July 15, 2025, 4:30 a.m. —
GET
/.backup.tar
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.backup.sql
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_secrets.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.backup
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_secrets.js
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_lambda/token.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_lambda/secrets.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_lambda/config.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_lambda/handler.js
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_lambda
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_config.js
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_creds.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_keys.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws_/credentials
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws/s3/tokens
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws/s3/secrets
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws/s3/keys
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:30 a.m. —
GET
/.aws/metadata/iam/security-credentials/
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/ecs-task-credentials.json
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/metadata/iam
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/metadata
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.AWS_/credentials
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/ecs-task-credentials
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/credentials
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/.aws/config
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/%c0
→ 404
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/
→ 200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
July 15, 2025, 4:29 a.m. —
GET
/../../../../../../var/log/apache2/access.log
→ 400
User-Agent: -
July 15, 2025, 4:29 a.m. —
GET
/../../../../../../home/ubuntu/.env
→ 400
User-Agent: -