{
  "site": "attack.apis.cab",
  "generatedAt": "2026-11-05T15:59:18.763Z",
  "generatedAtLocal": "2026-11-05T23:59:18.763+08:00",
  "reason": "manual",
  "total": 14,
  "perSite": {
    "main": 11,
    "test1": 2,
    "test2": 3,
    "test3": 1,
    "test4": 2,
    "test5": 2
  },
  "tz": "Asia/Shanghai",
  "entries": [
    {
      "ip": "142.93.129.190",
      "firstSeen": 1793894329811,
      "hits": 6,
      "score": 100,
      "reasons": [
        "admin-panel",
        "env-file",
        "exchange",
        "git-config",
        "git-dir",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894329811
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894338802
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340841
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342946
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894352457
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894355484
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)",
          "n": 6,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894355484,
      "maxSingle": 100,
      "totalScore": 330,
      "country": "NL",
      "city": "Amsterdam",
      "region": "North Holland",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "AMS",
      "method": "GET"
    },
    {
      "ip": "206.81.24.74",
      "firstSeen": 1793894329678,
      "hits": 8,
      "score": 100,
      "reasons": [
        "admin-panel",
        "env-file",
        "exchange",
        "git-config",
        "git-dir",
        "config-generic",
        "phpinfo",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894329678
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894338287
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340439
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342644
        },
        {
          "p": "/config.json",
          "w": 20,
          "n": 1,
          "t": 1793894347017
        },
        {
          "p": "/info.php",
          "w": 40,
          "n": 1,
          "t": 1793894349318
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894351227
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894354197
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)",
          "n": 8,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894354197,
      "maxSingle": 100,
      "totalScore": 390,
      "country": "DE",
      "city": "Frankfurt am Main",
      "region": "Hesse",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "FRA",
      "method": "GET"
    },
    {
      "ip": "139.59.136.184",
      "firstSeen": 1793894329771,
      "hits": 8,
      "score": 100,
      "reasons": [
        "admin-panel",
        "env-file",
        "exchange",
        "git-config",
        "git-dir",
        "config-generic",
        "phpinfo",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894329771
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894338752
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340828
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342769
        },
        {
          "p": "/config.json",
          "w": 20,
          "n": 1,
          "t": 1793894345794
        },
        {
          "p": "/info.php",
          "w": 40,
          "n": 1,
          "t": 1793894347993
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894349961
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894353342
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)",
          "n": 8,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894353342,
      "maxSingle": 100,
      "totalScore": 390,
      "country": "DE",
      "city": "Frankfurt am Main",
      "region": "Hesse",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "FRA",
      "method": "GET"
    },
    {
      "ip": "159.89.12.166",
      "firstSeen": 1793894329691,
      "hits": 8,
      "score": 100,
      "reasons": [
        "admin-panel",
        "env-file",
        "exchange",
        "git-config",
        "git-dir",
        "config-generic",
        "phpinfo",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894329691
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894338693
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340730
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342692
        },
        {
          "p": "/config.json",
          "w": 20,
          "n": 1,
          "t": 1793894345687
        },
        {
          "p": "/info.php",
          "w": 40,
          "n": 1,
          "t": 1793894347749
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894349771
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894352932
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)",
          "n": 8,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894352932,
      "maxSingle": 100,
      "totalScore": 390,
      "country": "DE",
      "city": "Frankfurt am Main",
      "region": "Hesse",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "FRA",
      "method": "GET"
    },
    {
      "ip": "64.23.218.208",
      "firstSeen": 1793894330125,
      "hits": 8,
      "score": 100,
      "reasons": [
        "admin-panel",
        "env-file",
