.env Credential File Grab for 2026-10-19

Oct 19, 2026 Exploitation

Last Updated: 00:00 UTC

Mass automated probing for .env files that contain database passwords, API keys, and other application secrets. These files are commonly left web-accessible on misconfigured Laravel, Django, and Node.js deployments.

MITRE ATT&CK

Tactic: Credential Access (TA0006)
Technique: T1552.001 — Credentials in Files

Observed URIs

Attackers by Country

United States	67	26.2%
France	30	11.7%
Taiwan	24	9.4%
The Netherlands	18	7.0%
Belgium	18	7.0%
Singapore	12	4.7%
Germany	12	4.7%
United Kingdom	11	4.3%
Bulgaria	11	4.3%
Japan	11	4.3%
Brazil	9	3.5%
Switzerland	5	2.0%
Sweden	3	1.2%
Canada	3	1.2%
Indonesia	2	0.8%
Morocco	2	0.8%
Romania	2	0.8%
Australia	2	0.8%
Spain	2	0.8%
Ireland	2	0.8%
India	2	0.8%
Lithuania	1	0.4%
Iran	1	0.4%
Ivory Coast	1	0.4%
United Arab Emirates	1	0.4%
Italy	1	0.4%
Hong Kong	1	0.4%
Finland	1	0.4%
Ukraine	1	0.4%

