Loading threats
Matches HTTP requests attempting to access a backup copy of the AWS CLI configuration file at /.aws/config.bak. This primitive helps identify reconnaissance or exploitation attempts where attackers probe for exposed backup or temporary configuration files that may reveal cloud account settings, profiles, or role configuration due to misconfiguration, directory listing, or file disclosure vulnerabilities.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 185.177.72.38 | 99% | 32,544 | 2,183 | 🇫🇷 FR | AS211590 | 2026-04-23 |
| 185.177.72.30 | 98% | 26,701 | 1,384 | 🇫🇷 FR | AS211590 | 2026-04-29 |
| 185.177.72.49 | 94% | 21,282 | 1,534 | 🇫🇷 FR | AS211590 | 2026-04-29 |
| 45.148.10.5 | 100% | 553 | 553 | 🇳🇱 NL | AS48090 | 2026-03-21 |
| 195.178.110.28 | 99% | 507 | 507 | 🇧🇬 BG | AS48090 | 2026-03-21 |
| 185.177.72.66 | 92% | 143 | 143 | 🇫🇷 FR | AS211590 | 2026-04-27 |
| 185.177.72.11 | 93% | 95 | 93 | 🇫🇷 FR | AS211590 | 2026-04-29 |
| 185.177.72.205 | 87% | 93 | 93 | 🇫🇷 FR | AS211590 | 2026-04-24 |
| 185.177.72.100 | 84% | 61 | 61 | 🇫🇷 FR | AS211590 | 2026-04-24 |
| 185.177.72.5 | 70% | 42 | 42 | 🇫🇷 FR | AS211590 | 2026-04-29 |
| 185.177.72.69 | 88% | 41 | 41 | 🇫🇷 FR | AS211590 | 2026-04-27 |