Forums

Hi, i've got some suspicious records in error log. Does it mean someone is checking app security? Should i do something or its normal? And my favicon is rendering normal so its kinda weird.

2023-09-16 19:33:29,133: Not Found: /apple-touch-icon-120x120-precomposed.png 2023-09-16 19:33:29,298: Not Found: /apple-touch-icon-120x120.png 2023-09-16 19:33:29,439: Not Found: /apple-touch-icon-precomposed.png 2023-09-16 19:33:29,618: Not Found: /apple-touch-icon.png 2023-09-16 19:33:29,844: Not Found: /favicon.ico 2023-09-16 19:33:30,047: Not Found: /apple-touch-icon-120x120-precomposed.png 2023-09-16 19:33:30,318: Not Found: /apple-touch-icon-120x120.png 2023-09-16 19:33:30,535: Not Found: /apple-touch-icon-precomposed.png 2023-09-16 19:33:30,735: Not Found: /apple-touch-icon.png 2023-09-16 19:33:30,893: Not Found: /favicon.ico 2023-09-16 19:52:56,330: Not Found: /favicon.ico 2023-09-16 19:53:04,151: Not Found: /favicon.ico 2023-09-16 22:03:01,237: Not Found: /robots.txt 2023-09-16 22:39:37,645: Not Found: /robots.txt 2023-09-16 23:12:57,689: Not Found: /.aws/credentials 2023-09-16 23:12:57,691: Not Found: /.aws/aws_secrets.txt 2023-09-16 23:12:57,696: Not Found: /application.properties 2023-09-16 23:12:57,698: Not Found: /application.yml 2023-09-16 23:12:57,699: Not Found: /assets/other/service-account-credentials.json 2023-09-16 23:12:57,700: Not Found: /api/config.json 2023-09-16 23:12:57,705: Not Found: /assets/credentials.json 2023-09-16 23:12:57,706: Not Found: /aws/config/env.json 2023-09-16 23:12:57,707: Not Found: /aws/config/aws-credentials.json 2023-09-16 23:12:57,708: Not Found: /app/config/aws-config.yml 2023-09-16 23:12:57,714: Not Found: /.aws/config.ini 2023-09-16 23:12:57,716: Not Found: /api/keys.json 2023-09-16 23:12:57,740: Not Found: /Dockerrun.aws.json 2023-09-16 23:12:57,742: Not Found: /aws/config/db.config 2023-09-16 23:12:57,750: Not Found: /app/config/aws-credentials.yml 2023-09-16 23:12:57,752: Not Found: /aws/config.json 2023-09-16 23:12:57,756: Not Found: /.aws/credentials.ini 2023-09-16 23:12:57,786: Not Found: /aws/config/app.config 2023-09-16 23:12:57,789: Not Found: /api/secrets.json 2023-09-16 23:12:57,802: Not Found: /.styleci.yml 2023-09-16 23:12:57,817: Not Found: /.aws/credentials.yaml 2023-09-16 23:12:57,827: Not Found: /.azure/credentials.json 2023-09-16 23:12:57,836: Not Found: /.aws/config 2023-09-16 23:12:57,883: Not Found: /appsettings.json 2023-09-16 23:12:58,666: Not Found: /.docker/credentials.yml 2023-09-16 23:12:58,668: Not Found: /config/application.yml 2023-09-16 23:12:58,672: Not Found: /aws/credentials.json 2023-09-16 23:12:58,673: Not Found: /aws/credentials.ini 2023-09-16 23:12:58,674: Not Found: /aws/credentials/aws-credentials.json 2023-09-16 23:12:58,678: Not Found: /config/aws-credentials.json 2023-09-16 23:12:58,679: Not Found: /bitnami/app/config/secrets.yml 2023-09-16 23:12:58,680: Not Found: /etc/apache2/httpd.conf 2023-09-16 23:12:58,680: Not Found: /config/aws/aws_credentials.csv 2023-09-16 23:12:58,687: Not Found: /aws/secrets/aws.json 2023-09-16 23:12:58,687: Not Found: /config/aws-credentials.ini 2023-09-16 23:12:58,689: Not Found: /aws/secrets.json 2023-09-16 23:12:58,691: Not Found: /aws/secrets/connection-string.txt 2023-09-16 23:12:58,691: Not Found: /bitnami/app/config/database.yml 2023-09-16 23:12:58,694: Not Found: /var/ssl/private.pem 2023-09-16 23:12:58,695: Not Found: /lib/private/config.ini 2023-09-16 23:12:58,696: Not Found: /aws/credentials/config.yml 2023-09-16 23:12:58,702: Not Found: /etc/redis.conf 2023-09-16 23:12:58,705: Not Found: /config/jwt/public.pem 