← Back to IP report

Log Explorer

Fact drill-down for 195.211.191.170

Risk 24 LOW Scope All time All-time facts 360 In-scope 360 Filtered 360 Seen 2025-04-21 → 2025-05-11

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 269 sfp — 65 scan_velocity — 14 trav — 12 Severity (exact) (any) (none) — 276 40 — 63 34 — 12 10 — 7 24 — 2 Label (exact) (any) observed — 269 sensitive_file — 65 scan_velocity — 14 trav — 12

HTTP facets

Method (exact, case-insensitive) (any) GET — 360 HTTP status (exact) (any) 301 — 198 404 — 126 200 — 36

Snapshot facets

Subnet (exact) (any) 195.211.191.0/24 — 360 ASN (exact) (any) 208949 — 360 Country / Region / City (exact)

(any country) Germany — 360 (any region) Hesse — 360

(any city) Frankfurt am Main — 360

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 269 sfp 65 scan_velocity 14 trav 12

Top labels (facts, in-scope)

observed 269 sensitive_file 65 scan_velocity 14 trav 12

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 8 — total 360 rows

← Prev Next →

#1 2025-05-11 04:31:04 event 15627570 GET 404 bytes 7945

ann base label observed

Request event observed

/.aws/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.aws/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#2 2025-05-11 04:31:04 event 15627568 GET 301 bytes 169

ann base label observed

Request event observed

/.aws/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.aws/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#3 2025-05-11 04:31:04 event 15627567 GET 404 bytes 7945

ann base label observed

Request event observed

/index.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#4 2025-05-11 04:31:03 event 15627566 GET 301 bytes 169

ann base label observed

Request event observed

/index.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#5 2025-05-11 04:31:03 event 15627565 GET 404 bytes 7945

ann base label observed

Request event observed

/karma.conf.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/karma.conf.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#6 2025-05-11 04:31:02 event 15627564 GET 301 bytes 169

ann base label observed

Request event observed

/karma.conf.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/karma.conf.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#7 2025-05-11 04:31:02 event 15627563 GET 404 bytes 7943

ann base label observed

Request event observed

/.AWS_/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.AWS_/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#8 2025-05-11 04:31:02 event 15627562 GET 301 bytes 169

ann base label observed

Request event observed

/.AWS_/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.AWS_/credentials

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#9 2025-05-11 04:31:01 event 15627561 GET 404 bytes 7946

ann base label observed

Request event observed

/contact/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/contact/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#10 2025-05-11 04:31:01 event 15627560 GET 301 bytes 169

ann base label observed

Request event observed

/contact/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/contact/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#11 2025-05-11 04:31:01 event 15627559 GET 404 bytes 7944

ann base label observed

Request event observed

/register/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/register/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#12 2025-05-11 04:31:00 event 15627558 GET 301 bytes 169

ann base label observed

Request event observed

/register/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/register/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#13 2025-05-11 04:31:00 event 15627556 GET 200 bytes 7060

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#14 2025-05-11 04:30:59 event 15627554 GET 404 bytes 7944

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'

More (full fields + snapshot) expand

url

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#15 2025-05-11 04:30:59 event 15627553 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'

More (full fields + snapshot) expand

url

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#16 2025-05-11 04:30:59 event 15627555 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#17 2025-05-11 04:30:59 event 15627554 GET 404 bytes 7944

ann base label observed

Request event observed

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#18 2025-05-11 04:30:59 event 15627553 GET 301 bytes 169

ann base label observed

Request event observed

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#19 2025-05-11 04:30:58 event 15627552 GET 404 bytes 7945

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#20 2025-05-11 04:30:58 event 15627551 GET 301 bytes 169

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#21 2025-05-11 04:30:58 event 15627552 GET 404 bytes 7945

ann base label observed

Request event observed

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#22 2025-05-11 04:30:58 event 15627551 GET 301 bytes 169

ann base label observed

Request event observed

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/shared/config/config.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#23 2025-05-11 04:30:57 event 15627549 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.local'

