{"ip":"136.107.98.147","first_seen":"2026-09-03T06:04:48.725Z","last_seen":"2026-09-03T06:06:36.879Z","geo":{"country":"United States","country_code":"US","city":"Washington","asn":"AS396982 Google LLC","isp":"Google LLC","lat":38.9071,"lon":-77.0368},"stats":{"total_events":1237,"ssh_events":0,"http_events":1237,"ssh_failures":0,"http_4xx":1237,"http_5xx":0,"distinct_usernames":0,"distinct_paths":614,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","probe.404flood"],"event_tags":["client.scraper","client.search-bot","probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","probe.traversal","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-09-03T06:06:36.879Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-09-03T06:06:36.879Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml~","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:36.879Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.orig","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-09-03T06:06:36.879Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.bak","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper","probe.backup"]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.copy","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.backup","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-09-03T06:06:36.878Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:36.84Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.old","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:35.816Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:34.581Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:34.581Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.copy","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper","probe.dotenv"]},{"ts":"2026-09-03T06:06:34.581Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","probe.config"]},{"ts":"2026-09-03T06:06:34.086Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.orig","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper","probe.config"]},{"ts":"2026-09-03T06:06:33.974Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.backup","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.search-bot"]},{"ts":"2026-09-03T06:06:33.973Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.copy","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:33.972Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper","probe.config"]},{"ts":"2026-09-03T06:06:33.97Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:33.97Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.aws/credentials.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper"]},{"ts":"2026-09-03T06:06:33.962Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.bak","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.backup"]},{"ts":"2026-09-03T06:06:33.961Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate~","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:33.961Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml~","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-09-03T06:06:33.961Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper","probe.config"]}],"generated_at":"2026-09-03T10:47:13.306907341Z"}