{"generatedAt":1793894368413,"total":15,"perSite":{"test3":2,"test1":2,"test4":3,"main":13,"test2":4,"test5":3},"entries":[{"ip":"2.31.155.11","firstSeen":1793894068476,"hits":4,"score":100,"reasons":["ide-dir","env-file","git-config","git-dir"],"paths":[{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894068476},{"p":"/.env","w":60,"n":1,"t":1793894068848},{"p":"/.git/config","w":100,"n":1,"t":1793894069089},{"p":"/.git/HEAD","w":100,"n":1,"t":1793894069343}],"uas":[{"ua":"leakfinder-scanner/0.1 (+contact: abuse@gitlantern.com)","n":4,"tag":null}],"domains":["test2","main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894357085,"maxSingle":100,"totalScore":290,"country":"DE","city":"Nuremberg","region":"Bavaria","asn":24940,"org":"Hetzner Online GmbH","colo":"CDG","method":"GET"},{"ip":"142.93.129.190","firstSeen":1793894329811,"hits":6,"score":100,"reasons":["admin-panel","env-file","exchange","git-config","git-dir","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894329811},{"p":"/.env","w":60,"n":1,"t":1793894338802},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340841},{"p":"/.git/config","w":100,"n":1,"t":1793894342946},{"p":"/actuator/env","w":85,"n":1,"t":1793894352457},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894355484}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)","n":6,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894355484,"maxSingle":100,"totalScore":330,"country":"NL","city":"Amsterdam","region":"North Holland","asn":14061,"org":"DigitalOcean, LLC","colo":"AMS","method":"GET"},{"ip":"206.81.24.74","firstSeen":1793894329678,"hits":8,"score":100,"reasons":["admin-panel","env-file","exchange","git-config","git-dir","config-generic","phpinfo","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894329678},{"p":"/.env","w":60,"n":1,"t":1793894338287},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340439},{"p":"/.git/config","w":100,"n":1,"t":1793894342644},{"p":"/config.json","w":20,"n":1,"t":1793894347017},{"p":"/info.php","w":40,"n":1,"t":1793894349318},{"p":"/actuator/env","w":85,"n":1,"t":1793894351227},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894354197}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)","n":8,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894354197,"maxSingle":100,"totalScore":390,"country":"DE","city":"Frankfurt am Main","region":"Hesse","asn":14061,"org":"DigitalOcean, LLC","colo":"FRA","method":"GET"},{"ip":"139.59.136.184","firstSeen":1793894329771,"hits":8,"score":100,"reasons":["admin-panel","env-file","exchange","git-config","git-dir","config-generic","phpinfo","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894329771},{"p":"/.env","w":60,"n":1,"t":1793894338752},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340828},{"p":"/.git/config","w":100,"n":1,"t":1793894342769},{"p":"/config.json","w":20,"n":1,"t":1793894345794},{"p":"/info.php","w":40,"n":1,"t":1793894347993},{"p":"/actuator/env","w":85,"n":1,"t":1793894349961},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894353342}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)","n":8,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894353342,"maxSingle":100,"totalScore":390,"country":"DE","city":"Frankfurt am