CI/CD and Cloud Credential File Grab for 2026-10-14
Last Updated: 00:00 UTC
Requests for deployment secrets left in web roots: GitHub Actions workflow files, Docker registry auth (.docker/config.json), .git-credentials, Google Cloud application default credentials, Azure token caches, kubeconfig, npm/PyPI tokens and Terraform state.
MITRE ATT&CK
Tactic: Credential Access (TA0006)
Technique: T1552.001 — Unsecured Credentials: Credentials In Files
Observed URIs
Attackers by Country
| United States | 13 | 31.7% |
| Japan | 8 | 19.5% |
| Canada | 5 | 12.2% |
| Singapore | 3 | 7.3% |
| Germany | 3 | 7.3% |
| Taiwan | 2 | 4.9% |
| Brazil | 2 | 4.9% |
| France | 1 | 2.4% |
| India | 1 | 2.4% |
| Belgium | 1 | 2.4% |
| Pakistan | 1 | 2.4% |
| Romania | 1 | 2.4% |
IP Address : ASN : City/Provider
-
136.108.82.91 : AS396982 Google LLC : North Charleston
-
136.110.117.198 : AS396982 Google LLC : Tokyo
-
136.87.23.164 : AS396982 Google LLC : The Dalles
-
185.177.72.66 : AS211590 Bucklog SARL : France
-
34.143.176.226 : AS396982 Google LLC : Singapore
-
34.148.254.104 : AS396982 Google LLC : North Charleston
-
34.152.31.64 : AS396982 Google LLC : Montreal
-
34.158.63.59 : AS396982 Google LLC : Singapore
-
34.186.216.24 : AS396982 Google LLC : Montreal
-
34.21.155.198 : AS396982 Google LLC : Singapore
-
34.21.31.241 : AS396982 Google LLC : Washington
-
34.47.207.96 : AS396982 Google LLC : Mumbai
-
34.53.142.135 : AS396982 Google LLC : Brussels
-
34.81.178.159 : AS396982 Google LLC : Taipei
-
34.84.104.89 : AS396982 Google LLC : Tokyo
-
34.84.129.60 : AS396982 Google LLC : Tokyo
-
34.84.41.20 : AS396982 Google LLC : Tokyo
-
34.86.166.244 : AS396982 Google LLC : Washington
-
34.86.206.152 : AS396982 Google LLC : Washington
-
34.97.109.109 : AS396982 Google LLC : Osaka
-
35.187.203.244 : AS396982 Google LLC : Tokyo
-
35.198.132.24 : AS396982 Google LLC : Frankfurt am Main
-
35.198.39.52 : AS396982 Google LLC : São Paulo
-
35.199.101.20 : AS396982 Google LLC : São Paulo
-
35.200.61.233 : AS396982 Google LLC : Tokyo
-
35.200.9.60 : AS396982 Google LLC : Tokyo
-
35.203.115.107 : AS396982 Google LLC : Montreal
-
35.203.15.17 : AS396982 Google LLC : Montreal
-
35.203.59.119 : AS396982 Google LLC : Montreal
-
35.229.224.157 : AS396982 Google LLC : Taipei
-
35.229.27.103 : AS396982 Google LLC : North Charleston
-
35.236.209.3 : AS396982 Google LLC : Washington
-
35.245.142.80 : AS396982 Google LLC : Washington
-
35.245.18.207 : AS396982 Google LLC : Washington
-
35.246.181.110 : AS396982 Google LLC : Frankfurt am Main
-
36.255.97.202 : AS205759 Ghosty Networks LLC : Pakistan
-
45.134.225.16 : AS213438 ColocaTel Inc. : Germany
-
8.235.105.123 : AS396982 Google LLC : The Dalles
-
8.235.15.109 : AS396982 Google LLC : The Dalles
-
80.94.95.211 : AS204428 SS-Net : Romania