        "exchange",
        "git-config",
        "git-dir",
        "config-generic",
        "phpinfo",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894330125
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894338492
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340633
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342636
        },
        {
          "p": "/config.json",
          "w": 20,
          "n": 1,
          "t": 1793894345466
        },
        {
          "p": "/info.php",
          "w": 40,
          "n": 1,
          "t": 1793894347512
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894349508
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894352695
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)",
          "n": 8,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894352695,
      "maxSingle": 100,
      "totalScore": 390,
      "country": "US",
      "city": "Santa Clara",
      "region": "California",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "SJC",
      "method": "GET"
    },
    {
      "ip": "46.101.1.225",
      "firstSeen": 1793894329904,
      "hits": 5,
      "score": 100,
      "reasons": [
        "admin-panel",
        "exchange",
        "git-config",
        "git-dir",
        "actuator-sensitive",
        "actuator",
        "ide-dir"
      ],
      "paths": [
        {
          "p": "/console/",
          "w": 20,
          "n": 1,
          "t": 1793894329904
        },
        {
          "p": "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application",
          "w": 35,
          "n": 1,
          "t": 1793894340520
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894342675
        },
        {
          "p": "/actuator/env",
          "w": 85,
          "n": 1,
          "t": 1793894349654
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894352619
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)",
          "n": 5,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894352619,
      "maxSingle": 100,
      "totalScore": 270,
      "country": "GB",
      "city": "London",
      "region": "England",
      "asn": 14061,
      "org": "DigitalOcean, LLC",
      "colo": "VIE",
      "method": "GET"
    },
    {
      "ip": "2.31.155.11",
      "firstSeen": 1793894068476,
      "hits": 4,
      "score": 100,
      "reasons": [
        "ide-dir",
        "env-file",
        "git-config",
        "git-dir"
      ],
      "paths": [
        {
          "p": "/.vscode/sftp.json",
          "w": 30,
          "n": 1,
          "t": 1793894068476
        },
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894068848
        },
        {
          "p": "/.git/config",
          "w": 100,
          "n": 1,
          "t": 1793894069089
        },
        {
          "p": "/.git/HEAD",
          "w": 100,
          "n": 1,
          "t": 1793894069343
        }
      ],
      "uas": [
        {
          "ua": "leakfinder-scanner/0.1 (+contact: abuse@gitlantern.com)",
          "n": 4,
          "tag": null
        }
      ],
      "domains": [
        "test2"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894069343,
      "maxSingle": 100,
      "totalScore": 290,
      "country": "DE",
      "city": "Nuremberg",
      "region": "Bavaria",
      "asn": 24940,
      "org": "Hetzner Online GmbH",
      "colo": "CDG",
      "method": "GET"
    },
    {
      "ip": "81.171.72.135",
      "firstSeen": 1793894021668,
      "hits": 12,
      "score": 100,
      "reasons": [
        "laravel-log",
        "tool:go",
        "wp-admin",
        "env-file",
        "ide-dir",
        "npmrc",
        "backup-file",
        "backup-archive",
        "generic-probe"
      ],
      "paths": [
        {
          "p": "/storage/logs/laravel.log",
          "w": 55,
          "n": 1,
          "t": 1793894022869
        },
        {
          "p": "/wp-admin/setup-config.php",
          "w": 45,
          "n": 1,
          "t": 1793894023093
        },
        {
          "p": "/.env",
          "w": 70,
          "n": 1,
          "t": 1793894023132
        },
        {
          "p": "/api/.env",
          "w": 70,
          "n": 1,
          "t": 1793894023238
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 40,
          "n": 1,
          "t": 1793894023322
        },
        {
          "p": "/.npmrc",
          "w": 60,
          "n": 1,
          "t": 1793894023380
        },
        {
          "p": "/database_backup.sql",
          "w": 40,
          "n": 1,
          "t": 1793894023523
        },
        {
          "p": "/dump.sql",
          "w": 85,
          "n": 1,
          "t": 1793894023733
        },
        {
          "p": "/backup.tar.gz",
          "w": 70,
          "n": 1,
          "t": 1793894023874
        }
      ],
      "uas": [
        {
          "ua": "Go-http-client/2.0",
          "n": 9,
          "tag": "tool:go"
        }
      ],
      "domains": [
        "test2",
        "test4",
        "test5"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894023901,
      "maxSingle": 85,
      "totalScore": 535,
      "country": "NL",