Main","region":"Hesse","asn":14061,"org":"DigitalOcean, LLC","colo":"FRA","method":"GET"},{"ip":"159.89.12.166","firstSeen":1793894329691,"hits":8,"score":100,"reasons":["admin-panel","env-file","exchange","git-config","git-dir","config-generic","phpinfo","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894329691},{"p":"/.env","w":60,"n":1,"t":1793894338693},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340730},{"p":"/.git/config","w":100,"n":1,"t":1793894342692},{"p":"/config.json","w":20,"n":1,"t":1793894345687},{"p":"/info.php","w":40,"n":1,"t":1793894347749},{"p":"/actuator/env","w":85,"n":1,"t":1793894349771},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894352932}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)","n":8,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894352932,"maxSingle":100,"totalScore":390,"country":"DE","city":"Frankfurt am Main","region":"Hesse","asn":14061,"org":"DigitalOcean, LLC","colo":"FRA","method":"GET"},{"ip":"64.23.218.208","firstSeen":1793894330125,"hits":8,"score":100,"reasons":["admin-panel","env-file","exchange","git-config","git-dir","config-generic","phpinfo","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894330125},{"p":"/.env","w":60,"n":1,"t":1793894338492},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340633},{"p":"/.git/config","w":100,"n":1,"t":1793894342636},{"p":"/config.json","w":20,"n":1,"t":1793894345466},{"p":"/info.php","w":40,"n":1,"t":1793894347512},{"p":"/actuator/env","w":85,"n":1,"t":1793894349508},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894352695}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.932323e2534313e27363e2237313; +https://leakix.net)","n":8,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894352695,"maxSingle":100,"totalScore":390,"country":"US","city":"Santa Clara","region":"California","asn":14061,"org":"DigitalOcean, LLC","colo":"SJC","method":"GET"},{"ip":"46.101.1.225","firstSeen":1793894329904,"hits":5,"score":100,"reasons":["admin-panel","exchange","git-config","git-dir","actuator-sensitive","actuator","ide-dir"],"paths":[{"p":"/console/","w":20,"n":1,"t":1793894329904},{"p":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","w":35,"n":1,"t":1793894340520},{"p":"/.git/config","w":100,"n":1,"t":1793894342675},{"p":"/actuator/env","w":85,"n":1,"t":1793894349654},{"p":"/.vscode/sftp.json","w":30,"n":1,"t":1793894352619}],"uas":[{"ua":"Mozilla/5.0 (l9scan/2.0.631313e28323e21323e2430313; +https://leakix.net)","n":5,"tag":null}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894352619,"maxSingle":100,"totalScore":270,"country":"GB","city":"London","region":"England","asn":14061,"org":"DigitalOcean, LLC","colo":"VIE","method":"GET"},{"ip":"81.171.72.135","firstSeen":1793894021668,"hits":12,"score":100,"reasons":["env-file","tool:go","wp-admin","backup-archive","backup-file","phpinfo","svn-hg","actuator-sensitive","actuator","ssh-key","ssh-dir","ide-dir","generic-probe","npmrc"],"paths":[{"p":"/storage/logs/laravel.log","w":55,"n":1,"t":1793894022869},{"p":"/wp-admin/setup-config.php","w":45,"n":1,"t":1793894023093},{"p":"/.env","w":70,"n":1,"t":1793894023132},{"p":"/api/.env","w":70,"n":1,"t":1793894023238},{"p":"/.vscode/sftp.json","w":40,"n":1,"t":1793894023322},{"p":"/.npmrc","w":60,"n":1,"t":1793894023380},{"p":"/database_backup.sql","w":40,"n":1,"t":1793894023523},{"p":"/dump.sql","w":85,"n":1,"t":1793894023733},{"p":"/backup.tar.gz","w":70,"n":1,"t":1793894023874}],"uas":[{"ua":"Go-http-client/2.0","n":9,"tag":"tool:go"}],"domains":["test2","test4","test5"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894023901,"maxSingle":85,"totalScore":535,"country":"NL","city":"Amsterdam","region":"North