Noise

Multiple single-hit requests targeting /.env and /config/.env across unrelated IP ranges. No follow-up behavior observed.

• Requests were isolated, no path walking
• User agents inconsistent and generic
• Likely background scanner drift

A brief spike of 404s against markdown-like content paths. Appears automated but poorly targeted.

• Paths resemble scraped documentation indexes
• No authentication attempts
• Activity ceased within seconds

Client identifying as curl generated browser-like navigation patterns. No malicious indicators, but classification uncertain.

• Accept headers inconsistent with curl defaults
• Repeated asset requests
• Left without error escalation