IP Address : ASN : City/Provider

103.168.66.141 : AS142430 DIGI VPS : Dallas
103.168.67.36 : AS142430 DIGI VPS : Dallas
103.215.74.213 : AS150303 SoloRDP : Dallas
104.199.180.32 : AS396982 Google LLC : Taipei
104.28.211.186 : AS13335 Cloudflare, Inc. : Paris
104.28.217.138 : AS13335 Cloudflare, Inc. : Utrecht
119.235.221.6 : AS131111 PT Mora Telematika Indonesia : West Jakarta
13.40.15.49 : AS16509 Amazon.com, Inc. : City of London
13.62.76.90 : AS16509 Amazon.com, Inc. : Stockholm
13.63.166.162 : AS16509 Amazon.com, Inc. : Stockholm
130.185.118.160 : AS51167 Contabo GmbH : Lauterbourg
132.226.131.244 : AS31898 Oracle Corporation : Slough
136.107.240.111 : AS396982 Google LLC : Washington
136.108.89.82 : AS396982 Google LLC : North Charleston
136.65.90.221 : AS396982 Google LLC : Council Bluffs
136.70.141.172 : AS396982 Google LLC : Washington
136.85.14.156 : AS396982 Google LLC : Singapore
137.184.120.9 : AS14061 DigitalOcean, LLC : Santa Clara
141.98.11.107 : AS209605 UAB Host Baltic : Vilnius
144.172.93.238 : AS14956 RouterHosting LLC : Ogden
144.172.99.12 : AS14956 RouterHosting LLC : Staten Island
15.228.82.148 : AS16509 Amazon.com, Inc. : São Paulo
157.10.109.87 : AS58495 PT Parsaoran Global Datatrans : Indonesia
157.230.227.116 : AS14061 DigitalOcean, LLC : North Bergen
16.170.219.168 : AS16509 Amazon.com, Inc. : Stockholm
16.61.141.255 : AS16509 Amazon.com, Inc. : City of London
161.35.95.203 : AS14061 DigitalOcean, LLC : Amsterdam
161.97.150.234 : AS51167 Contabo GmbH : Lauterbourg
178.202.203.240 : AS3209 Vodafone GmbH : Eschwege
179.43.177.154 : AS51852 Private Layer INC : Rümlang
18.118.253.164 : AS16509 Amazon.com, Inc. : Columbus
18.230.22.242 : AS16509 Amazon.com, Inc. : São Paulo
185.177.72.10 : AS211590 Bucklog SARL : France
185.177.72.104 : AS211590 Bucklog SARL : France
185.177.72.107 : AS211590 Bucklog SARL : France
185.177.72.111 : AS211590 Bucklog SARL : France
185.177.72.115 : AS211590 Bucklog SARL : France
185.177.72.12 : AS211590 Bucklog SARL : France
185.177.72.13 : AS211590 Bucklog SARL : France
185.177.72.16 : AS211590 Bucklog SARL : France
185.177.72.17 : AS211590 Bucklog SARL : France
185.177.72.204 : AS211590 Bucklog SARL : France
185.177.72.205 : AS211590 Bucklog SARL : France
185.177.72.210 : AS211590 Bucklog SARL : France
185.177.72.23 : AS211590 Bucklog SARL : France
185.177.72.24 : AS211590 Bucklog SARL : France
185.177.72.30 : AS211590 Bucklog SARL : France
185.177.72.38 : AS211590 Bucklog SARL : France
185.177.72.46 : AS211590 Bucklog SARL : France
185.177.72.51 : AS211590 Bucklog SARL : France
185.177.72.53 : AS211590 Bucklog SARL : France
185.177.72.56 : AS211590 Bucklog SARL : France
185.177.72.64 : AS211590 Bucklog SARL : France
185.177.72.67 : AS211590 Bucklog SARL : France
185.177.72.68 : AS211590 Bucklog SARL : France
185.177.72.69 : AS211590 Bucklog SARL : France
185.177.72.7 : AS211590 Bucklog SARL : France
185.99.255.196 : AS27176 DataWagon LLC : London
192.253.248.169 : AS213790 Limited Network LTD : Iran
195.178.110.101 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.102 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.103 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.104 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.108 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.155 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.161 : AS48090 Techoff Srv Limited : Bulgaria
195.178.110.31 : AS48090 Techoff Srv Limited : Bulgaria
195.20.248.253 : AS8560 IONOS SE : France
196.89.16.161 : AS36903 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM : Agadir
198.55.98.76 : AS36352 HostPapa : Los Angeles
2.57.122.173 : AS47890 Unmanaged Ltd : Romania
204.76.203.125 : AS51396 Pfcloud UG (haftungsbeschrankt) : Eygelshoven
204.76.203.210 : AS51396 Pfcloud UG (haftungsbeschrankt) : Eygelshoven
213.209.159.154 : AS208137 Feo Prest SRL : Taiwan
213.209.159.175 : AS208137 Feo Prest SRL : Taiwan
216.81.248.1 : AS11320 LightEdge Solutions : Des Moines
3.101.43.191 : AS16509 Amazon.com, Inc. : San Jose
3.67.85.74 : AS16509 Amazon.com, Inc. : Frankfurt am Main
3.74.156.190 : AS16509 Amazon.com, Inc. : Frankfurt am Main
3.75.223.22 : AS16509 Amazon.com, Inc. : Frankfurt am Main
