35.197.107.68 — observed request history

← Back to my full IP blocklist

I blocked 35.197.107.68. Here are the request paths I found in my retained logs.

203 distinct paths · 210 matching log entries

First retained entry: 2026-10-23T21:15:47.189Z. Last retained entry: 2026-10-24T16:38:42.890Z. All timestamps are UTC.

Where it showed up

• doomo / beacon — 4 log entries
• doomo / joypass-co — 206 log entries

Observed endpoints

Each line shows the path, HTTP method, recorded status codes, and log-entry count. Counts may include duplicate logging and are not necessarily unique requests. “Unknown” means the status was not captured in the normalized entry.

/ | POST | 404,unknown | 8
/.config/gcloud/application_default_credentials.json | GET | unknown | 1
/.git/.env | GET | unknown | 1
/.git/config | GET | unknown | 1
/_profiler/phpinfo | GET | unknown | 1
/actions/.env | GET | unknown | 1
/admin-panel/.env | GET | unknown | 1
/admin/.env | GET | unknown | 1
/admin/phpinfo.php | GET | unknown | 1
/administrator/.env | GET | unknown | 1
/administrator/phpinfo.php | GET | unknown | 1
/angular/.env | GET | unknown | 1
/ansible/.env | GET | unknown | 1
/api/.env | GET | unknown | 1
/api/dev/.env | GET | unknown | 1
/api/staging/.env | GET | unknown | 1
/api/v1/.env | GET | unknown | 1
/api/v2/.env | GET | unknown | 1
/api/v3/.env | GET | unknown | 1
/app/.env | GET | unknown | 1
/application/.env | GET | unknown | 1
/apps/.env | GET | unknown | 1
/assets/.env | GET | unknown | 1
/aws/.env | GET | unknown | 1
/azure/.env | GET | unknown | 1
/backend/.env | GET | unknown | 1
/backup/.env | GET | unknown | 1
/backups/.env | GET | unknown | 1
/beta/.env | GET | unknown | 1
/beta/phpinfo.php | GET | unknown | 1
/bin/.env | GET | unknown | 1
/bootstrap/.env | GET | unknown | 1
/brevo/.env | GET | unknown | 1
/build/.env | GET | unknown | 1
/buildkite/.env | GET | unknown | 1
/bulk/.env | GET | unknown | 1
/cache/.env | GET | unknown | 1
/cakephp/.env | GET | unknown | 1
/campaign/.env | GET | unknown | 1
/cd/.env | GET | unknown | 1
/ci/.env | GET | unknown | 1
/circleci/.env | GET | unknown | 1
/client/.env | GET | unknown | 1
/cloud/.env | GET | unknown | 1
/cms/.env | GET | unknown | 1
/codeigniter/.env | GET | unknown | 1
/config/.env | GET | unknown | 1
/config/app/.env | GET | unknown | 1
/control-panel/.env | GET | unknown | 1
/core/.env | GET | unknown | 1
/core/app/.env | GET | unknown | 1
/core/phpinfo.php | GET | unknown | 1
/cpanel/phpinfo.php | GET | unknown | 1
/crm/.env | GET | unknown | 1
/cron/.env | GET | unknown | 1
/cronlab/.env | GET | unknown | 1
/current/.env | GET | unknown | 1
/dashboard/.env | GET | unknown | 1
/database/.env | GET | unknown | 1
/deploy/.env | GET | unknown | 1
/dev/.env | GET | unknown | 1
/dev/phpinfo.php | GET | unknown | 1
/development/.env | GET | unknown | 1
/dist/.env | GET | unknown | 1
/docker/.env | GET | unknown | 1
/docs/phpinfo.php | GET | unknown | 1
/drupal/.env | GET | unknown | 1
/elasticsearch/.env | GET | unknown | 1
/email/.env | GET | unknown | 1
/en/.env | GET | unknown | 1
/erp/.env | GET | unknown | 1
/exapi/.env | GET | unknown | 1
/express/.env | GET | unknown | 1
/frontend/.env | GET | unknown | 1
/gateway/.env | GET | unknown | 1
/gcp/.env | GET | unknown | 1
/github/.env | GET | unknown | 1
/gitlab/.env | GET | unknown | 1
/graphql/.env | GET | unknown | 1
/hosting/phpinfo.php | GET | unknown | 1
/htdocs/.env | GET | unknown | 1
/htdocs/phpinfo.php | GET | unknown | 1
/html/.env | GET | unknown | 1
/includes/phpinfo.php | GET | unknown | 1
/infrastructure/.env | GET | unknown | 1
/internal/.env | GET | unknown | 1
/jenkins/.env | GET | unknown | 1
/job/.env | GET | unknown | 1
/joomla/.env | GET | unknown | 1
/k8s/.env | GET | unknown | 1
/kafka/.env | GET | unknown | 1
/kubernetes/.env | GET | unknown | 1
/lab/.env | GET | unknown | 1
/laravel/.env | GET | unknown | 1
/laravel5/.env | GET | unknown | 1
/lib/.env | GET | unknown | 1
/live/.env | GET | unknown | 1
/local/.env | GET | unknown | 1
/logs/.env | GET | unknown | 1