      "city": "Amsterdam",
      "region": "North Holland",
      "asn": 34343,
      "org": "Eweka Internet Services B.V.",
      "colo": "AMS",
      "method": "GET"
    },
    {
      "ip": "91.148.244.131",
      "firstSeen": 1793894022876,
      "hits": 12,
      "score": 100,
      "reasons": [
        "backup-archive",
        "backup-file",
        "tool:go",
        "ssh-key",
        "ssh-dir",
        "generic-probe",
        "env-file",
        "svn-hg",
        "ide-dir",
        "shell-history",
        "config-generic"
      ],
      "paths": [
        {
          "p": "/dump.sql",
          "w": 85,
          "n": 1,
          "t": 1793894022876
        },
        {
          "p": "/database.sql",
          "w": 40,
          "n": 1,
          "t": 1793894023007
        },
        {
          "p": "/.ssh/id_ed25519",
          "w": 100,
          "n": 1,
          "t": 1793894023055
        },
        {
          "p": "/.ssh/id_rsa",
          "w": 100,
          "n": 1,
          "t": 1793894023154
        },
        {
          "p": "/backup.zip",
          "w": 70,
          "n": 1,
          "t": 1793894023198
        },
        {
          "p": "/.env",
          "w": 70,
          "n": 1,
          "t": 1793894023326
        },
        {
          "p": "/.svn/wc.db",
          "w": 45,
          "n": 1,
          "t": 1793894023428
        },
        {
          "p": "/api/.env",
          "w": 70,
          "n": 1,
          "t": 1793894023456
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 40,
          "n": 1,
          "t": 1793894023556
        },
        {
          "p": "/.bash_history",
          "w": 65,
          "n": 1,
          "t": 1793894023655
        },
        {
          "p": "/.env.production",
          "w": 70,
          "n": 1,
          "t": 1793894023725
        },
        {
          "p": "/config.php",
          "w": 30,
          "n": 1,
          "t": 1793894023794
        }
      ],
      "uas": [
        {
          "ua": "Go-http-client/2.0",
          "n": 12,
          "tag": "tool:go"
        }
      ],
      "domains": [
        "test1"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894023794,
      "maxSingle": 100,
      "totalScore": 785,
      "country": "NL",
      "city": "Amstelveen",
      "region": "North Holland",
      "asn": 34343,
      "org": "Base IP B.V.",
      "colo": "AMS",
      "method": "GET"
    },
    {
      "ip": "81.171.72.93",
      "firstSeen": 1793894021692,
      "hits": 10,
      "score": 100,
      "reasons": [
        "laravel-log",
        "tool:go",
        "env-file",
        "ide-dir",
        "ssh-key",
        "ssh-dir",
        "wp-admin",
        "backup-archive",
        "backup-file",
        "generic-probe"
      ],
      "paths": [
        {
          "p": "/storage/logs/laravel.log",
          "w": 55,
          "n": 1,
          "t": 1793894021692
        },
        {
          "p": "/.env.production",
          "w": 70,
          "n": 1,
          "t": 1793894021904
        },
        {
          "p": "/.vscode/sftp.json",
          "w": 40,
          "n": 1,
          "t": 1793894021949
        },
        {
          "p": "/.ssh/id_ed25519",
          "w": 100,
          "n": 1,
          "t": 1793894022175
        },
        {
          "p": "/.ssh/id_rsa",
          "w": 100,
          "n": 1,
          "t": 1793894022262
        },
        {
          "p": "/wp-admin/setup-config.php",
          "w": 45,
          "n": 1,
          "t": 1793894022299
        },
        {
          "p": "/dump.sql",
          "w": 85,
          "n": 1,
          "t": 1793894022367
        },
        {
          "p": "/backup.sql",
          "w": 100,
          "n": 1,
          "t": 1793894022400
        },
        {
          "p": "/database_backup.sql",
          "w": 40,
          "n": 1,
          "t": 1793894022482
        },
        {
          "p": "/backup.zip",
          "w": 70,
          "n": 1,
          "t": 1793894022597
        }
      ],
      "uas": [
        {
          "ua": "Go-http-client/2.0",
          "n": 10,
          "tag": "tool:go"
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894022597,
      "maxSingle": 100,
      "totalScore": 705,
      "country": "NL",
      "city": "Amsterdam",
      "region": "North Holland",
      "asn": 34343,
      "org": "Eweka Internet Services B.V.",
      "colo": "AMS",
      "method": "GET"
    },
    {
      "ip": "34.139.42.247",
      "firstSeen": 1793861394000,
      "lastSeen": 1793861397000,
      "hits": 252,
      "score": 100,
      "totalScore": 0,
      "reasons": [
        "sftp-config",
        "shell-history",
        "htpasswd",
        "kube-config",
        "docker-config",
        "db-config",
        "laravel-log",
        "go-debug",
        "actuator-sensitive",
        "composer-json",
        "package-json",
        "build-config",
        "aws-lambda-cfg",
        "web-config",
        "sensitive-path-scan"
      ],
      "paths": [
        {
