{"ip":"35.233.99.27","first_seen":"2026-10-17T23:34:14.184Z","last_seen":"2026-10-20T02:45:37.502Z","geo":{"country":"Belgium","country_code":"BE","city":"Brussels","asn":"AS396982 Google LLC","isp":"Google LLC","lat":50.9009,"lon":4.4855},"stats":{"total_events":252,"ssh_events":0,"http_events":252,"ssh_failures":0,"http_4xx":0,"http_5xx":0,"distinct_usernames":0,"distinct_paths":135,"distinct_source_hosts":1},"behavior_tags":["actor.persistent","cluster.shared_paths"],"event_tags":["probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-20T02:45:37.502Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.staging","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.501Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.openai","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.5Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.test","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.499Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/config/aws.yml","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.499Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/credentials.json","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.497Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.git/index","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-20T02:45:37.494Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.live","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.482Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.docker/config.json","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.config"]},{"ts":"2026-10-20T02:45:37.481Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/frontend/.env","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.481Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.boto","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.479Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/app.config.js","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.475Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/config/config.js","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language","probe.config"]},{"ts":"2026-10-20T02:45:37.352Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env~","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.352Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.php","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.351Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.old","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.35Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/wp-config.php.bak","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.backup"]},{"ts":"2026-10-20T02:45:37.349Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/aws-exports.js","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.349Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.s3cfg","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.347Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/credentials.ini","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.347Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/config.yaml","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language","probe.config"]},{"ts":"2026-10-20T02:45:37.347Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.github/workflows/deploy.yml","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language","probe.dotgit"]},{"ts":"2026-10-20T02:45:37.347Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/.env.docker","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.343Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/appsettings.Production.json","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-20T02:45:37.331Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/back/.env","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-20T02:45:37.33Z","source":"http","category":"request","severity":"info","method":"GET","uri":"/new/.env","status":307,"host_app":"dashboard.ironcat.io","source_host":"ironcat","tags":["probe.config","protocol.no-accept","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-10-25T08:11:06.129345694Z"}