{"ip":"144.31.148.30","first_seen":"2026-09-27T06:32:17.104Z","last_seen":"2026-10-01T05:28:44.864Z","geo":{"country":"Germany","country_code":"DE","city":"Frankfurt am Main","asn":"AS201988 VPSPay ASN","isp":"VPSPay Networks LTD","lat":50.1103,"lon":8.7147},"stats":{"total_events":3,"ssh_events":0,"http_events":3,"ssh_failures":0,"http_4xx":3,"http_5xx":0,"distinct_usernames":0,"distinct_paths":1,"distinct_source_hosts":3},"behavior_tags":["actor.multi_vm"],"event_tags":["client.short-ua","probe.config","probe.dotenv","protocol.no-language"],"recent_events":[{"ts":"2026-10-01T05:28:44.864Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["probe.config","client.short-ua","protocol.no-language","probe.dotenv"]},{"ts":"2026-09-28T03:11:17.835Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-language","probe.dotenv"]},{"ts":"2026-09-27T06:32:17.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["probe.config","client.short-ua","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-10-26T09:15:22.229428777Z"}