_out":390},{"timestamp":"2026-09-28T04:47:10","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.prev","summary":"","payload_hex":"474554202f2e656e762e7072657620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"d1fc58e2-ef09-47ff-9f21-0c6fea7d8a74","seq":5,"duration_ms":2347,"bytes_in":859,"bytes_out":390},{"timestamp":"2026-09-28T04:47:10","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.template","summary":"","payload_hex":"474554202f2e656e762e74656d706c61746520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"c426f933-362c-4b3f-ba09-62979b63ba00","seq":5,"duration_ms":2347,"bytes_in":876,"bytes_out":390},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/www/.env","summary":"","payload_hex":"474554202f7777772f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"d0a3eb0d-8aed-4f20-85bc-3e7df18b93a5","seq":5,"duration_ms":579,"bytes_in":866,"bytes_out":390},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/client/.env","summary":"","payload_hex":"474554202f636c69656e742f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"4d33029b-fa79-4506-8363-fb4767deb550","seq":5,"duration_ms":578,"bytes_in":863,"bytes_out":390},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/env","summary":"","payload_hex":"474554202f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b51d6e91-5b3c-4642-8d78-e8bb54b2adb9","seq":5,"duration_ms":579,"bytes_in":865,"bytes_out":390},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.dockerenv","summary":"","payload_hex":"474554202f2e646f636b6572656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"d1fc58e2-ef09-47ff-9f21-0c6fea7d8a74","seq":4,"duration_ms":464,"bytes_in":688,"bytes_out":312},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env_prod","summary":"","payload_hex":"474554202f2e656e765f70726f6420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"bb74ec63-bc3a-4093-9e07-0e93cc8fbd92","seq":5,"duration_ms":578,"bytes_in":887,"bytes_out":390},{"timestamp":"2026-09-28T04:47:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env_dev","summary":"","payload_hex":"474554202f2e656e765f64657620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"a1c9efb2-6ee4-4a6a-adf9-6fcdfcb4917d","seq":5,"duration_ms":576,"bytes_in":884,"bytes_out":390}],"http_methods":[{"method":"GET","count":2551}],"distinct_ports_total":2,"top_paths":[{"path":"/.env.old","count":18,"ports":2},{"path":"/.env.orig","count":18,"ports":2},{"path":"/wp-config.old","count":18,"ports":2},{"path":"/configuration.php","count":18,"ports":2},{"path":"/env.txt","count":18,"ports":2},{"path":"/.env.staging.local","count":18,"ports":2},{"path":"/wp-config.php.save","count":18,"ports":2},{"path":"/.yarnrc","count":18,"ports":2},{"path":"/env","count":18,"ports":2},{"path":"/.aws/credentials","count":18,"ports":2},{"path":"/package-lock.json","count":18,"ports":2},{"path":"/wp-config.php.old","count":18,"ports":2},{"path":"/.env.development","count":18,"ports":2},{"path":"/config/settings.py","count":18,"ports":2},{"path":"/.ssh/id_rsa","count":18,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T16:03:15.126686+00:00"}