{"ip":"136.117.214.122","first_seen":"2026-08-31T19:01:48.49Z","last_seen":"2026-08-31T19:03:01.87Z","geo":{"country":"United States","country_code":"US","city":"The Dalles","asn":"AS396982 Google LLC","isp":"Google LLC","lat":45.5945,"lon":-121.1786},"stats":{"total_events":1237,"ssh_events":0,"http_events":1237,"ssh_failures":0,"http_4xx":1237,"http_5xx":0,"distinct_usernames":0,"distinct_paths":614,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","cluster.shared_paths","probe.404flood"],"event_tags":["client.scraper","client.search-bot","probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","probe.traversal","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-08-31T19:03:01.87Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:01.87Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:01.775Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.old","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:01.775Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:01.698Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:01.58Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.swp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:01.58Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml~","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:01.58Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:01.58Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.orig","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:01.579Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.bak","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.backup"]},{"ts":"2026-08-31T19:03:01.579Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.backup","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:01.579Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.save","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:00.426Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:00.216Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:00.216Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:00.192Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml~","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:00.115Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.save","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:00.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-08-31T19:03:00.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.bak","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","probe.config","probe.backup"]},{"ts":"2026-08-31T19:03:00.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.bak","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.backup"]},{"ts":"2026-08-31T19:03:00.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-08-31T19:03:00.018Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","probe.config"]},{"ts":"2026-08-31T19:03:00.018Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json~","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","client.scraper","probe.config"]},{"ts":"2026-08-31T19:03:00.018Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.backup","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","probe.config"]},{"ts":"2026-08-31T19:03:00.018Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","client.scraper","probe.config"]}],"generated_at":"2026-09-01T16:41:19.744324165Z"}