← Back to IP report

Log Explorer

Fact drill-down for 2.59.254.248

Risk 4 LOW Scope All time All-time facts 50 In-scope 50 Filtered 50 Seen 2023-08-01 → 2023-09-02

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 30 sfp — 10 ua — 10 Severity (exact) (any) (none) — 30 10 — 10 40 — 10 Label (exact) (any) observed — 30 sensitive_file — 10 ua — 10

HTTP facets

Method (exact, case-insensitive) (any) GET — 40 POST — 10 HTTP status (exact) (any) 301 — 25 403 — 15 404 — 10

Snapshot facets

Subnet (exact) (any) 2.59.254.0/24 — 50 ASN (exact) (any) 207083 — 50 Country / Region / City (exact)

(any country) The Netherlands — 50 (any region) North Holland — 50

(any city) Amsterdam — 50

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 30 sfp 10 ua 10

Top labels (facts, in-scope)

observed 30 sensitive_file 10 ua 10

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 50 rows

← Prev Next →

# 2023-09-02 22:40:40 event 317671 GET 404 bytes 179

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:40 event 317670 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:40 event 317671 GET 404 bytes 179

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:40 event 317670 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:38 event 317669 POST 403 bytes 1867

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:38 event 317668 GET 403 bytes 153

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:38 event 317668 GET 403 bytes 153

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:37 event 317667 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:37 event 317666 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-09-02 22:40:37 event 317666 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:44 event 106560 GET 404 bytes 179

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:44 event 106560 GET 404 bytes 179

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:43 event 106559 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:43 event 106558 POST 403 bytes 1867

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:43 event 106559 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:42 event 106557 GET 403 bytes 153

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:42 event 106556 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:42 event 106557 GET 403 bytes 153

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:41 event 106555 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-17 08:57:41 event 106555 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:11 event 69232 GET 404 bytes 179

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:11 event 69231 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:11 event 69232 GET 404 bytes 179

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:11 event 69231 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:10 event 69230 POST 403 bytes 1867

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:09 event 69229 GET 403 bytes 153

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:09 event 69229 GET 403 bytes 153

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:08 event 69228 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:08 event 69227 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 17:50:08 event 69227 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:18 event 68484 GET 404 bytes 179

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:18 event 68484 GET 404 bytes 179

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:17 event 68483 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:17 event 68483 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:16 event 68482 POST 403 bytes 1867

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:15 event 68481 GET 403 bytes 153

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:15 event 68481 GET 403 bytes 153

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:14 event 68480 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:14 event 68479 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-09 08:13:14 event 68479 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:31 event 45644 GET 404 bytes 179

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:31 event 45644 GET 404 bytes 179

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:30 event 45643 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:30 event 45643 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.25.1

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:27 event 45642 POST 403 bytes 1867

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:26 event 45641 GET 403 bytes 153

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:26 event 45641 GET 403 bytes 153

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:25 event 45640 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:24 event 45639 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

# 2023-08-01 13:39:24 event 45639 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30

summary

event observed

details

—

subnet

2.59.254.0/24

asn

207083 — HostSlim B.V.

geo

The Netherlands, North Holland, Amsterdam

org

Bartonet, Inc

Page 1 of 1

← Prev Next →