31.57.216.50 : AS197769 VPS Dedicated LLC : United Arab Emirates
34.106.33.201 : AS396982 Google LLC : Salt Lake City
34.107.123.95 : AS396982 Google LLC : Frankfurt am Main
34.11.30.255 : AS396982 Google LLC : Washington
34.12.129.85 : AS396982 Google LLC : Groningen
34.125.78.220 : AS396982 Google LLC : Las Vegas
34.125.90.143 : AS396982 Google LLC : Las Vegas
34.129.109.212 : AS396982 Google LLC : Melbourne
34.140.177.86 : AS396982 Google LLC : Brussels
34.140.61.9 : AS396982 Google LLC : Brussels
34.141.24.149 : AS396982 Google LLC : Frankfurt am Main
34.142.142.10 : AS396982 Google LLC : Singapore
34.148.120.226 : AS396982 Google LLC : North Charleston
34.148.28.77 : AS396982 Google LLC : North Charleston
34.150.145.79 : AS396982 Google LLC : Washington
34.154.99.24 : AS396982 Google LLC : Milan
34.158.108.59 : AS396982 Google LLC : Groningen
34.158.112.220 : AS396982 Google LLC : Groningen
34.158.63.59 : AS396982 Google LLC : Singapore
34.175.227.3 : AS396982 Google LLC : Madrid
34.177.100.178 : AS396982 Google LLC : Singapore
34.177.105.135 : AS396982 Google LLC : Singapore
34.186.103.250 : AS396982 Google LLC : Washington
34.21.140.21 : AS396982 Google LLC : Singapore
34.21.245.24 : AS396982 Google LLC : Singapore
34.21.248.117 : AS396982 Google LLC : Singapore
34.21.62.0 : AS396982 Google LLC : Washington
34.216.224.169 : AS16509 Amazon.com, Inc. : Boardman
34.23.110.114 : AS396982 Google LLC : North Charleston
34.23.132.86 : AS396982 Google LLC : North Charleston
34.23.47.120 : AS396982 Google LLC : North Charleston
34.244.180.29 : AS16509 Amazon.com, Inc. : Dublin
34.27.65.167 : AS396982 Google LLC : Council Bluffs
34.32.216.134 : AS396982 Google LLC : Groningen
34.38.10.112 : AS396982 Google LLC : Brussels
34.38.72.12 : AS396982 Google LLC : Brussels
34.39.128.47 : AS396982 Google LLC : São Paulo
34.39.209.219 : AS396982 Google LLC : São Paulo
34.39.220.247 : AS396982 Google LLC : São Paulo
34.39.247.67 : AS396982 Google LLC : São Paulo
34.39.249.218 : AS396982 Google LLC : São Paulo
34.40.230.243 : AS396982 Google LLC : Sydney
34.40.76.83 : AS396982 Google LLC : Frankfurt am Main
34.45.208.237 : AS396982 Google LLC : Council Bluffs
34.45.27.181 : AS396982 Google LLC : Council Bluffs
34.47.6.48 : AS396982 Google LLC : Montreal
34.53.245.46 : AS396982 Google LLC : Brussels
34.55.119.105 : AS396982 Google LLC : Council Bluffs
34.60.79.217 : AS396982 Google LLC : Council Bluffs
34.61.244.82 : AS396982 Google LLC : Council Bluffs
34.62.117.5 : AS396982 Google LLC : Brussels
34.62.127.65 : AS396982 Google LLC : Brussels
34.62.149.187 : AS396982 Google LLC : Brussels
34.62.46.142 : AS396982 Google LLC : Brussels
34.62.82.165 : AS396982 Google LLC : Brussels
34.63.197.75 : AS396982 Google LLC : Council Bluffs
34.65.175.91 : AS396982 Google LLC : Zurich
34.65.31.150 : AS396982 Google LLC : Zurich
34.65.77.97 : AS396982 Google LLC : Zurich
34.65.83.100 : AS396982 Google LLC : Zurich
34.7.134.59 : AS396982 Google LLC : Groningen
34.7.220.134 : AS396982 Google LLC : Groningen
34.7.94.217 : AS396982 Google LLC : Groningen
34.72.225.180 : AS396982 Google LLC : Council Bluffs
34.75.155.23 : AS396982 Google LLC : North Charleston
34.75.161.22 : AS396982 Google LLC : North Charleston
34.75.244.179 : AS396982 Google LLC : North Charleston
34.75.45.189 : AS396982 Google LLC : North Charleston
34.76.120.98 : AS396982 Google LLC : Brussels
34.76.200.197 : AS396982 Google LLC : Brussels
34.76.243.2 : AS396982 Google LLC : Brussels
34.76.51.81 : AS396982 Google LLC : Brussels
34.77.204.54 : AS396982 Google LLC : Brussels
34.77.29.252 : AS396982 Google LLC : Brussels
34.79.176.214 : AS396982 Google LLC : Brussels
34.80.100.101 : AS396982 Google LLC : Taipei
34.80.135.175 : AS396982 Google LLC : Taipei
34.80.14.120 : AS396982 Google LLC : Taipei
34.80.144.228 : AS396982 Google LLC : Taipei
34.80.15.189 : AS396982 Google LLC : Taipei
34.80.169.214 : AS396982 Google LLC : Taipei
34.80.50.158 : AS396982 Google LLC : Taipei
34.80.88.12 : AS396982 Google LLC : Taipei
34.80.90.61 : AS396982 Google LLC : Taipei
34.81.189.136 : AS396982 Google LLC : Taipei
34.81.252.36 : AS396982 Google LLC : Taipei
34.81.252.50 : AS396982 Google LLC : Taipei
34.81.27.13 : AS396982 Google LLC : Taipei