More (full fields + snapshot) expand

url

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.local'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#24 2025-05-11 04:30:57 event 15627548 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.local'

More (full fields + snapshot) expand

url

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.local'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#25 2025-05-11 04:30:57 event 15627549 GET 301 bytes 169

ann base label observed

Request event observed

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#26 2025-05-11 04:30:57 event 15627548 GET 301 bytes 169

ann base label observed

Request event observed

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.local

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#27 2025-05-11 04:30:56 event 15627547 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

More (full fields + snapshot) expand

url

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#28 2025-05-11 04:30:56 event 15627546 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

More (full fields + snapshot) expand

url

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#29 2025-05-11 04:30:56 event 15627545 GET 404 bytes 7944

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#30 2025-05-11 04:30:56 event 15627545 GET 404 bytes 7944

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:ext_enum

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

scan_velocity

rule

scanv:ext_enum

conf

85.00

details

ext_hits=5; score=5; window=90s; total=22; rpm_equiv=14.7; upm_nonstatic_equiv=6.0; 404=7/22(0.32); ext_hits=5; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Scan-velocity indicator: scanv:ext_enum

details

ext_hits=5; score=5; window=90s; total=22; rpm_equiv=14.7; upm_nonstatic_equiv=6.0; 404=7/22(0.32); ext_hits=5; ua_sig=0; methods=['GET']

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#31 2025-05-11 04:30:56 event 15627545 GET 404 bytes 7944

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=22; rpm_equiv=14.7; upm_nonstatic_equiv=6.0; 404=7/22(0.32); ext_hits=5; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Scan-velocity window summary

details

window=90s; total=22; rpm_equiv=14.7; upm_nonstatic_equiv=6.0; 404=7/22(0.32); ext_hits=5; ua_sig=0; methods=['GET']

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#32 2025-05-11 04:30:56 event 15627547 GET 301 bytes 169

ann base label observed

Request event observed

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#33 2025-05-11 04:30:56 event 15627546 GET 301 bytes 169

ann base label observed

Request event observed

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.production

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#34 2025-05-11 04:30:56 event 15627545 GET 404 bytes 7944

ann base label observed

Request event observed

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#35 2025-05-11 04:30:55 event 15627542 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#36 2025-05-11 04:30:55 event 15627540 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#37 2025-05-11 04:30:55 event 15627542 GET 301 bytes 169

ann base label observed

Request event observed

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#38 2025-05-11 04:30:55 event 15627540 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#39 2025-05-11 04:30:54 event 15627538 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#40 2025-05-11 04:30:54 event 15627538 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#41 2025-05-11 04:30:54 event 15627536 GET 404 bytes 7943

ann base label observed

Request event observed

/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#42 2025-05-11 04:30:54 event 15627534 GET 301 bytes 169

ann base label observed

Request event observed

/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#43 2025-05-11 04:30:53 event 15627532 GET 404 bytes 7944

ann base label observed

Request event observed

/test.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/test.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#44 2025-05-11 04:30:53 event 15627531 GET 301 bytes 169

ann base label observed

Request event observed

/test.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/test.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#45 2025-05-11 04:30:53 event 15627530 GET 404 bytes 7944

ann base label observed

Request event observed

/php_info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/php_info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#46 2025-05-11 04:30:52 event 15627528 GET 301 bytes 169

ann base label observed

Request event observed

/php_info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/php_info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#47 2025-05-11 04:30:52 event 15627527 GET 404 bytes 7945

ann base label observed

Request event observed

/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#48 2025-05-11 04:30:51 event 15627526 GET 301 bytes 169

ann base label observed

Request event observed

/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#49 2025-05-11 04:30:51 event 15627525 GET 404 bytes 7944

ann base label observed

Request event observed

/info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

#50 2025-05-11 04:30:51 event 15627523 GET 301 bytes 169

ann base label observed

Request event observed

/info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/info.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

summary

event observed

details

—

subnet

195.211.191.0/24

asn

208949 — HBING LIMITED

geo

Germany, Hesse, Frankfurt am Main

org

Pitline Ltd

Page 1 of 8

← Prev Next →