Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The suspicious traffic in your logs, which is attempting to access .env files, is a common probing technique for sensitive information. Blocking */* and /* URL patterns at the Nginx level is not effective because the malicious requests are targeting ...