{"ip":"94.154.46.247","total_events":2337,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,393,307 bytes sent","bytes_sent":1393307,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-02T16:56:26","last_seen":"2026-09-25T00:16:36","events_24h":0,"events_7d":600,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":1200},{"port":443,"proto":"tcp","label":"HTTPS","count":1137}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4911,"a11cun040_0000004d_aa48e2c8":3459},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3459}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-02","count":589},{"date":"2026-09-03","count":600},{"date":"2026-09-21","count":548},{"date":"2026-09-25","count":600}],"recent_events":[{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/credentials.yml.enc","summary":"","payload_hex":"474554202f636f6e6669672f63726564656e7469616c732e796d6c2e656e6320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"ece8f36c-288c-49e7-84a1-890a23541e02","seq":5,"duration_ms":756,"bytes_in":857,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpinfo.php","summary":"","payload_hex":"474554202f706870696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"501779c5-cc94-4401-a407-b9c075a8f49b","seq":5,"duration_ms":753,"bytes_in":871,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.new","summary":"","payload_hex":"474554202f2e656e762e6e657720485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"8d3d0d81-eb88-4e2e-84ed-468a576fe3e9","seq":5,"duration_ms":753,"bytes_in":866,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.travis.yml","summary":"","payload_hex":"474554202f2e7472617669732e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b93a5930-71c9-4d62-9b4c-78137ac3d376","seq":4,"duration_ms":631,"bytes_in":695,"bytes_out":312},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/docker/compose/withMySQL/.env","summary":"","payload_hex":"474554202f646f636b65722f636f6d706f73652f776974684d7953514c2f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b8fad81e-e077-4800-9a55-38dc3b8c1c25","seq":5,"duration_ms":753,"bytes_in":872,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.inc.php.bak","summary":"","payload_hex":"474554202f636f6e6669672e696e632e7068702e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"f880cfbf-c406-4386-b4ca-4dd6e372900a","seq":5,"duration_ms":753,"bytes_in":867,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.saved","summary":"","payload_hex":"474554202f2e656e762e736176656420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b93a5930-71c9-4d62-9b4c-78137ac3d376","seq":5,"duration_ms":750,"bytes_in":866,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.prev","summary":"","payload_hex":"474554202f2e656e762e7072657620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"146d2b47-5045-4080-85d6-69edaf2f53ba","seq":5,"duration_ms":753,"bytes_in":871,"bytes_out":390},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.template","summary":"","payload_hex":"474554202f2e656e762e74656d706c61746520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"821d314c-9087-4417-8551-e37551c16e7b","seq":4,"duration_ms":633,"bytes_in":681,"bytes_out":312},{"timestamp":"2026-09-25T00:16:36","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.yaml","summary":"","payload_hex":"474554202f2e656e762e79616d6c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"c3eea107-1219-464a-aa2e-edd53c1c5a06","seq":5,"duration_ms":751,"bytes_in":871,"bytes_out":390}],"http_methods":[{"method":"GET","count":2337}],"distinct_ports_total":2,"top_paths":[{"path":"/.dockerenv","count":16,"ports":2},{"path":"/wp-config.php~","count":16,"ports":2},{"path":"/wp-config.old","count":16,"ports":2},{"path":"/phpinfo.php","count":16,"ports":2},{"path":"/env.txt","count":16,"ports":2},{"path":"/.ssh/authorized_keys","count":16,"ports":2},{"path":"/.env~","count":16,"ports":2},{"path":"/.yarnrc","count":16,"ports":2},{"path":"/env","count":16,"ports":2},{"path":"/.aws/config","count":16,"ports":2},{"path":"/instance/config.py","count":16,"ports":2},{"path":"/docker-compose.override.yml","count":16,"ports":2},{"path":"/.env.production.local","count":16,"ports":2},{"path":"/.env.new","count":16,"ports":2},{"path":"/settings.php","count":16,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T15:42:24.870161+00:00"}