{"ip":"34.38.232.3","first_seen":"2026-08-13T06:56:45.737Z","last_seen":"2026-08-14T19:32:40.74Z","geo":{"country":"Belgium","country_code":"BE","city":"Brussels","asn":"AS396982 Google LLC","isp":"Google LLC","lat":50.9009,"lon":4.4855},"stats":{"total_events":27987,"ssh_events":0,"http_events":27987,"ssh_failures":0,"http_4xx":25285,"http_5xx":0,"distinct_usernames":0,"distinct_paths":358,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","actor.persistent","probe.404flood"],"event_tags":["probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","protocol.no-language"],"recent_events":[{"ts":"2026-08-14T19:32:40.74Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.staging","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-14T19:32:40.671Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.development","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-14T19:32:40.66Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.profile","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.643Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.bash_profile","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.637Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.zshrc","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.602Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.bashrc","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.572Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.mcp.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.505Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.claude/settings.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.489Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/values.yaml","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.484Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.claude.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.484Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/@fs/proc/self/environ?import\u0026raw??","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.injection"]},{"ts":"2026-08-14T19:32:40.433Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.config/anthropic/credentials/default.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.392Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/@fs/root/.env?raw??","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-14T19:32:40.328Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.hermes/auth.json","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.321Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/id_dsa","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.311Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/id_rsa","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":[]},{"ts":"2026-08-14T19:32:40.308Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/@fs/.env?raw??","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv"]},{"ts":"2026-08-14T19:32:40.25Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/known_hosts","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-08-14T19:32:40.204Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/config","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-08-14T19:32:40.167Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.prod.bak","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv","probe.backup"]},{"ts":"2026-08-14T19:32:40.146Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/id_dsa","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-08-14T19:32:40.138Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.production.bak","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv","probe.backup"]},{"ts":"2026-08-14T19:32:40.132Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/authorized_keys","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-08-14T19:32:40.083Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.ssh/id_ecdsa","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotssh"]},{"ts":"2026-08-14T19:32:40.045Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.docker","status":404,"host_app":"www.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-08-25T17:02:50.130742389Z"}