AWS Credentials File Grab for 2026-10-14
Last Updated: 00:00 UTC
Direct requests for /.aws/credentials — the AWS CLI credential store. Long-term AWS access keys in this file grant full programmatic access to the associated AWS account. Widely targeted in automated cloud credential harvesting campaigns.
MITRE ATT&CK
Tactic: Credential Access (TA0006)
Technique: T1552.005 — Cloud Instance Metadata API
Observed URIs
Attackers by Country
| United States | 13 | 31.7% |
| Japan | 7 | 17.1% |
| Canada | 5 | 12.2% |
| Singapore | 3 | 7.3% |
| France | 2 | 4.9% |
| Taiwan | 2 | 4.9% |
| Germany | 2 | 4.9% |
| Brazil | 2 | 4.9% |
| Bulgaria | 2 | 4.9% |
| Belgium | 1 | 2.4% |
| The Netherlands | 1 | 2.4% |
| Romania | 1 | 2.4% |
IP Address : ASN : City/Provider
-
136.108.82.91 : AS396982 Google LLC : North Charleston
-
136.110.117.198 : AS396982 Google LLC : Tokyo
-
136.87.23.164 : AS396982 Google LLC : The Dalles
-
185.177.72.66 : AS211590 Bucklog SARL : France
-
188.165.63.131 : AS16276 OVH SAS : France
-
34.143.176.226 : AS396982 Google LLC : Singapore
-
34.148.254.104 : AS396982 Google LLC : North Charleston
-
34.152.31.64 : AS396982 Google LLC : Montreal
-
34.158.63.59 : AS396982 Google LLC : Singapore
-
34.186.216.24 : AS396982 Google LLC : Montreal
-
34.21.155.198 : AS396982 Google LLC : Singapore
-
34.21.31.241 : AS396982 Google LLC : Washington
-
34.53.142.135 : AS396982 Google LLC : Brussels
-
34.81.178.159 : AS396982 Google LLC : Taipei
-
34.84.104.89 : AS396982 Google LLC : Tokyo
-
34.84.129.60 : AS396982 Google LLC : Tokyo
-
34.84.41.20 : AS396982 Google LLC : Tokyo
-
34.86.166.244 : AS396982 Google LLC : Washington
-
34.86.206.152 : AS396982 Google LLC : Washington
-
35.187.203.244 : AS396982 Google LLC : Tokyo
-
35.198.132.24 : AS396982 Google LLC : Frankfurt am Main
-
35.198.39.52 : AS396982 Google LLC : São Paulo
-
35.199.101.20 : AS396982 Google LLC : São Paulo
-
35.200.61.233 : AS396982 Google LLC : Tokyo
-
35.200.9.60 : AS396982 Google LLC : Tokyo
-
35.203.115.107 : AS396982 Google LLC : Montreal
-
35.203.15.17 : AS396982 Google LLC : Montreal
-
35.203.59.119 : AS396982 Google LLC : Montreal
-
35.229.224.157 : AS396982 Google LLC : Taipei
-
35.229.27.103 : AS396982 Google LLC : North Charleston
-
35.236.209.3 : AS396982 Google LLC : Washington
-
35.245.142.80 : AS396982 Google LLC : Washington
-
35.245.18.207 : AS396982 Google LLC : Washington
-
35.246.181.110 : AS396982 Google LLC : Frankfurt am Main
-
45.153.34.43 : AS197170 TechTies Inc. : Amsterdam
-
8.235.105.123 : AS396982 Google LLC : The Dalles
-
8.235.15.109 : AS396982 Google LLC : The Dalles
-
80.94.95.211 : AS204428 SS-Net : Romania
-
93.123.109.101 : AS48090 Techoff Srv Limited : Bulgaria
-
93.123.109.230 : AS48090 Techoff Srv Limited : Bulgaria