          "p": "/composer.json",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/package.json",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/webpack.config.js",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/babel.config.js",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/sftp-config.json",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": ".zsh_history",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/.bash_history",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/.htpasswd",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/.kube/config",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/.docker/config.json",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/parameters.yml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/database.json",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/database.yml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/config.yaml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/config.yml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/web.config",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/storage/logs/laravel.log",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/debug/vars",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/actuator/configprops",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/actuator/env",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/serverless.yml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/secret.yaml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        },
        {
          "p": "/values.yaml",
          "w": 55,
          "n": 11,
          "t": 1793861394000
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
          "n": 7,
          "tag": null
        },
        {
          "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0",
          "n": 6,
          "tag": null
        },
        {
          "ua": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1",
          "n": 5,
          "tag": null
        },
        {
          "ua": "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0",
          "n": 5,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "critical",
      "source": "manual",
      "country": "美国",
      "city": "查尔斯顿",
      "region": "South Carolina",
      "asn": 396982,
      "org": "Google LLC",
      "days": [
        "2026-11-05"
      ],
      "note": "站长提供的访问日志：2026/11/5 14:49 在 visit.link.wxmedia.me 连续扫描 23 类敏感文件，252 次访问"
    },
    {
      "ip": "2a02:4780:95:80d4::1",
      "firstSeen": 1793894059684,
      "hits": 3,
      "score": 75,
      "reasons": [
        "build-config",
        "sftp-config",
        "db-config"
      ],
      "paths": [
        {
          "p": "/babel.config.js",
          "w": 30,
          "n": 1,
          "t": 1793894059684
        },
        {
          "p": "/sftp-config.json",
          "w": 55,
          "n": 1,
          "t": 1793894060403
        },
        {
          "p": "/database.json",
          "w": 50,
          "n": 1,
          "t": 1793894060972
        }
      ],
      "uas": [
        {
          "ua": "monitord-discovery/1.0",
          "n": 3,
          "tag": null
        }
      ],
      "domains": [
        "main"
      ],
      "level": "high",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894060972,
      "maxSingle": 55,
      "totalScore": 135,
      "country": "US",
      "city": "Boston",
      "region": "Massachusetts",
      "asn": 47583,
      "org": "Hostinger International Limited",
      "colo": "EWR",
      "method": "GET"
    },
    {
      "ip": "185.90.60.219",
      "firstSeen": 1793894183210,
      "hits": 2,
      "score": 70,
      "reasons": [
        "env-file"
      ],
      "paths": [
        {
          "p": "/.env",
          "w": 60,
          "n": 1,
          "t": 1793894226691
        },
        {
          "p": "/.env.example",
          "w": 60,
          "n": 1,
          "t": 1793894227246
        }
      ],
      "uas": [
        {
          "ua": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.",
          "n": 2,
          "tag": null
        }
      ],
      "domains": [
        "main",
        "test1",
        "test2",
        "test3",
        "test4",
        "test5"
      ],
      "level": "suspected",
      "source": "auto",
      "days": [
        "2026-11-05"
      ],
      "lastSeen": 1793894264052,
      "maxSingle": 60,
      "totalScore": 120,
      "country": "FI",
      "city": "Helsinki",
      "region": "Uusimaa",
      "asn": 206804,
      "org": "EstNOC-Global",
      "colo": "ARN",
      "method": "GET"
    },
    {
      "ip": "35.202.223.218",
      "firstSeen": 1793861394000,
      "lastSeen": 1793861397000,
      "hits": 252,
      "score": 62,
      "totalScore": 0,
      "reasons": [
        "manual-list",
        "sensitive-path-scan",
        "gcp-datacenter"
      ],
      "paths": [],
      "uas": [],
      "domains": [
        "main"
      ],
      "level": "suspected",
      "source": "manual",
      "country": "美国",
      "city": "",
      "region": "",
      "asn": 396982,
      "org": "Google LLC",
      "days": [
        "2026-11-05"
      ],
      "note": "站长提供的同期访问统计：252 次访问，与 34.139.42.247 同一批扫描（GCP 数据中心出口）"
    }
  ]
}