{"ip":"35.233.164.27","first_seen":"2026-09-05T06:58:26.962Z","last_seen":"2026-09-05T06:59:34.219Z","geo":{"country":"United States","country_code":"US","city":"The Dalles","asn":"AS396982 Google LLC","isp":"Google LLC","lat":45.5945,"lon":-121.1786},"stats":{"total_events":1286,"ssh_events":0,"http_events":1286,"ssh_failures":0,"http_4xx":1286,"http_5xx":0,"distinct_usernames":0,"distinct_paths":638,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","cluster.shared_paths","probe.404flood"],"event_tags":["client.scraper","client.search-bot","probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","probe.traversal","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-09-05T06:59:34.219Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.bak","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.backup"]},{"ts":"2026-09-05T06:59:34.219Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.old","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.219Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.swp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.orig","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.old","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.save","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.copy","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.save","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.orig","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.orig","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.tmp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.backup","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.218Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.1","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.backup","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.backup","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.scraper"]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml~","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.swp","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.config","probe.config"]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.bak","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["probe.backup"]},{"ts":"2026-09-05T06:59:34.217Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml~","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":[]}],"generated_at":"2026-09-05T13:24:32.145340405Z"}