{"ip":"34.52.229.253","first_seen":"2026-10-03T19:47:31.752Z","last_seen":"2026-10-19T07:48:36.81Z","geo":{"country":"Belgium","country_code":"BE","city":"Brussels","asn":"AS396982 Google LLC","isp":"Google LLC","lat":50.9009,"lon":4.4855},"stats":{"total_events":258,"ssh_events":0,"http_events":258,"ssh_failures":0,"http_4xx":0,"http_5xx":0,"distinct_usernames":0,"distinct_paths":140,"distinct_source_hosts":1},"behavior_tags":["actor.long_term","actor.persistent","cluster.shared_paths"],"event_tags":["probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-19T07:48:36.81Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/appveyor.yml","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.808Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.gitlab/.token","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-19T07:48:36.778Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.github/.token","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-19T07:48:36.776Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.git-token","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-19T07:48:36.775Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.gitsecret","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-19T07:48:36.752Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.github/credentials","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-19T07:48:36.747Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/wp-content/debug.log","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.745Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/wp-config.php.bak","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.backup"]},{"ts":"2026-10-19T07:48:36.744Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/web/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.742Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/vendor/composer/installed.json","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.74Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/v2/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.737Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/v1/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.734Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/test/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.731Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/staging/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.729Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/src/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.727Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/settings.json","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.724Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/server/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.721Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/sendgrid.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.692Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/secrets.json","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.69Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/runtime-config.js","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.688Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/public/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.662Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/phpinfo","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.661Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/new/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-19T07:48:36.659Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/phpinfo.php","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-19T07:48:36.657Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/production/.env","status":307,"host_app":"twaflight121226.com","source_host":"ironhawk","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-10-24T03:48:22.953675383Z"}