Exploit patterns
Request paths, user agents and persistence artefacts that participating servers saw probing them in the last 30 days — listed once at least 3 independent servers in 2 networks reported the same pattern. Patterns are shown as reported, escaped; do not click them into your own server.
| Kind | Pattern | servers | hits | last seen |
|---|---|---|---|---|
path | /.env | 3 | 334 | just now |
path | /.git/config | 3 | 210 | 51 min ago |
path | /.env.local | 3 | 103 | 17 min ago |
path | /.env.bak | 3 | 80 | 17 min ago |
path | /.env.backup | 3 | 73 | 8 h ago |
path | /.aws/credentials | 3 | 69 | 51 min ago |
path | /.git/HEAD | 3 | 63 | 51 min ago |
path | /.env.production | 3 | 55 | 51 min ago |
path | /.aws/config | 3 | 49 | 7 h ago |
path | /api/.env | 3 | 48 | 51 min ago |
path | /.env.development | 3 | 47 | 1 d ago |
path | /backend/.env | 3 | 45 | 51 min ago |
path | /.env.old | 3 | 42 | 17 min ago |
path | /.env.dev | 3 | 41 | 17 min ago |
path | /app/.env | 3 | 38 | 51 min ago |
path | /.env.save | 3 | 33 | 1 d ago |
path | /core/.env | 3 | 31 | 51 min ago |
path | /.env.test | 3 | 23 | 1 d ago |
path | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | 3 | 20 | 51 min ago |
path | /.aws/config.json | 3 | 20 | 8 d ago |
path | /.git/logs/HEAD | 3 | 19 | 6 d ago |
path | /.aws/credentials.bak | 3 | 15 | 58 min ago |
path | /%2f%2eenv | 3 | 10 | 51 min ago |
path | /%2egit/%63onfig | 3 | 9 | 51 min ago |
path | /api/.git/config | 3 | 4 | 18 d ago |
path | /lib../.git/config | 3 | 4 | 9 d ago |
path | /.git/info/refs | 3 | 4 | 2 d ago |
path | /.git/hooks/post-checkout | 3 | 3 | 3 h ago |