{"ip":"35.245.213.220","first_seen":"2026-08-29T22:59:34.228Z","last_seen":"2026-08-29T23:00:55.606Z","geo":{"country":"United States","country_code":"US","city":"Washington","asn":"AS396982 Google LLC","isp":"Google LLC","lat":38.9071,"lon":-77.0368},"stats":{"total_events":1237,"ssh_events":0,"http_events":1237,"ssh_failures":0,"http_4xx":1237,"http_5xx":0,"distinct_usernames":0,"distinct_paths":614,"distinct_source_hosts":1},"behavior_tags":["actor.heavy","cluster.shared_paths","probe.404flood"],"event_tags":["client.scraper","client.search-bot","probe.actuator","probe.admin","probe.backup","probe.config","probe.dotenv","probe.dotgit","probe.dotssh","probe.injection","probe.traversal","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-08-29T23:00:55.606Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:55.598Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.orig","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:55.597Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.copy","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:55.597Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:55.528Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml~","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:55.525Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:55.516Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:55.515Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.backup","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:55.506Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.old","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:55.467Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/serverless.yml.bak","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.backup"]},{"ts":"2026-08-29T23:00:55.148Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:54.667Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.search-bot"]},{"ts":"2026-08-29T23:00:52.815Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.backup","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:52.815Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:52.814Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/docker-compose.yml.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:52.797Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:52.793Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:52.293Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.backup","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.scraper"]},{"ts":"2026-08-29T23:00:52.066Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.tmp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:52.047Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.1","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","probe.config"]},{"ts":"2026-08-29T23:00:52.046Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/application.yml.bak","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.search-bot","probe.backup"]},{"ts":"2026-08-29T23:00:52.046Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json~","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","probe.config"]},{"ts":"2026-08-29T23:00:52.046Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/terraform.tfstate.swp","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":[]},{"ts":"2026-08-29T23:00:52.046Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.json.old","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","probe.config"]},{"ts":"2026-08-29T23:00:52.045Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.aws/credentials.save","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["probe.config","client.scraper"]}],"generated_at":"2026-08-30T04:30:11.969277871Z"}