← Back to IP report
Log Explorer
Fact drill-down for
196.251.85.66
Risk
5
LOW
Scope
All time
All-time facts
30
In-scope
30
Filtered
30
Seen
2025-06-19
→
2025-06-21
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
sfp — 16
base — 14
Severity (exact)
(any)
40 — 14
(none) — 14
16 — 2
Label (exact)
(any)
sensitive_file — 16
observed — 14
HTTP facets
Method (exact, case-insensitive)
(any)
GET — 30
HTTP status (exact)
(any)
301 — 16
404 — 14
Snapshot facets
Subnet (exact)
(any)
196.251.85.0/24 — 30
ASN (exact)
(any)
(none) — 30
Country / Region / City (exact)
(any country)
The Netherlands — 30
(any region)
North Holland — 30
(any city)
Amsterdam — 30
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
sfp
16
base
14
Top labels (facts, in-scope)
sensitive_file
16
observed
14
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
1
— total
30
rows
← Prev
Next →
#
1
2025-06-21 03:24:53
event
8677729
GET
404
bytes
7946
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/shop/.env
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/shop/.env'
More (full fields + snapshot)
expand
url
/shop/.env
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/shop/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
2
2025-06-21 03:24:53
event
8677729
GET
404
bytes
7946
ann
base
label
observed
Request
event observed
/shop/.env
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/shop/.env
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
3
2025-06-20 22:25:49
event
8595662
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/shop/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/shop/.env'
More (full fields + snapshot)
expand
url
/shop/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/shop/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
4
2025-06-20 22:25:49
event
8595662
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/shop/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/shop/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
5
2025-06-20 20:20:52
event
8577115
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
6
2025-06-20 20:20:52
event
8577113
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
7
2025-06-20 20:20:52
event
8577115
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
8
2025-06-20 20:20:52
event
8577113
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
9
2025-06-20 15:39:29
event
8465103
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.dev
referer
-
UA
Mozilla/5.0 (Linux; Android 5.1.1; SM-E700H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Linux; Android 5.1.1; SM-E700H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.dev'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
10
2025-06-20 15:39:29
event
8465103
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.env.dev
referer
-
UA
Mozilla/5.0 (Linux; Android 5.1.1; SM-E700H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.dev
referer
-
UA
Mozilla/5.0 (Linux; Android 5.1.1; SM-E700H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
11
2025-06-20 13:38:07
event
8430303
GET
301
bytes
178
ann
sfp
16
label
sensitive_file
Request
Probe for backup/editor artifact
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
Annotation
facts
label
sensitive_file
rule
sfp:file:backup_artifact
conf
70.00
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.backup'
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
summary
Probe for backup/editor artifact
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.backup'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
12
2025-06-20 13:38:07
event
8430303
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.backup'
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.backup'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
13
2025-06-20 13:38:07
event
8430303
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
14
2025-06-20 08:59:36
event
8323263
GET
301
bytes
178
ann
sfp
16
label
sensitive_file
Request
Probe for backup/editor artifact
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:backup_artifact
conf
70.00
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.backup'
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
summary
Probe for backup/editor artifact
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.backup'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
15
2025-06-20 08:59:36
event
8323263
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.backup'
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.backup'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
16
2025-06-20 08:59:36
event
8323263
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.backup
referer
-
UA
Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
17
2025-06-20 06:51:39
event
8269695
GET
404
bytes
7947
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.docker/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.docker/.env'
More (full fields + snapshot)
expand
url
/.docker/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.docker/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
18
2025-06-20 06:51:39
event
8269695
GET
404
bytes
7947
ann
base
label
observed
Request
event observed
/.docker/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.docker/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
19
2025-06-20 02:01:31
event
8186221
GET
404
bytes
7945
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.docker/.env
referer
-
UA
Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.docker/.env'
More (full fields + snapshot)
expand
url
/.docker/.env
referer
-
UA
Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.docker/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
20
2025-06-20 02:01:31
event
8186221
GET
404
bytes
7945
ann
base
label
observed
Request
event observed
/.docker/.env
referer
-
UA
Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.docker/.env
referer
-
UA
Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
21
2025-06-19 23:50:35
event
8090996
GET
301
bytes
178
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b6pre) Gecko/20100907 Firefox/4.0b6pre Camino/2.2a1pre
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b6pre) Gecko/20100907 Firefox/4.0b6pre Camino/2.2a1pre
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
22
2025-06-19 23:50:35
event
8090996
GET
301
bytes
178
ann
base
label
observed
Request
event observed
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b6pre) Gecko/20100907 Firefox/4.0b6pre Camino/2.2a1pre
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b6pre) Gecko/20100907 Firefox/4.0b6pre Camino/2.2a1pre
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
23
2025-06-19 23:50:29
event
8090991
GET
404
bytes
7942
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
24
2025-06-19 23:50:29
event
8090991
GET
404
bytes
7942
ann
base
label
observed
Request
event observed
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
25
2025-06-19 19:01:26
event
7696143
GET
404
bytes
7948
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.36 Safari/535.7
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.36 Safari/535.7
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.c9/metadata/environment/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
26
2025-06-19 19:01:26
event
7696143
GET
404
bytes
7948
ann
base
label
observed
Request
event observed
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.36 Safari/535.7
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.c9/metadata/environment/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.36 Safari/535.7
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
27
2025-06-19 17:05:33
event
7284837
GET
404
bytes
7945
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/_static/.env'
More (full fields + snapshot)
expand
url
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/_static/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
28
2025-06-19 17:05:33
event
7284836
GET
404
bytes
7945
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/_static/.env'
More (full fields + snapshot)
expand
url
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/_static/.env'
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
29
2025-06-19 17:05:33
event
7284837
GET
404
bytes
7945
ann
base
label
observed
Request
event observed
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
#
30
2025-06-19 17:05:33
event
7284836
GET
404
bytes
7945
ann
base
label
observed
Request
event observed
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/_static/.env
referer
-
UA
SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
summary
event observed
details
—
subnet
196.251.85.0/24
asn
—
geo
The Netherlands, North Holland, Amsterdam
org
4445 Corporation
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?
