{"ip":"94.154.46.250","total_events":3498,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,654,207 bytes sent","bytes_sent":2654207,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-01T04:51:22","last_seen":"2026-09-28T20:18:16","events_24h":63,"events_7d":670,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1880},{"port":80,"proto":"tcp","label":"HTTP","count":1618}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"a11cun040_0000004d_aa48e2c8":3432,"t13i131000_f57a46bbacb6_ab7e3b40a677":4917},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3435}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-01","count":600},{"date":"2026-09-06","count":600},{"date":"2026-09-07","count":600},{"date":"2026-09-10","count":300},{"date":"2026-09-18","count":728},{"date":"2026-09-24","count":160},{"date":"2026-09-25","count":300},{"date":"2026-09-26","count":147},{"date":"2026-09-28","count":63}],"recent_events":[{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.swp","summary":"","payload_hex":"474554202f2e656e762e73777020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"4cf90452-2533-4ca8-bb4a-6b123b3b0b1d","seq":3,"duration_ms":492,"bytes_in":514,"bytes_out":234},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.temp","summary":"","payload_hex":"474554202f2e656e762e74656d7020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"329ea926-2fb3-4bb4-bce7-86c0c24349fc","seq":3,"duration_ms":492,"bytes_in":511,"bytes_out":234},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.sample","summary":"","payload_hex":"474554202f2e656e762e73616d706c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"e20f05f5-2abe-4d47-b4a0-a6ad95b48669","seq":3,"duration_ms":493,"bytes_in":522,"bytes_out":234},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.template","summary":"","payload_hex":"474554202f2e656e762e74656d706c61746520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"ebf65cee-50c9-4349-8702-366b9dbb5b4d","seq":3,"duration_ms":492,"bytes_in":538,"bytes_out":234},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.copy","summary":"","payload_hex":"474554202f2e656e762e636f707920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"052258d2-cbb6-40bf-9ba3-2df1d4e1cd39","seq":9,"duration_ms":1674,"bytes_in":1542,"bytes_out":702},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.orig","summary":"","payload_hex":"474554202f2e656e762e6f72696720485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"052258d2-cbb6-40bf-9ba3-2df1d4e1cd39","seq":10,"duration_ms":1806,"bytes_in":1711,"bytes_out":780},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.example","summary":"","payload_hex":"474554202f2e656e762e6578616d706c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"2c6602a7-d212-41dc-8ebd-996a163e3a63","seq":9,"duration_ms":1711,"bytes_in":1557,"bytes_out":702},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/Jenkinsfile","summary":"","payload_hex":"474554202f4a656e6b696e7366696c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"cc89f685-9d43-436c-b9f2-3488b502852e","seq":9,"duration_ms":1700,"bytes_in":1552,"bytes_out":702},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.htpasswd","summary":"","payload_hex":"474554202f2e687470617373776420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"90a45cad-f059-47d0-aeae-3ba7882c77ce","seq":9,"duration_ms":1672,"bytes_in":1539,"bytes_out":702},{"timestamp":"2026-09-28T20:18:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/src/.env.local","summary":"","payload_hex":"474554202f7372632f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"2196848d251b217de8b2c037e356c11d","session":"90a45cad-f059-47d0-aeae-3ba7882c77ce","seq":10,"duration_ms":1795,"bytes_in":1713,"bytes_out":780}],"http_methods":[{"method":"GET","count":3498}],"distinct_ports_total":2,"top_paths":[{"path":"/Gemfile.lock","count":26,"ports":2},{"path":"/.git/index","count":26,"ports":2},{"path":"/docker-compose.override.yml","count":26,"ports":2},{"path":"/.env.bak","count":26,"ports":2},{"path":"/configuration.php","count":26,"ports":2},{"path":"/config.php","count":26,"ports":2},{"path":"/wp-config.php.save","count":26,"ports":2},{"path":"/settings.py","count":26,"ports":2},{"path":"/package-lock.json","count":26,"ports":2},{"path":"/docker-compose.yaml","count":26,"ports":2},{"path":"/wp-config.php.old","count":26,"ports":2},{"path":"/composer.lock","count":26,"ports":2},{"path":"/wp-config.php","count":26,"ports":2},{"path":"/.env.new","count":26,"ports":2},{"path":"/settings.php","count":26,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:02:22.110310+00:00"}