34.81.59.127 : AS396982 Google LLC : Taipei
34.81.69.18 : AS396982 Google LLC : Taipei
34.83.92.197 : AS396982 Google LLC : The Dalles
34.84.194.144 : AS396982 Google LLC : Tokyo
34.84.234.213 : AS396982 Google LLC : Tokyo
34.84.248.173 : AS396982 Google LLC : Tokyo
34.85.102.235 : AS396982 Google LLC : Tokyo
34.85.11.35 : AS396982 Google LLC : Tokyo
34.85.197.171 : AS396982 Google LLC : Washington
34.85.217.40 : AS396982 Google LLC : Washington
34.85.23.32 : AS396982 Google LLC : Tokyo
34.86.15.76 : AS396982 Google LLC : Washington
34.87.118.114 : AS396982 Google LLC : Singapore
34.87.26.215 : AS396982 Google LLC : Jurong West
34.87.70.2 : AS396982 Google LLC : Singapore
34.89.130.161 : AS396982 Google LLC : Frankfurt am Main
34.90.158.162 : AS396982 Google LLC : Groningen
34.92.192.75 : AS396982 Google LLC : Hong Kong
34.95.45.211 : AS396982 Google LLC : Montreal
34.97.128.153 : AS396982 Google LLC : Osaka
35.172.180.246 : AS14618 Amazon.com, Inc. : Ashburn
35.185.133.109 : AS396982 Google LLC : Taipei
35.189.132.82 : AS396982 Google LLC : Tokyo
35.189.191.94 : AS396982 Google LLC : Taipei
35.194.104.219 : AS396982 Google LLC : Tokyo
35.194.244.160 : AS396982 Google LLC : Taipei
35.196.119.41 : AS396982 Google LLC : North Charleston
35.196.5.133 : AS396982 Google LLC : North Charleston
35.197.15.233 : AS396982 Google LLC : The Dalles
35.198.79.68 : AS396982 Google LLC : Frankfurt am Main
35.200.224.255 : AS396982 Google LLC : Mumbai
35.201.159.5 : AS396982 Google LLC : Taipei
35.203.112.247 : AS396982 Google LLC : Montreal
35.204.220.189 : AS396982 Google LLC : Groningen
35.215.193.42 : AS15169 Google LLC : São Paulo
35.215.237.209 : AS15169 Google LLC : São Paulo
35.221.113.88 : AS396982 Google LLC : Tokyo
35.221.16.171 : AS396982 Google LLC : Washington
35.221.223.137 : AS396982 Google LLC : Taipei
35.221.5.154 : AS396982 Google LLC : Washington
35.227.117.203 : AS396982 Google LLC : North Charleston
35.233.49.242 : AS396982 Google LLC : Brussels
35.234.46.196 : AS396982 Google LLC : Taipei
35.236.219.125 : AS396982 Google LLC : Washington
35.238.206.233 : AS396982 Google LLC : Council Bluffs
35.243.148.143 : AS396982 Google LLC : North Charleston
35.252.198.27 : AS396982 Google LLC : The Dalles
35.90.46.72 : AS16509 Amazon.com, Inc. : Boardman
40.113.64.197 : AS8075 Microsoft Corporation : Dublin
41.250.96.183 : AS36903 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM : Agadir
45.135.193.156 : AS51396 Pfcloud UG (haftungsbeschrankt) : Langen
45.148.10.238 : AS48090 Techoff Srv Limited : Amsterdam
45.148.10.246 : AS48090 Techoff Srv Limited : Amsterdam
45.148.10.42 : AS48090 Techoff Srv Limited : Amsterdam
45.148.10.51 : AS48090 Techoff Srv Limited : Amsterdam
45.148.10.62 : AS48090 Techoff Srv Limited : Amsterdam
47.130.133.234 : AS16509 Amazon.com, Inc. : Singapore
50.114.37.24 : AS400402 Hosting Bot, LLC : United States
51.159.1.96 : AS12876 Scaleway SAS : Paris
54.147.216.185 : AS14618 Amazon.com, Inc. : Ashburn
54.175.83.157 : AS14618 Amazon.com, Inc. : Ashburn
56.155.110.27 : AS16509 Amazon.com, Inc. : Osaka
65.108.203.244 : AS24940 Hetzner Online GmbH : Helsinki
65.2.55.168 : AS16509 Amazon.com, Inc. : Mumbai
77.83.39.42 : AS214940 Kprohost LLC : Ukraine
78.153.140.151 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.177 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.178 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.179 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.203 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.223 : AS202306 Hostglobal.plus Ltd : City of London
78.153.140.224 : AS202306 Hostglobal.plus Ltd : City of London
8.228.14.15 : AS396982 Google LLC : Las Vegas
8.229.45.141 : AS396982 Google LLC : The Dalles
8.234.28.106 : AS396982 Google LLC : Dallas
80.94.95.211 : AS204428 SS-Net : Romania
82.223.103.101 : AS8560 IONOS SE : Spain
83.147.52.42 : AS399486 12651980 CANADA INC. : Edison
93.123.109.164 : AS48090 Techoff Srv Limited : Bulgaria
93.123.109.167 : AS48090 Techoff Srv Limited : Bulgaria
93.123.109.246 : AS48090 Techoff Srv Limited : Bulgaria
93.206.234.162 : AS3320 Deutsche Telekom AG : Duisburg
93.206.236.161 : AS3320 Deutsche Telekom AG : Duisburg
98.92.224.18 : AS14618 Amazon.com, Inc. : Ashburn

Share on: