Environment File Variant Credential Grab for 2026-10-16
Last Updated: 00:00 UTC
Requests for editor backups and copies of .env files (.env~, .env1, .env_copy, .envrc). Scanners try these because a renamed copy often escapes the web server rule that blocks .env itself.
MITRE ATT&CK
Tactic: Credential Access (TA0006)
Technique: T1552.001 — Unsecured Credentials: Credentials In Files
Observed URIs
Attackers by Country
| United States | 8 | 22.2% |
| The Netherlands | 8 | 22.2% |
| Brazil | 4 | 11.1% |
| Belgium | 4 | 11.1% |
| Singapore | 3 | 8.3% |
| Germany | 2 | 5.6% |
| Canada | 2 | 5.6% |
| Taiwan | 1 | 2.8% |
| Australia | 1 | 2.8% |
| Chile | 1 | 2.8% |
| Indonesia | 1 | 2.8% |
| United Kingdom | 1 | 2.8% |
IP Address : ASN : City/Provider
-
136.70.62.1 : AS396982 Google LLC : The Dalles
-
136.70.72.114 : AS396982 Google LLC : Washington
-
136.85.82.40 : AS396982 Google LLC : Singapore
-
213.209.159.133 : AS208137 Feo Prest SRL : Taiwan
-
23.144.160.164 : AS32727 SB Professional Services : United States
-
34.126.145.141 : AS396982 Google LLC : Singapore
-
34.13.132.70 : AS396982 Google LLC : Groningen
-
34.151.148.153 : AS396982 Google LLC : Sydney
-
34.151.205.161 : AS396982 Google LLC : São Paulo
-
34.156.249.47 : AS396982 Google LLC : Brussels
-
34.176.20.148 : AS396982 Google LLC : Santiago
-
34.178.225.147 : AS396982 Google LLC : Groningen
-
34.181.218.133 : AS396982 Google LLC : Washington
-
34.23.56.252 : AS396982 Google LLC : North Charleston
-
34.32.107.74 : AS396982 Google LLC : Berlin
-
34.32.216.134 : AS396982 Google LLC : Groningen
-
34.34.219.92 : AS396982 Google LLC : Jakarta
-
34.38.113.44 : AS396982 Google LLC : Brussels
-
34.39.110.189 : AS396982 Google LLC : City of London
-
34.39.134.179 : AS396982 Google LLC : São Paulo
-
34.6.175.102 : AS396982 Google LLC : Groningen
-
34.7.240.34 : AS396982 Google LLC : Groningen
-
34.76.125.188 : AS396982 Google LLC : Brussels
-
34.79.51.100 : AS396982 Google LLC : Brussels
-
34.86.26.236 : AS396982 Google LLC : Washington
-
34.9.233.65 : AS396982 Google LLC : Council Bluffs
-
34.95.48.207 : AS396982 Google LLC : Montreal
-
35.198.37.200 : AS396982 Google LLC : São Paulo
-
35.203.26.153 : AS396982 Google LLC : Montreal
-
35.221.16.171 : AS396982 Google LLC : Washington
-
35.240.156.31 : AS396982 Google LLC : Singapore
-
35.247.245.80 : AS396982 Google LLC : São Paulo
-
45.134.225.48 : AS213438 ColocaTel Inc. : Amsterdam
-
45.153.34.249 : AS197170 TechTies Inc. : Amsterdam
-
85.11.167.138 : AS197170 TechTies Inc. : Amsterdam
-
93.152.221.34 : AS197170 TechTies Inc. : Frankfurt am Main