Environment File Variant Credential Grab for 2026-10-14
Last Updated: 00:00 UTC
Requests for editor backups and copies of .env files (.env~, .env1, .env_copy, .envrc). Scanners try these because a renamed copy often escapes the web server rule that blocks .env itself.
MITRE ATT&CK
Tactic: Credential Access (TA0006)
Technique: T1552.001 — Unsecured Credentials: Credentials In Files
Observed URIs
Attackers by Country
| United States | 13 | 32.5% |
| Japan | 8 | 20.0% |
| Canada | 5 | 12.5% |
| Singapore | 3 | 7.5% |
| Taiwan | 2 | 5.0% |
| Germany | 2 | 5.0% |
| Brazil | 2 | 5.0% |
| France | 1 | 2.5% |
| Indonesia | 1 | 2.5% |
| India | 1 | 2.5% |
| Belgium | 1 | 2.5% |
| The Netherlands | 1 | 2.5% |
IP Address : ASN : City/Provider
-
136.108.82.91 : AS396982 Google LLC : North Charleston
-
136.110.117.198 : AS396982 Google LLC : Tokyo
-
136.87.23.164 : AS396982 Google LLC : The Dalles
-
185.177.72.66 : AS211590 Bucklog SARL : France
-
34.101.213.70 : AS396982 Google LLC : Jakarta
-
34.143.176.226 : AS396982 Google LLC : Singapore
-
34.148.254.104 : AS396982 Google LLC : North Charleston
-
34.152.31.64 : AS396982 Google LLC : Montreal
-
34.158.63.59 : AS396982 Google LLC : Singapore
-
34.16.243.42 : AS396982 Google LLC : Las Vegas
-
34.186.216.24 : AS396982 Google LLC : Montreal
-
34.21.155.198 : AS396982 Google LLC : Singapore
-
34.21.31.241 : AS396982 Google LLC : Washington
-
34.47.207.96 : AS396982 Google LLC : Mumbai
-
34.53.142.135 : AS396982 Google LLC : Brussels
-
34.81.178.159 : AS396982 Google LLC : Taipei
-
34.84.104.89 : AS396982 Google LLC : Tokyo
-
34.84.129.60 : AS396982 Google LLC : Tokyo
-
34.84.41.20 : AS396982 Google LLC : Tokyo
-
34.86.166.244 : AS396982 Google LLC : Washington
-
34.86.206.152 : AS396982 Google LLC : Washington
-
34.97.109.109 : AS396982 Google LLC : Osaka
-
35.187.203.244 : AS396982 Google LLC : Tokyo
-
35.198.132.24 : AS396982 Google LLC : Frankfurt am Main
-
35.198.39.52 : AS396982 Google LLC : São Paulo
-
35.199.101.20 : AS396982 Google LLC : São Paulo
-
35.200.61.233 : AS396982 Google LLC : Tokyo
-
35.200.9.60 : AS396982 Google LLC : Tokyo
-
35.203.115.107 : AS396982 Google LLC : Montreal
-
35.203.15.17 : AS396982 Google LLC : Montreal
-
35.203.59.119 : AS396982 Google LLC : Montreal
-
35.229.224.157 : AS396982 Google LLC : Taipei
-
35.229.27.103 : AS396982 Google LLC : North Charleston
-
35.236.209.3 : AS396982 Google LLC : Washington
-
35.245.142.80 : AS396982 Google LLC : Washington
-
35.245.18.207 : AS396982 Google LLC : Washington
-
35.246.181.110 : AS396982 Google LLC : Frankfurt am Main
-
45.153.34.43 : AS197170 TechTies Inc. : Amsterdam
-
8.235.105.123 : AS396982 Google LLC : The Dalles
-
8.235.15.109 : AS396982 Google LLC : The Dalles