{"ip":"154.54.100.174","first_seen":"2026-10-14T17:07:08.762Z","last_seen":"2026-10-14T17:07:45.055Z","geo":{"country":"United States","country_code":"US","city":"Beltsville","asn":"AS6405 American Information Network","isp":"Cogent Communications","lat":39.0528,"lon":-76.9259},"stats":{"total_events":145,"ssh_events":0,"http_events":145,"ssh_failures":0,"http_4xx":145,"http_5xx":0,"distinct_usernames":0,"distinct_paths":145,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","probe.404flood","subnet.coordinated"],"event_tags":["client.go_http","client.library","probe.admin","probe.config","probe.dotenv","probe.dotgit","protocol.no-accept","protocol.no-language","scanner.bare-go-client","scanner.go"],"recent_events":[{"ts":"2026-10-14T17:07:45.055Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/console/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:45.055Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/upload/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:45.026Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","probe.admin","scanner.go"]},{"ts":"2026-10-14T17:07:45.022Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/info/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:45.018Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin/info.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.admin","scanner.go"]},{"ts":"2026-10-14T17:07:45.017Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/prod/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:45.016Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/apps/config/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:45.014Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backend/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:28.669Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cart/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:28.669Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/?phpinfo=1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:28.669Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/core/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:28.638Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin/php_info.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.admin","scanner.go"]},{"ts":"2026-10-14T17:07:28.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/admin/config/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","probe.admin","scanner.go"]},{"ts":"2026-10-14T17:07:28.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/storage/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:28.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/temp.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:28.629Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/v2/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.48Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2020/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:20.479Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2022/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:20.479Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/i.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.479Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/clients/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]},{"ts":"2026-10-14T17:07:20.454Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/web/php.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.447Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/v1/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.445Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/exported/phpinfo.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.442Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/info/info.php","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-10-14T17:07:20.441Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/tmp/.env","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","probe.dotenv","scanner.go"]}],"generated_at":"2026-10-25T00:12:43.746825635Z"}