The suspicious traffic in your logs, which is attempting to access .env files, is a common probing technique for sensitive information. Blocking */* and /* URL patterns at the Nginx level is not effective because the malicious requests are targeting ...