Security research

Weekly sensor record

Every week we sum up what bots looked for on digimasi.com. The numbers are as recorded, and the running week is updated daily.

Weekly record

12 October 2026 – 18 October 2026

Running week
bot requests
1,101
source addresses
70
countries
28
login guesses
13

What they looked for

  1. Secret configuration files (.env)697
  2. WordPress172
  3. PHP files97
  4. Code history folder (.git)47
  5. Other configuration files40
  6. Cloud and server keys27
  7. Framework-specific paths13
  8. Admin panels8

Most requested addresses

  1. /.env51
  2. /.env.local27
  3. /.env.backup24
  4. /.env.production23
  5. /.env.bak21
  6. /.env.save20
  7. /wp-login.php20
  8. /.env.dev19
  9. /.env.staging19
  10. /.env.old18

Source networks

  1. Virtualine Technologies407
  2. Google LLC277
  3. TC DATACENTER LIMITED MANAGED IP SPACE81
  4. DigitalOcean, LLC57
  5. TECHOFF SRV LIMITED49
  6. Feo Prest SRL37
  7. Aliyun Computing Co.LTD31
  8. Colocatel Datacenter26
  9. Secure Internet Hong Kong Operations26
  10. Microsoft Corporation20

Source countries

  1. Germany483
  2. Netherlands116
  3. Belgium88
  4. United States82
  5. Poland73
  6. Finland57
  7. Chile40
  8. China31
  9. Singapore25
  10. Italy21

A week runs Monday to Sunday, Jakarta time. Countries and networks are where the servers are, not necessarily where the people are. We do not show IP addresses, passwords, or usernames shaped like an email. Methodology · Attack statistics

Want to know how secure your website is?

We test your website, apps and servers the way a real attacker would, with your written permission, then report what to fix.

Request a quoteSee the pentest service