Holland","asn":34343,"org":"Eweka Internet Services B.V.","colo":"AMS","method":"GET"},{"ip":"91.148.244.131","firstSeen":1793894022876,"hits":12,"score":100,"reasons":["backup-archive","backup-file","tool:go","ssh-key","ssh-dir","generic-probe","env-file","svn-hg","ide-dir","shell-history","config-generic"],"paths":[{"p":"/dump.sql","w":85,"n":1,"t":1793894022876},{"p":"/database.sql","w":40,"n":1,"t":1793894023007},{"p":"/.ssh/id_ed25519","w":100,"n":1,"t":1793894023055},{"p":"/.ssh/id_rsa","w":100,"n":1,"t":1793894023154},{"p":"/backup.zip","w":70,"n":1,"t":1793894023198},{"p":"/.env","w":70,"n":1,"t":1793894023326},{"p":"/.svn/wc.db","w":45,"n":1,"t":1793894023428},{"p":"/api/.env","w":70,"n":1,"t":1793894023456},{"p":"/.vscode/sftp.json","w":40,"n":1,"t":1793894023556},{"p":"/.bash_history","w":65,"n":1,"t":1793894023655},{"p":"/.env.production","w":70,"n":1,"t":1793894023725},{"p":"/config.php","w":30,"n":1,"t":1793894023794}],"uas":[{"ua":"Go-http-client/2.0","n":12,"tag":"tool:go"}],"domains":["test1"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894023794,"maxSingle":100,"totalScore":785,"country":"NL","city":"Amstelveen","region":"North Holland","asn":34343,"org":"Base IP B.V.","colo":"AMS","method":"GET"},{"ip":"81.171.72.93","firstSeen":1793894021692,"hits":10,"score":100,"reasons":["laravel-log","tool:go","env-file","ide-dir","ssh-key","ssh-dir","wp-admin","backup-archive","backup-file","generic-probe"],"paths":[{"p":"/storage/logs/laravel.log","w":55,"n":1,"t":1793894021692},{"p":"/.env.production","w":70,"n":1,"t":1793894021904},{"p":"/.vscode/sftp.json","w":40,"n":1,"t":1793894021949},{"p":"/.ssh/id_ed25519","w":100,"n":1,"t":1793894022175},{"p":"/.ssh/id_rsa","w":100,"n":1,"t":1793894022262},{"p":"/wp-admin/setup-config.php","w":45,"n":1,"t":1793894022299},{"p":"/dump.sql","w":85,"n":1,"t":1793894022367},{"p":"/backup.sql","w":100,"n":1,"t":1793894022400},{"p":"/database_backup.sql","w":40,"n":1,"t":1793894022482},{"p":"/backup.zip","w":70,"n":1,"t":1793894022597}],"uas":[{"ua":"Go-http-client/2.0","n":10,"tag":"tool:go"}],"domains":["main"],"level":"critical","source":"auto","days":["2026-11-05"],"lastSeen":1793894022597,"maxSingle":100,"totalScore":705,"country":"NL","city":"Amsterdam","region":"North Holland","asn":34343,"org":"Eweka Internet Services B.V.","colo":"AMS","method":"GET"},{"ip":"34.139.42.247","firstSeen":1793861394000,"lastSeen":1793861397000,"hits":252,"score":100,"totalScore":0,"reasons":["sftp-config","shell-history","htpasswd","kube-config","docker-config","db-config","laravel-log","go-debug","actuator-sensitive","composer-json","package-json","build-config","aws-lambda-cfg","web-config","sensitive-path-scan"],"paths":[{"p":"/composer.json","w":55,"n":11,"t":1793861394000},{"p":"/package.json","w":55,"n":11,"t":1793861394000},{"p":"/webpack.config.js","w":55,"n":11,"t":1793861394000},{"p":"/babel.config.js","w":55,"n":11,"t":1793861394000},{"p":"/sftp-config.json","w":55,"n":11,"t":1793861394000},{"p":".zsh_history","w":55,"n":11,"t":1793861394000},{"p":"/.bash_history","w":55,"n":11,"t":1793861394000},{"p":"/.htpasswd","w":55,"n":11,"t":1793861394000},{"p":"/.kube/config","w":55,"n":11,"t":1793861394000},{"p":"/.docker/config.json","w":55,"n":11,"t":1793861394000},{"p":"/parameters.yml","w":55,"n":11,"t":1793861394000},{"p":"/database.json","w":55,"n":11,"t":1793861394000},{"p":"/database.yml","w":55,"n":11,"t":1793861394000},{"p":"/config.yaml","w":55,"n":11,"t":1