// actor profile

35.245.213.220

geo United States · Washington[US]asn AS396982 Google LLCisp Google LLC

// observed 0h · refreshed 2026-08-30 03:30:38 UTC

Behavior

actor.heavy cluster.shared_paths probe.404flood

Stats

Total events

1,237

SSH events

0 failures

Distinct users tried

Distinct paths tried

614

1,237 HTTP 4xx

Observed tactics

client.scraper client.search-bot probe.actuator probe.admin probe.backup probe.config probe.dotenv probe.dotgit probe.dotssh probe.injection probe.traversal protocol.no-accept protocol.no-language

Recent activity

// last 25 events · successful exploits filtered

When	Source	Category	Detail	Status	Tags
2026-08-29 23:00:55	http	request	GET /serverless.yml.1	404	client.scraper
2026-08-29 23:00:55	http	request	GET /serverless.yml.orig	404
2026-08-29 23:00:55	http	request	GET /serverless.yml.copy	404
2026-08-29 23:00:55	http	request	GET /serverless.yml.tmp	404	client.scraper
2026-08-29 23:00:55	http	request	GET /serverless.yml~	404
2026-08-29 23:00:55	http	request	GET /serverless.yml.swp	404	client.scraper
2026-08-29 23:00:55	http	request	GET /serverless.yml.save	404
2026-08-29 23:00:55	http	request	GET /serverless.yml.backup	404	client.scraper
2026-08-29 23:00:55	http	request	GET /serverless.yml.old	404	client.scraper
2026-08-29 23:00:55	http	request	GET /serverless.yml.bak	404	probe.backup
2026-08-29 23:00:55	http	request	GET /docker-compose.yml.1	404
2026-08-29 23:00:54	http	request	GET /docker-compose.yml.tmp	404	client.search-bot
2026-08-29 23:00:52	http	request	GET /docker-compose.yml.backup	404	client.scraper
2026-08-29 23:00:52	http	request	GET /application.yml.tmp	404
2026-08-29 23:00:52	http	request	GET /docker-compose.yml.save	404
2026-08-29 23:00:52	http	request	GET /application.yml.swp	404
2026-08-29 23:00:52	http	request	GET /application.yml.save	404	client.scraper
2026-08-29 23:00:52	http	request	GET /application.yml.backup	404	client.scraper
2026-08-29 23:00:52	http	request	GET /terraform.tfstate.tmp	404
2026-08-29 23:00:52	http	request	GET /config.json.1	404	probe.configprobe.config
2026-08-29 23:00:52	http	request	GET /application.yml.bak	404	client.search-botprobe.backup
2026-08-29 23:00:52	http	request	GET /config.json~	404	probe.configprobe.config
2026-08-29 23:00:52	http	request	GET /terraform.tfstate.swp	404
2026-08-29 23:00:52	http	request	GET /config.json.old	404	probe.configprobe.config
2026-08-29 23:00:52	http	request	GET /.aws/credentials.save	404	probe.configclient.scraper

// machine-readable

JSON →tactic catalog →