Weird 404 Responses in log file

[Spyderturbo007 19]

Can someone tell me what these are?  My log is littered with them and almost all of them say something about credentials or config.  My friendly neighborhood AI agent has the following to say about them:

"The string provided represents an HTTP GET request that resembles a path traversal (directory traversal) or arbitrary file read attempt. It targets a local path (/@fs/root/...) seeking to expose sensitive configuration files or API keys (such as Anthropic API credentials)."

I'm not 100% sure what that means, but it doesn't sound benign.  

2026-09-12 01:20:26.736 Info Server-0HNOFSLS80CR6:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/root/.config/gcloud/credentials.db?=raw??. 
2026-09-12 01:20:26.823 Info Server-0HNOFSLS80CR7:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/root/.config/anthropic/credentials/default.json?=raw??. 

2026-09-12 01:20:26.550 Info Server-0HNOFSLS80CQQ:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/home/ubuntu/.config/gcloud/application_default_credentials.json?=raw??. 
2026-09-12 01:20:26.639 Info Server-0HNOFSLS80CQR:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/root/.config/gcloud/application_default_credentials.json?=raw??. 

2026-09-12 01:20:26.016 Info Server-0HNOFSLS80CPN:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/home/admin/.aws/credentials?=raw??. 
2026-09-12 01:20:26.022 Info Server-0HNOFSLS80CPO:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/home/www-data/.aws/credentials?=raw??. 
2026-09-12 01:20:26.023 Info Server-0HNOFSLS80CPP:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/app/.aws/credentials?=raw??. 
2026-09-12 01:20:26.023 Info Server-0HNOFSLS80CPQ:00000001: http/1.1 Response 404 to host3. Time: 0ms. GET http://host1/@fs/var/www/.aws/credentials?=raw??. 

[Luke 43087]

Hi, I don’t know what they are. Someone is probing your server looking for holes.

 One thing you can do to make your server harder to find is use different public router port numbers from the default values.