Environment File Variant Credential Grab for 2026-10-20
Last Updated: 00:00 UTC
Requests for editor backups and copies of .env files (.env~, .env1, .env_copy, .envrc). Scanners try these because a renamed copy often escapes the web server rule that blocks .env itself.
MITRE ATT&CK
Tactic: Credential Access (TA0006)
Technique: T1552.001 — Unsecured Credentials: Credentials In Files
Observed URIs
Attackers by Country
| Belgium | 8 | 25.0% |
| United States | 4 | 12.5% |
| Germany | 4 | 12.5% |
| Switzerland | 3 | 9.4% |
| The Netherlands | 2 | 6.2% |
| Bulgaria | 2 | 6.2% |
| Brazil | 2 | 6.2% |
| France | 1 | 3.1% |
| Canada | 1 | 3.1% |
| Thailand | 1 | 3.1% |
| South Africa | 1 | 3.1% |
| Taiwan | 1 | 3.1% |
| Japan | 1 | 3.1% |
| Lithuania | 1 | 3.1% |
IP Address : ASN : City/Provider
-
104.199.36.53 : AS396982 Google LLC : Brussels
-
130.12.180.117 : AS202412 Omegatech LTD : Amsterdam
-
131.186.2.193 : AS31898 Oracle Corporation : Chicago
-
136.108.239.181 : AS396982 Google LLC : North Charleston
-
170.9.230.144 : AS31898 Oracle Corporation : Chicago
-
185.177.72.24 : AS211590 Bucklog SARL : France
-
195.178.110.223 : AS48090 Techoff Srv Limited : Bulgaria
-
195.178.110.242 : AS48090 Techoff Srv Limited : Bulgaria
-
207.175.194.102 : AS396982 Google LLC : Brussels
-
34.107.108.34 : AS396982 Google LLC : Frankfurt am Main
-
34.118.181.111 : AS396982 Google LLC : Montreal
-
34.134.236.9 : AS396982 Google LLC : Council Bluffs
-
34.15.152.191 : AS396982 Google LLC : Bangkok
-
34.151.234.92 : AS396982 Google LLC : São Paulo
-
34.179.203.23 : AS396982 Google LLC : Frankfurt am Main
-
34.179.222.58 : AS396982 Google LLC : Frankfurt am Main
-
34.185.218.203 : AS396982 Google LLC : Frankfurt am Main
-
34.22.168.4 : AS396982 Google LLC : Brussels
-
34.35.133.208 : AS396982 Google LLC : Johannesburg
-
34.65.125.241 : AS396982 Google LLC : Zurich
-
34.65.152.46 : AS396982 Google LLC : Zurich
-
34.65.170.165 : AS396982 Google LLC : Zurich
-
34.77.137.207 : AS396982 Google LLC : Brussels
-
34.80.192.69 : AS396982 Google LLC : Taipei
-
34.84.170.223 : AS396982 Google LLC : Tokyo
-
35.205.254.119 : AS396982 Google LLC : Brussels
-
35.240.58.49 : AS396982 Google LLC : Brussels
-
35.241.132.20 : AS396982 Google LLC : Brussels
-
35.241.178.74 : AS396982 Google LLC : Brussels
-
45.138.12.68 : unknown : Lithuania
-
54.94.34.121 : AS16509 Amazon.com, Inc. : São Paulo
-
85.11.167.138 : AS197170 TechTies Inc. : Amsterdam