{"ip":"69.5.20.20","first_seen":"2026-09-04T20:53:51.003Z","last_seen":"2026-09-04T20:53:57.512Z","geo":{"country":"Indonesia","country_code":"ID","city":"Yogyakarta","asn":"AS150436 Byteplus Pte. Ltd.","isp":"Byteplus Pte. Ltd.","lat":-7.87538,"lon":110.426},"stats":{"total_events":20,"ssh_events":0,"http_events":20,"ssh_failures":0,"http_4xx":20,"http_5xx":0,"distinct_usernames":0,"distinct_paths":9,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","subnet.coordinated"],"event_tags":["client.curl","client.library","client.python_http","client.short-ua","probe.method_abuse","protocol.no-accept","protocol.no-language","scanner.curl","scanner.python"],"recent_events":[{"ts":"2026-09-04T20:53:57.512Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.short-ua","client.curl","protocol.no-accept","protocol.no-language","scanner.curl"]},{"ts":"2026-09-04T20:53:57.239Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:56.971Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.library","client.python_http","protocol.no-accept","protocol.no-language","scanner.python"]},{"ts":"2026-09-04T20:53:56.691Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.short-ua","client.curl","protocol.no-accept","protocol.no-language","scanner.curl"]},{"ts":"2026-09-04T20:53:56.414Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/user-data","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:56.145Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/user-data","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:55.866Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/info","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:55.589Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/info","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:55.336Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2016-09-02/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.library","client.python_http","protocol.no-accept","protocol.no-language","scanner.python"]},{"ts":"2026-09-04T20:53:55.069Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2016-09-02/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:54.795Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2021-03-23/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:54.516Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/2021-03-23/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.library","client.python_http","protocol.no-accept","protocol.no-language","scanner.python"]},{"ts":"2026-09-04T20:53:54.231Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.library","client.python_http","protocol.no-accept","protocol.no-language","scanner.python"]},{"ts":"2026-09-04T20:53:52.683Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["client.short-ua","client.curl","protocol.no-accept","protocol.no-language","scanner.curl"]},{"ts":"2026-09-04T20:53:52.401Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:52.115Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/latest/meta-data/iam/security-credentials/","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-04T20:53:51.831Z","source":"http","category":"request","severity":"warn","method":"PUT","uri":"/api/token","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["probe.method_abuse","client.short-ua","client.curl","scanner.curl"]},{"ts":"2026-09-04T20:53:51.549Z","source":"http","category":"request","severity":"warn","method":"PUT","uri":"/api/token","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["probe.method_abuse","client.library","client.python_http","scanner.python"]},{"ts":"2026-09-04T20:53:51.269Z","source":"http","category":"request","severity":"warn","method":"PUT","uri":"/latest/api/token","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["probe.method_abuse"]},{"ts":"2026-09-04T20:53:51.003Z","source":"http","category":"request","severity":"warn","method":"PUT","uri":"/latest/api/token","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["probe.method_abuse","client.short-ua","client.curl","scanner.curl"]},{"ts":"2026-09-01T20:52:39.63Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-01T20:52:39.6Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["protocol.no-accept","protocol.no-language"]}],"generated_at":"2026-10-26T05:07:38.860284177Z"}