{"ip":"92.4.137.125","first_seen":"2026-10-15T03:14:39.568Z","last_seen":"2026-10-15T03:15:22.415Z","geo":{"country":"South Africa","country_code":"ZA","city":"Johannesburg","asn":"AS31898 Oracle Corporation","isp":"TalkTalk","lat":-26.2023,"lon":28.0436},"stats":{"total_events":26,"ssh_events":0,"http_events":26,"ssh_failures":0,"http_4xx":26,"http_5xx":0,"distinct_usernames":0,"distinct_paths":26,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","probe.404flood"],"event_tags":["client.short-ua","probe.backup","probe.config","probe.dotenv","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-15T03:15:22.415Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config.backup","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["client.short-ua","protocol.no-accept","protocol.no-language","probe.config"]},{"ts":"2026-10-15T03:15:21.394Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/old/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:20.65Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/bak/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:19.918Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backups/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:19.021Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backup/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:18.285Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/home/deploy/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:17.334Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/home/ubuntu/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:15.606Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/var/www/html/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:13.538Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/var/www/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:11.019Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/web/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:06.792Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/srv/app/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:04.288Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/opt/app/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:02.875Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/app/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:15:00.54Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/api/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:59.345Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/backend/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:57.718Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/config/.env","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:56.864Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.save","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:54.953Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.old","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:53.319Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.bak","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv","probe.backup"]},{"ts":"2026-10-15T03:14:51.871Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.backup","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:50.29Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.dev","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:47.512Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.staging","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:44.207Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.production","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:42.057Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.prod","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]},{"ts":"2026-10-15T03:14:40.577Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/.env.local","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["probe.config","client.short-ua","protocol.no-accept","protocol.no-language","probe.dotenv"]}],"generated_at":"2026-10-25T06:47:22.890487892Z"}