{"ip":"34.77.137.207","first_seen":"2026-09-27T09:22:41.296Z","last_seen":"2026-10-12T18:02:25.973Z","geo":{"country":"Belgium","country_code":"BE","city":"Brussels","asn":"AS396982 Google LLC","isp":"Google LLC","lat":50.9009,"lon":4.4855},"stats":{"total_events":383,"ssh_events":0,"http_events":383,"ssh_failures":0,"http_4xx":0,"http_5xx":0,"distinct_usernames":0,"distinct_paths":148,"distinct_source_hosts":2},"behavior_tags":["actor.long_term","actor.multi_vm","actor.persistent"],"event_tags":["probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-12T18:02:25.973Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.helicone","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.97Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/litellm.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.96Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.litellm","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.954Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/openrouter.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.952Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/xai.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.947Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/wp-content/debug.log","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.942Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/wp-config.php.bak","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.backup"]},{"ts":"2026-10-12T18:02:25.939Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/web/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.934Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/vendor/composer/installed.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.927Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/v2/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.925Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/v1/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.922Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/test/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.895Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/staging/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.892Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/src/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.891Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/settings.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.887Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/server/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.882Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/sendgrid.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.88Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/secrets.json","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.857Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/runtime-config.js","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.85Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/public/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.849Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/production/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.844Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/phpinfo.php","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.843Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/phpinfo","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-12T18:02:25.836Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/old/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-12T18:02:25.835Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/new/.env","status":307,"host_app":"cateye.ironcatlabs.com","source_host":"ironcatlabs","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-10-25T00:13:09.166581457Z"}