793861394000},{"p":"/config.yml","w":55,"n":11,"t":1793861394000},{"p":"/web.config","w":55,"n":11,"t":1793861394000},{"p":"/storage/logs/laravel.log","w":55,"n":11,"t":1793861394000},{"p":"/debug/vars","w":55,"n":11,"t":1793861394000},{"p":"/actuator/configprops","w":55,"n":11,"t":1793861394000},{"p":"/actuator/env","w":55,"n":11,"t":1793861394000},{"p":"/serverless.yml","w":55,"n":11,"t":1793861394000},{"p":"/secret.yaml","w":55,"n":11,"t":1793861394000},{"p":"/values.yaml","w":55,"n":11,"t":1793861394000}],"uas":[{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","n":7,"tag":null},{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0","n":6,"tag":null},{"ua":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1","n":5,"tag":null},{"ua":"Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0","n":5,"tag":null}],"domains":["main"],"level":"critical","source":"manual","country":"美国","city":"查尔斯顿","region":"South Carolina","asn":396982,"org":"Google LLC","days":["2026-11-05"],"note":"站长提供的访问日志：2026/11/5 14:49 在 visit.link.wxmedia.me 连续扫描 23 类敏感文件，252 次访问"},{"ip":"2a02:4780:95:80d4::1","firstSeen":1793894059684,"hits":3,"score":75,"reasons":["build-config","sftp-config","db-config"],"paths":[{"p":"/babel.config.js","w":30,"n":1,"t":1793894059684},{"p":"/sftp-config.json","w":55,"n":1,"t":1793894060403},{"p":"/database.json","w":50,"n":1,"t":1793894060972}],"uas":[{"ua":"monitord-discovery/1.0","n":3,"tag":null}],"domains":["main"],"level":"high","source":"auto","days":["2026-11-05"],"lastSeen":1793894060972,"maxSingle":55,"totalScore":135,"country":"US","city":"Boston","region":"Massachusetts","asn":47583,"org":"Hostinger International Limited","colo":"EWR","method":"GET"},{"ip":"185.90.60.219","firstSeen":1793894183210,"hits":2,"score":70,"reasons":["env-file"],"paths":[{"p":"/.env","w":60,"n":1,"t":1793894183210},{"p":"/.env.example","w":60,"n":1,"t":1793894183726}],"uas":[{"ua":"Mozilla/5.0 (Windows Mobile 10; Android 10.0; Microsoft; Lumia 950XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Mobile Safari/537.36 Edge/40.15254.603","n":2,"tag":null}],"domains":["test1","test3","test2","main","test4","test5"],"level":"suspected","source":"auto","days":["2026-11-05"],"lastSeen":1793894264052,"maxSingle":60,"totalScore":120,"country":"FI","city":"Helsinki","region":"Uusimaa","asn":206804,"org":"EstNOC-Global","colo":"ARN","method":"GET"},{"ip":"35.202.223.218","firstSeen":1793861394000,"lastSeen":1793861397000,"hits":252,"score":62,"totalScore":0,"reasons":["manual-list","sensitive-path-scan","gcp-datacenter"],"paths":[],"uas":[],"domains":["main"],"level":"suspected","source":"manual","country":"美国","city":"","region":"","asn":396982,"org":"Google LLC","days":["2026-11-05"],"note":"站长提供的同期访问统计：252 次访问，与 34.139.42.247 同一批扫描（GCP 数据中心出口）"},{"ip":"185.218.86.21","firstSeen":1793894023012,"hits":1,"score":35,"reasons":["wp-admin"],"paths":[{"p":"/xmlrpc.php","w":35,"n":1,"t":1793894023398}],"uas":[{"ua":"Mozilla/5.0 (compatible; CT-WP-Scanner/1.0; +https://example.com/bot)","n":1,"tag":null}],"domains":["test3","test2","main","test4","test5"],"level":"watch","source":"auto","days":["2026-11-05"],"lastSeen":1793894024188,"maxSingle":35,"totalScore":35,"country":"NL","city":"Amsterdam","region":"North Holland","asn":218785,"org":"TC DATACENTER LIMITED MANAGED IP SPACE","colo":"AMS","method":"GET"}],"upload":{"at":1793894217185,"reason":"manual","total":8,"failed":5},"stats":{"writes":77,"limit":800},"threshold":50}