{"ip":"94.154.46.249","total_events":6025,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"3,564,510 bytes sent","bytes_sent":3564510,"session_seconds":5,"persistent":false}},"first_seen":"2026-09-02T01:29:31","last_seen":"2026-09-27T02:07:40","events_24h":0,"events_7d":600,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3029},{"port":80,"proto":"tcp","label":"HTTP","count":2996}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4917,"a11cun040_0000004d_aa48e2c8":3447},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3451}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-02","count":600},{"date":"2026-09-04","count":600},{"date":"2026-09-06","count":600},{"date":"2026-09-07","count":746},{"date":"2026-09-12","count":600},{"date":"2026-09-13","count":600},{"date":"2026-09-17","count":1133},{"date":"2026-09-19","count":546},{"date":"2026-09-27","count":600}],"recent_events":[{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.template","summary":"","payload_hex":"474554202f2e656e762e74656d706c61746520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"7304d95a-24ce-4b29-8e91-feb0d0321188","seq":5,"duration_ms":901,"bytes_in":850,"bytes_out":390},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/frontend/.env.local","summary":"","payload_hex":"474554202f66726f6e74656e642f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"eb4b9575-0781-45bd-865c-8a8d0d078733","seq":5,"duration_ms":917,"bytes_in":865,"bytes_out":390},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/htdocs/.env","summary":"","payload_hex":"474554202f6874646f63732f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"91c4fa53-afff-48f3-974a-bd985f6f6436","seq":5,"duration_ms":923,"bytes_in":896,"bytes_out":390},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/.env","summary":"","payload_hex":"474554202f7075626c69632f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"a3b37346-c935-46ec-b32e-e5fcf9f50a17","seq":5,"duration_ms":922,"bytes_in":862,"bytes_out":390},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/myapp/settings.py","summary":"","payload_hex":"474554202f6d796170702f73657474696e67732e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"67e51b4c-79cf-46db-8db4-5be90727c708","seq":5,"duration_ms":923,"bytes_in":862,"bytes_out":390},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/composer.json","summary":"","payload_hex":"474554202f636f6d706f7365722e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"67e51b4c-79cf-46db-8db4-5be90727c708","seq":6,"duration_ms":1121,"bytes_in":1036,"bytes_out":468},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-config.php.orig","summary":"","payload_hex":"474554202f77702d636f6e6669672e7068702e6f72696720485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"dc429d94-bf62-4de5-93ec-6b8431ccf7cd","seq":6,"duration_ms":1098,"bytes_in":1049,"bytes_out":468},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/site/.env","summary":"","payload_hex":"474554202f736974652f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"e134d78e-64e0-470e-a8a9-f51a02c04f41","seq":6,"duration_ms":1100,"bytes_in":1022,"bytes_out":468},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/settings.py","summary":"","payload_hex":"474554202f6170702f73657474696e67732e707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"367d3362-d5d7-48c0-ab07-64f074212fd3","seq":6,"duration_ms":1096,"bytes_in":1036,"bytes_out":468},{"timestamp":"2026-09-27T02:07:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.backup","summary":"","payload_hex":"474554202f2e656e762e6261636b757020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"a3b37346-c935-46ec-b32e-e5fcf9f50a17","seq":6,"duration_ms":1120,"bytes_in":1034,"bytes_out":468}],"http_methods":[{"method":"GET","count":6025}],"distinct_ports_total":2,"top_paths":[{"path":"/.env.json","count":41,"ports":2},{"path":"/composer.lock","count":41,"ports":2},{"path":"/docker/compose/withRedis/.env","count":41,"ports":2},{"path":"/.env.production.local","count":41,"ports":2},{"path":"/configuration.php","count":41,"ports":2},{"path":"/.env.2","count":41,"ports":2},{"path":"/.env~","count":41,"ports":2},{"path":"/.yarnrc","count":41,"ports":2},{"path":"/env","count":41,"ports":2},{"path":"/.env.staging.local","count":41,"ports":2},{"path":"/.env.yml","count":41,"ports":2},{"path":"/.circleci/config.yml","count":41,"ports":2},{"path":"/docker-compose/.env","count":41,"ports":2},{"path":"/.aws/credentials","count":41,"ports":2},{"path":"/package-lock.json","count":41,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:55:55.876413+00:00"}