2023-09-16 23:12:58,707: Not Found: /wp-content/plugins/constant-contact-forms/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json 2023-09-16 23:12:58,708: Not Found: /usr/local/config/app-config.yaml 2023-09-16 23:12:58,711: Not Found: /config/aws-credentials.yaml 2023-09-16 23:12:58,715: Not Found: /aws/credentials.csv 2023-09-16 23:12:58,716: Not Found: /latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance 2023-09-16 23:12:58,716: Not Found: /aws/credentials/db.ini 2023-09-16 23:12:58,723: Not Found: /config/app.config 2023-09-16 23:12:58,724: Not Found: /lib/private/oauth/public.key 2023-09-16 23:12:58,724: Not Found: /.aws/lambda-config.json 2023-09-16 23:12:58,726: Not Found: /etc/aws/credentials.conf 2023-09-16 23:12:58,727: Not Found: /jenkins/config/jenkins.properties 2023-09-16 23:12:58,728: Not Found: /usr/local/etc/config.json 2023-09-16 23:12:58,728: Not Found: /config/aws/credentials.env 2023-09-16 23:12:58,729: Not Found: /aws/credentials.yaml 2023-09-16 23:12:58,731: Not Found: /aws/config/secrets/aws-credentials.ini 2023-09-16 23:12:58,732: Not Found: /var/private/config.ini 2023-09-16 23:12:58,734: Not Found: /config/aws/keys.json 2023-09-16 23:12:58,734: Not Found: /config/aws-config.json 2023-09-16 23:12:58,735: Not Found: /config/env/aws_credentials.json 2023-09-16 23:12:58,738: Not Found: /opt/data/secrets/aws.csv 2023-09-16 23:12:58,738: Not Found: /var/data/config.json 2023-09-16 23:12:58,740: Not Found: /resources/secrets.json 2023-09-16 23:12:58,743: Not Found: /credentials.json 2023-09-16 23:12:58,745: Not Found: /config/secrets/config.json 2023-09-16 23:12:58,745: Not Found: /usr/local/etc/credentials.json 2023-09-16 23:12:58,749: Not Found: /config/secrets/aws-config.json 2023-09-16 23:12:58,750: Not Found: /secrets.yml 2023-09-16 23:12:58,752: Not Found: /bitnami/app/config/oauth_config.yml 2023-09-16 23:12:58,753: Not Found: /local/bin/config.json 2023-09-16 23:12:58,758: Not Found: /aws/secrets/aws-credentials.yaml 2023-09-16 23:12:58,760: Not Found: /jenkins/secrets/whitelisted-callables.d 2023-09-16 23:12:58,764: Not Found: /lib/private/secrets.yaml 2023-09-16 23:12:58,764: Not Found: /.docker/config.json 2023-09-16 23:12:58,765: Not Found: /config/git/credentials.ini 2023-09-16 23:12:58,766: Not Found: /resources/api_keys.json 2023-09-16 23:12:58,767: Not Found: /aws/credentials/api-keys.json 2023-09-16 23:12:58,771: Not Found: /v1/credentials/aws.json 2023-09-16 23:12:58,772: Not Found: /var/private/secrets.ini 2023-09-16 23:12:58,776: Not Found: /v1/secrets/service_account.ini 2023-09-16 23:12:58,777: Not Found: /config/aws/secrets.json 2023-09-16 23:12:58,783: Not Found: /config/database.yml 2023-09-16 23:12:58,785: Not Found: /config/ssl/certificate.crt 2023-09-16 23:12:58,787: Not Found: /lib/private/oauth/private.key 2023-09-16 23:12:58,788: Not Found: /config.php 2023-09-16 23:12:58,788: Not Found: /var/private/oauth/token.json 2023-09-16 23:12:58,790: Not Found: /test/config/secrets.yml 2023-09-16 23:12:58,792: Not Found: /service-account-credentials.json 2023-09-16 23:12:58,794: Not Found: /etc/aws/credentials.yaml 2023-09-16 23:12:58,794: Not Found: /config/credentials/aws_credentials.json 2023-09-16 23:12:58,800: Not Found: /v1/metadata 2023-09-16 23:12:58,801: Not Found: /config/firebase-credentials.json 2023-09-16 23:12:58,802: Not Found: /wp-content/plugins/constant-contact-api-old/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json 2023-09-16 23:12:58,804: Not Found: /.aws/s3-config.json 2023-09-16 23:12:58,808: Not Found: /var/log/secrets/access_keys.json 2023-09-16 