I set up an API in the cloud and I got two requests which didn't seem to be normal.

Just as the title says, I had the API up for a bit and when I come back I see these two requests:

\`\`\`

127.0.0.1 - - "GET / HTTP/1.0" 200 -
127.0.0.1 - - "GET /systembc/password.php HTTP/1.0" 404 -
127.0.0.1 - - "GET / HTTP/1.0" 200 -
127.0.0.1 - - "POST / HTTP/1.0" 405 -
127.0.0.1 - - "GET /.env HTTP/1.0" 404

\`\`\`

​

Searched the systembc and it shows it is some kind of RAT. Now I'm *kinda* …

api back cloud cybersecurity http password php requests systembc