{"ip":"13.140.161.237","first_seen":"2026-11-03T20:44:33.545Z","last_seen":"2026-11-03T20:44:38.285Z","geo":{"country":"France","country_code":"FR","city":"Lauterbourg","asn":"AS51167 Contabo GmbH","isp":"Contabo GmbH","lat":48.9742,"lon":8.1851},"stats":{"total_events":1376,"ssh_events":0,"http_events":1376,"ssh_failures":0,"http_4xx":1376,"http_5xx":0,"distinct_usernames":0,"distinct_paths":659,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","asn.coordinated","probe.404flood"],"event_tags":["probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.wp-login","protocol.no-language"],"recent_events":[{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/s3.js","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/authorized_keys","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.default","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.gitlab-ci.yml","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.dotgit"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/site.zip","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/wp-config-backup.txt","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/env.template","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.js","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/wp-config-backup1.txt","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.py","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/wp-config.local","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:38.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/dashboard/phpinfo.php","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:38.284Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.production","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-11-03T20:44:38.284Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/retail-store-cart-chart/templates/configmap.yaml","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:38.284Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/.env.staging","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-11-03T20:44:38.284Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.circleci/config.yml","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config"]},{"ts":"2026-11-03T20:44:37.823Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:37.822Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/wp-config.orig","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:37.822Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/wp-config.org","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:37.822Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/current/.env","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-11-03T20:44:37.821Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/index.php.bak","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.backup"]},{"ts":"2026-11-03T20:44:37.821Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/1.php","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]},{"ts":"2026-11-03T20:44:37.744Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/vendor/laravel/.env","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-11-03T20:44:37.708Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/_profiler/app_dev.php/phpinfo","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","protocol.no-language"]},{"ts":"2026-11-03T20:44:37.707Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/viewinfo.php","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":[]}],"generated_at":"2026-11-04T04:23:20.390319787Z"}