- Joined
- Feb 9, 2013
Lol so I just deployed a little project I'm working on and while watching the logs, I got a lot of this:
Like immediately. At first I just thought they must periodically check this cheap VPS IP address I'm using. But that doesn't make sense because I'm hosting a few other projects under different domain names.
Either I screwed up my configuration (possible) or this domain name I'm using (it's not mysitewhatever.net but something similarly nondescript) is already on some list somewhere.
Also this is an important lesson for why you don't do
Code:
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://admin.mysitewhatever.net/manage/env HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://web.mysitewhatever.net/config/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://cdn.mysitewhatever.net/config/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://dev.mysitewhatever.net/backend/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://portal.mysitewhatever.net/.env.save HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://staging.mysitewhatever.net/.env.swp HTTP/1.1" 404 "-" "(Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://static.mysitewhatever.net/backend/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://admin.mysitewhatever.net/admin/env HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://web.mysitewhatever.net/backend/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:58 2026] "GET http://staging.mysitewhatever.net/.env.copy HTTP/1.1" 404 "-" "(Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://cdn.mysitewhatever.net/backend/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://dev.mysitewhatever.net/server/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://portal.mysitewhatever.net/.env~ HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://static.mysitewhatever.net/server/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://cdn.mysitewhatever.net/server/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://admin.mysitewhatever.net/actuator/env/aws HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://web.mysitewhatever.net/server/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://staging.mysitewhatever.net/.env.1 HTTP/1.1" 404 "-" "(Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://dev.mysitewhatever.net/public/.env HTTP/1.1" 404 "-" "(Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36)"
10.0.1.87 [Thu May 7 00:47:59 2026] "GET http://portal.mysitewhatever.net/.env.swp HTTP/1.1" 404 "-" "(Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1)"
Like immediately. At first I just thought they must periodically check this cheap VPS IP address I'm using. But that doesn't make sense because I'm hosting a few other projects under different domain names.
Either I screwed up my configuration (possible) or this domain name I'm using (it's not mysitewhatever.net but something similarly nondescript) is already on some list somewhere.
Also this is an important lesson for why you don't do
COPY . . in your Dockerfile.