{"ip":"130.12.180.126","first_seen":"2026-08-16T15:44:40.063Z","last_seen":"2026-08-25T11:45:00.934Z","geo":{"country":"The Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS202412 Omegatech LTD","isp":"Netiface LLC","lat":52.3716,"lon":4.8883},"stats":{"total_events":44,"ssh_events":0,"http_events":44,"ssh_failures":0,"http_4xx":22,"http_5xx":0,"distinct_usernames":0,"distinct_paths":22,"distinct_source_hosts":2},"behavior_tags":["actor.multi_vm","probe.404flood"],"event_tags":["probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.traversal","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-08-25T11:45:00.934Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/functions/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:45:00.16Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:58.772Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:58.052Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backend/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:57.976Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/application/.env","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:56.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/../.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","probe.traversal","protocol.no-accept","protocol.no-language","probe.dotenv","probe.traversal"]},{"ts":"2026-08-25T11:44:56.378Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/backend/.env","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:55.91Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/app/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:55.195Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config/.env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:54.888Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/app/.env","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:54.167Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/env","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-25T11:44:53.447Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/%2e%2e%2f%2eenv","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.traversal","protocol.no-accept","protocol.no-language","probe.traversal"]},{"ts":"2026-08-25T11:44:53.413Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/env","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-25T11:44:52.634Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.stage","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:51.647Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.stage","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:51.58Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.dev","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:50.95Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.live","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:49.441Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.local","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:49.168Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.live","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:48.781Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.staging","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:48.11Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.production","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:47.611Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.staging","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:47.452Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.prod","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-25T11:44:46.692Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.bak","status":404,"host_app":"dfd.ironcatlabs.com:443","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv","probe.backup"]},{"ts":"2026-08-25T11:44:46.201Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.prod","status":308,"host_app":"dfd.ironcatlabs.com:80","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-08-25T18:13:43.022384378Z"}