Log Explorer

Fact drill-down for 20.116.219.47

Risk 22 LOW Scope All time All-time facts 160 In-scope 160 Filtered 160 Seen 2023-10-23 → 2023-12-12

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 78 sfp 72 ua 6 scan_velocity 4

Top labels (facts, in-scope)

observed 78 sensitive_file 72 ua 6 scan_velocity 4

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 4 — total 160 rows

← Prev Next →

#1 2023-12-12 08:02:49 event 663292 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

//.env

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#2 2023-12-12 08:02:49 event 663292 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

//.env

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#3 2023-12-12 08:02:49 event 663292 GET 301 bytes 169

ann base label observed

Request event observed

//.env

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#4 2023-12-10 11:34:31 event 671434 GET 301 bytes 169

ann base label observed

Request event observed

//.env

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#5 2023-12-10 11:34:31 event 671433 GET 301 bytes 169

ann base label observed

Request event observed

//.env

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#6 2023-12-10 11:34:31 event 671434 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

//.env

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#7 2023-12-10 11:34:31 event 671433 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

//.env

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#8 2023-12-10 11:34:31 event 671434 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

//.env

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#9 2023-12-10 11:34:31 event 671433 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

//.env

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#10 2023-11-07 08:05:43 event 382920 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#11 2023-11-07 08:05:43 event 382919 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#12 2023-11-07 08:05:43 event 382920 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#13 2023-11-07 08:05:43 event 382919 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#14 2023-11-07 00:22:49 event 380159 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

//.env

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#15 2023-11-07 00:22:49 event 380158 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

//.env

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#16 2023-11-07 00:22:49 event 380159 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

//.env

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#17 2023-11-07 00:22:49 event 380158 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

//.env

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='//.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#18 2023-11-07 00:22:49 event 380159 GET 301 bytes 169

ann base label observed

Request event observed

//.env

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#19 2023-11-07 00:22:49 event 380158 GET 301 bytes 169

ann base label observed

Request event observed

//.env

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

//.env

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#20 2023-10-23 04:15:41 event 240967 GET 301 bytes 169

ann base label observed

Request event observed

/phpinfo.php

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/phpinfo.php

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#21 2023-10-23 04:15:39 event 240966 GET 301 bytes 169

ann base label observed

Request event observed

/info.php

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/info.php

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#22 2023-10-23 04:15:37 event 240965 GET 301 bytes 169

ann base label observed

Request event observed

/_profiler/phpinfo

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_profiler/phpinfo

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#23 2023-10-23 04:15:35 event 240964 GET 301 bytes 169

ann base label observed

Request event observed

/?phpinfo=1

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?phpinfo=1

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#24 2023-10-23 04:15:32 event 240963 GET 301 bytes 169

ann base label observed

Request event observed

/config.json

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.json

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#25 2023-10-23 04:15:30 event 240962 GET 301 bytes 169

ann base label observed

Request event observed

/.json

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.json

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#26 2023-10-23 04:15:26 event 240961 GET 301 bytes 169

ann base label observed

Request event observed

/debug/default/view?panel=config

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/debug/default/view?panel=config

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#27 2023-10-23 04:15:24 event 240960 GET 301 bytes 169

ann base label observed

Request event observed

/frontend_dev.php/$

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/frontend_dev.php/$

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#28 2023-10-23 04:15:18 event 240959 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/rest/.env'

More (full fields + snapshot) expand

url

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/rest/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#29 2023-10-23 04:15:18 event 240958 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/rest/.env'

More (full fields + snapshot) expand

url

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/rest/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#30 2023-10-23 04:15:18 event 240959 POST 301 bytes 169

ann base label observed

Request event observed

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#31 2023-10-23 04:15:18 event 240958 GET 301 bytes 169

ann base label observed

Request event observed

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/rest/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#32 2023-10-23 04:15:13 event 240957 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/app/.env'

More (full fields + snapshot) expand

url

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/app/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#33 2023-10-23 04:15:13 event 240957 POST 301 bytes 169

ann base label observed

Request event observed

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#34 2023-10-23 04:15:12 event 240956 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/app/.env'

More (full fields + snapshot) expand

url

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/app/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#35 2023-10-23 04:15:12 event 240956 GET 301 bytes 169

ann base label observed

Request event observed

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#36 2023-10-23 04:15:08 event 240955 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/laravel/.env'

More (full fields + snapshot) expand

url

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/laravel/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#37 2023-10-23 04:15:08 event 240955 POST 301 bytes 169

ann base label observed

Request event observed

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#38 2023-10-23 04:15:07 event 240954 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/laravel/.env'

More (full fields + snapshot) expand

url

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/laravel/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#39 2023-10-23 04:15:07 event 240954 GET 301 bytes 169

ann base label observed

Request event observed

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/laravel/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#40 2023-10-23 04:15:05 event 240953 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

More (full fields + snapshot) expand

url

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#41 2023-10-23 04:15:05 event 240952 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

More (full fields + snapshot) expand

url

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.production'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#42 2023-10-23 04:15:05 event 240953 POST 301 bytes 169

ann base label observed

Request event observed

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#43 2023-10-23 04:15:05 event 240952 GET 301 bytes 169

ann base label observed

Request event observed

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.production

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#44 2023-10-23 04:15:03 event 240951 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/shared/.env'

More (full fields + snapshot) expand

url

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/shared/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#45 2023-10-23 04:15:03 event 240951 POST 301 bytes 169

ann base label observed

Request event observed

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#46 2023-10-23 04:15:02 event 240950 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/shared/.env'

More (full fields + snapshot) expand

url

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/shared/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#47 2023-10-23 04:15:02 event 240950 GET 301 bytes 169

ann base label observed

Request event observed

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/shared/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#48 2023-10-23 04:14:56 event 240949 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/fedex/.env'

More (full fields + snapshot) expand

url

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/fedex/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#49 2023-10-23 04:14:56 event 240948 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/fedex/.env'

More (full fields + snapshot) expand

url

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/fedex/.env'

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

#50 2023-10-23 04:14:56 event 240949 POST 301 bytes 169

ann base label observed

Request event observed

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/fedex/.env

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0

summary

event observed

details

—

subnet

20.116.219.0/24

asn

8075 — Microsoft Corporation

geo

Canada, Ontario, Toronto

org

Microsoft Azure Cloud (canadacentral)

Log Explorer

Annotated access events

Confirm Action