← Back to IP report
Log Explorer
Fact drill-down for
20.251.160.194
Risk
6
LOW
Scope
All time
All-time facts
54
In-scope
54
Filtered
54
Seen
2023-10-07
→
2023-10-26
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
base — 36
sfp — 18
Severity (exact)
(any)
(none) — 36
40 — 18
Label (exact)
(any)
observed — 36
sensitive_file — 18
HTTP facets
Method (exact, case-insensitive)
(any)
GET — 36
POST — 18
HTTP status (exact)
(any)
301 — 27
403 — 27
Snapshot facets
Subnet (exact)
(any)
20.251.160.0/24 — 54
ASN (exact)
(any)
8075 — 54
Country / Region / City (exact)
(any country)
Norway — 54
(any region)
Viken — 54
(any city)
Lorenskog — 54
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base
36
sfp
18
Top labels (facts, in-scope)
observed
36
sensitive_file
18
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
2
— total
54
rows
← Prev
Next →
#
2023-10-26 19:00:35
event
418511
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-26 19:00:35
event
418510
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-26 19:00:35
event
418510
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-26 19:00:34
event
418509
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-26 19:00:34
event
418508
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-26 19:00:34
event
418508
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:18
event
326529
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:18
event
326530
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:18
event
326529
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:17
event
326527
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:17
event
326528
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-25 01:23:17
event
326527
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:07
event
355343
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:07
event
355342
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:07
event
355342
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:06
event
355340
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:06
event
355339
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-19 05:11:06
event
355339
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:12
event
267601
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:11
event
267600
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:11
event
267600
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:11
event
267599
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:10
event
267598
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-17 11:40:10
event
267598
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345335
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345334
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345333
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345332
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345334
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:12
event
345332
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345331
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345330
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345329
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345328
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345330
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-14 02:06:11
event
345328
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:27
event
298369
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:27
event
298368
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:27
event
298368
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:26
event
298367
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:26
event
298366
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-12 08:32:26
event
298366
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:46
event
338392
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:46
event
338391
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:46
event
338391
GET
403
bytes
555
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:45
event
338390
POST
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:45
event
338389
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-08 19:42:45
event
338389
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-07 01:56:57
event
334952
POST
403
bytes
1867
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
#
2023-10-07 01:56:56
event
334951
GET
403
bytes
555
ann
base
label
observed
Request
event observed
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
20.251.160.0/24
asn
8075 — Microsoft Corporation
geo
Norway, Viken, Lorenskog
org
Microsoft Azure Cloud (norwaye)
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?