/magento/.env | GET | unknown | 1
/mail/.env | GET | unknown | 1
/mail/phpinfo.php | GET | unknown | 1
/mailer/.env | GET | unknown | 1
/mailgun/.env | GET | unknown | 1
/mailing/.env | GET | unknown | 1
/mailjet/.env | GET | unknown | 1
/mandrill/.env | GET | unknown | 1
/microservice/.env | GET | unknown | 1
/mongodb/.env | GET | unknown | 1
/mysql/.env | GET | unknown | 1
/nest/.env | GET | unknown | 1
/newsletter/.env | GET | unknown | 1
/next/.env | GET | unknown | 1
/node/.env | GET | unknown | 1
/notifications/.env | GET | unknown | 1
/notify/.env | GET | unknown | 1
/nuxt/.env | GET | unknown | 1
/old/.env | GET | unknown | 1
/old/phpinfo.php | GET | unknown | 1
/opt/.env | GET | unknown | 1
/panel/.env | GET | unknown | 1
/portal/.env | GET | unknown | 1
/postgres/.env | GET | unknown | 1
/postmark/.env | GET | unknown | 1
/prestashop/.env | GET | unknown | 1
/preview/.env | GET | unknown | 1
/preview/phpinfo.php | GET | unknown | 1
/private/.env | GET | unknown | 1
/prod/.env | GET | unknown | 1
/production/.env | GET | unknown | 1
/project/.env | GET | unknown | 1
/psnlink/.env | GET | unknown | 1
/public/.env | GET | unknown | 1
/public/phpinfo.php | GET | unknown | 1
/public_html/.env | GET | unknown | 1
/public_html/phpinfo.php | GET | unknown | 1
/qa/.env | GET | unknown | 1
/qa/phpinfo.php | GET | unknown | 1
/queue/.env | GET | unknown | 1
/rabbitmq/.env | GET | unknown | 1
/react/.env | GET | unknown | 1
/redis/.env | GET | unknown | 1
/release/.env | GET | unknown | 1
/releases/.env | GET | unknown | 1
/resources/.env | GET | unknown | 1
/rest/.env | GET | unknown | 1
/saas/.env | GET | unknown | 1
/sbin/.env | GET | unknown | 1
/scripts/.env | GET | unknown | 1
/sender/.env | GET | unknown | 1
/sendgrid/.env | GET | unknown | 1
/server/.env | GET | unknown | 1
/service/.env | GET | unknown | 1
/ses/.env | GET | unknown | 1
/shared/.env | GET | unknown | 1
/shop/.env | GET | unknown | 1
/shopify/.env | GET | unknown | 1
/site/.env | GET | unknown | 1
/site/phpinfo.php | GET | unknown | 1
/sitemaps/.env | GET | unknown | 1
/smtp/.env | GET | unknown | 1
/smtp/phpinfo.php | GET | unknown | 1
/sparkpost/.env | GET | unknown | 1
/src/.env | GET | unknown | 1
/stage/.env | GET | unknown | 1
/staging/.env | GET | unknown | 1
/staging/phpinfo.php | GET | unknown | 1
/storage/.env | GET | unknown | 1
/store/.env | GET | unknown | 1
/svelte/.env | GET | unknown | 1
/symfony/.env | GET | unknown | 1
/temp/.env | GET | unknown | 1
/terraform/.env | GET | unknown | 1
/test/.env | GET | unknown | 1
/test/phpinfo.php | GET | unknown | 1
/tmp/.env | GET | unknown | 1
/tmp/phpinfo.php | GET | unknown | 1
/tools/.env | GET | unknown | 1
/transactional/.env | GET | unknown | 1
/travis/.env | GET | unknown | 1
/uat/.env | GET | unknown | 1
/uat/phpinfo.php | GET | unknown | 1
/uploads/.env | GET | unknown | 1
/user-panel/.env | GET | unknown | 1
/v1/.env | GET | unknown | 1
/v2/.env | GET | unknown | 1
/v3/.env | GET | unknown | 1
/var/www/.env | GET | unknown | 1
/var/www/html/.env | GET | unknown | 1
/vendor/.env | GET | unknown | 1
/vite/.env | GET | unknown | 1
/vue/.env | GET | unknown | 1
/web/.env | GET | unknown | 1
/webmail/phpinfo.php | GET | unknown | 1
/webroot/index.php/_environment | GET | unknown | 1
/wordpress/.env | GET | unknown | 1
/worker/.env | GET | unknown | 1
/wp-admin/phpinfo.php | GET | unknown | 1
/wp/.env | GET | unknown | 1
/www/.env | GET | unknown | 1
/www/phpinfo.php | GET | unknown | 1
/yii/.env | GET | unknown | 1
/zend/.env | GET | unknown | 1

About this record

I pulled this list from retained Vitals logs on October 25, 2026 (UTC), with coverage back to October 22. This is the history I can still verify, not a complete lifetime history. Query strings and fragments are omitted. A response code alone does not prove that credentials were exposed.

Source attribution recorded by Vitals: reported_unverified. Reported or forwarded addresses are not independently verified identities. An IP can be shared or reassigned.

Back to my full IP blocklist. I’ll keep this updated as I find more.