23:12:58,812: Not Found: /.kube/config 2023-09-16 23:12:58,813: Not Found: /config/secrets/keys.json 2023-09-16 23:12:58,814: Not Found: /wp-content/plugins/secrets/aws.yml 2023-09-16 23:12:58,814: Not Found: /local/bin/credentials.json 2023-09-16 23:12:58,815: Not Found: /etc/nginx/nginx.conf 2023-09-16 23:12:58,818: Not Found: /var/data/secrets.json 2023-09-16 23:12:58,818: Not Found: /config/oauth/config.json 2023-09-16 23:12:58,821: Not Found: /etc/aws/secrets/aws_secrets.ini 2023-09-16 23:12:58,823: Not Found: /var/ssl/public.pem 2023-09-16 23:12:58,825: Not Found: /db/secrets/connection-string.txt 2023-09-16 23:12:58,826: Not Found: /config/google-credentials.json 2023-09-16 23:12:58,827: Not Found: /usr/local/etc/aws/config.json 2023-09-16 23:12:58,829: Not Found: /etc/secrets/api_keys.yaml 2023-09-16 23:12:58,831: Not Found: /config/env.json 2023-09-16 23:12:58,834: Not Found: /var/data/config/secrets.ini 2023-09-16 23:12:58,837: Not Found: /etc/aws/credentials.ini 2023-09-16 23:12:58,837: Not Found: /usr/local/aws/credentials.json 2023-09-16 23:12:58,838: Not Found: /config/secrets/credentials.json 2023-09-16 23:12:58,841: Not Found: /config/secrets/aws-keys.json 2023-09-16 23:12:58,841: Not Found: /etc/aws-credentials.json 2023-09-16 23:12:58,843: Not Found: /config/secrets.yml 2023-09-16 23:12:58,845: Not Found: /settings.py 2023-09-16 23:12:58,845: Not Found: /v1/tasks 2023-09-16 23:12:58,848: Not Found: /resources/credentials.json 2023-09-16 23:12:58,851: Not Found: /magento/app/etc/env.php 2023-09-16 23:12:58,854: Not Found: /usr/local/etc/aws/credentials.yml 2023-09-16 23:12:58,854: Not Found: /config/ssl/private-key.key 2023-09-16 23:12:58,855: Not Found: /config/db.config 2023-09-16 23:12:58,855: Not Found: /etc/aws-config/credentials.yml 2023-09-16 23:12:58,857: Not Found: /magento/var/credentials.env 2023-09-16 23:12:58,860: Not Found: /opt/data/config/config.ini 2023-09-16 23:12:58,860: Not Found: /jenkins/secrets/master.key 2023-09-16 23:12:58,863: Not Found: /config/secrets/aws-credentials.json 2023-09-16 23:12:58,866: Not Found: /magento/app/etc/config.php 2023-09-16 23:12:58,867: Not Found: /etc/aws-config/aws_credentials.conf 2023-09-16 23:12:58,868: Not Found: /wp-config.php 2023-09-16 23:12:58,868: Not Found: /etc/credentials/aws.csv 2023-09-16 23:12:58,870: Not Found: /web.config 2023-09-16 23:12:58,874: Not Found: /redmine/config/secrets.yml 2023-09-16 23:12:58,882: Not Found: /config/jwt/private.pem 2023-09-16 23:12:58,891: Not Found: /awstats/data 2023-09-16 23:12:58,891: Not Found: /config/secrets/aws-secrets.json 2023-09-16 23:12:58,897: Not Found: /resources/keys.json 2023-09-16 23:12:58,897: Not Found: /opt/data/config/db.ini 2023-09-17 04:45:14,772: Not Found: /favicon.ico 2023-09-17 04:45:15,144: Not Found: /favicon.ico 2023-09-17 04:45:15,868: Not Found: /favicon.ico 2023-09-17 05:46:13,284: Not Found: /robots.txt 2023-09-17 11:15:22,261: Not Found: /robots.txt 2023-09-17 16:28:49,504: Not Found: /robots.txt 2023-09-17 20:05:14,071: Not Found: /favicon.ico 2023-09-17 20:05:14,888: Not Found: /favicon.ico 2023-09-17 22:48:49,910: Not Found: /robots.txt 2023-09-18 14:23:59,592: OSError: write error 2023-09-18 15:07:39,696: Not Found: /robots.txt 2023-09-18 15:07:49,649: Not Found: /favicon.ico

That's just the background noise of having a site on the web. There are scanners that look for the most obvious and easy to exploit vulnerabilities. It's very unlikely that that they will find something on a custom Python site.

Ok, thank you for the clarification, your answer calmed me down :)

Glad to hear that :)