DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 204.76.203.213
Risk 42 MED Scope All time All-time facts 368 In-scope 368 Filtered 368 Seen 2025-09-21 → 2025-10-12
Reset (all-time)
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base 206 sfp 157 trav 4 bot 1
Top labels (facts, in-scope)
observed 206 sensitive_file 157 trav 4 bot 1
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 8 — total 368 rows
#1 2025-10-12 10:37:20 event 19164283 GET 301 bytes 178
ann base label observed
Request event observed
/?format=json
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/?format=json
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#2 2025-10-12 10:37:20 event 19164281 GET 301 bytes 178
ann base label observed
Request event observed
/reactjs/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:39.0) Gecko/20100101 Firefox/39.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/reactjs/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:39.0) Gecko/20100101 Firefox/39.0
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#3 2025-10-12 10:37:20 event 19164281 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/reactjs/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:39.0) Gecko/20100101 Firefox/39.0
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/reactjs/.env'
More (full fields + snapshot) expand
url
/reactjs/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:39.0) Gecko/20100101 Firefox/39.0
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/reactjs/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#4 2025-10-12 10:37:19 event 19164280 GET 301 bytes 178
ann base label observed
Request event observed
/api/test
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.125 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/test
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.125 Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#5 2025-10-12 10:37:18 event 19164277 GET 301 bytes 178
ann base label observed
Request event observed
/adminapp/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/adminapp/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#6 2025-10-12 10:37:18 event 19164277 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/adminapp/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/adminapp/.env'
More (full fields + snapshot) expand
url
/adminapp/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/adminapp/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#7 2025-10-12 10:37:16 event 19164275 GET 301 bytes 178
ann base label observed
Request event observed
/twilio/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/twilio/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#8 2025-10-12 10:37:16 event 19164275 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/twilio/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/twilio/.env'
More (full fields + snapshot) expand
url
/twilio/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/twilio/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#9 2025-10-12 10:37:15 event 19164274 GET 301 bytes 178
ann base label observed
Request event observed
/tmp/.env.tmp
referer
-
UA
Mozilla/5.0 (Linux; Android 7.1.1; N9137 Build/NMF26V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/tmp/.env.tmp
referer
-
UA
Mozilla/5.0 (Linux; Android 7.1.1; N9137 Build/NMF26V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#10 2025-10-12 10:37:15 event 19164273 GET 301 bytes 178
ann base label observed
Request event observed
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#11 2025-10-12 10:37:15 event 19164272 GET 301 bytes 178
ann base label observed
Request event observed
/src/.env.dev
referer
-
UA
Mozilla/5.0 (Windows NT 5.1; U; Firefox/3.5; en; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.53
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/src/.env.dev
referer
-
UA
Mozilla/5.0 (Windows NT 5.1; U; Firefox/3.5; en; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.53
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#12 2025-10-12 10:37:15 event 19164274 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/tmp/.env.tmp
referer
-
UA
Mozilla/5.0 (Linux; Android 7.1.1; N9137 Build/NMF26V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/tmp/.env.tmp'
More (full fields + snapshot) expand
url
/tmp/.env.tmp
referer
-
UA
Mozilla/5.0 (Linux; Android 7.1.1; N9137 Build/NMF26V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/tmp/.env.tmp'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#13 2025-10-12 10:37:15 event 19164273 GET 301 bytes 178
ann sfp 16 label sensitive_file
Request Probe for backup/editor artifact
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
Annotation facts
label
sensitive_file
rule
sfp:file:backup_artifact
conf
70.00
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/src/.env.bak'
More (full fields + snapshot) expand
url
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
summary
Probe for backup/editor artifact
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/src/.env.bak'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#14 2025-10-12 10:37:15 event 19164273 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/.env.bak'
More (full fields + snapshot) expand
url
/src/.env.bak
referer
-
UA
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; Hotbar 3.0)
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/.env.bak'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#15 2025-10-12 10:37:15 event 19164272 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/src/.env.dev
referer
-
UA
Mozilla/5.0 (Windows NT 5.1; U; Firefox/3.5; en; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.53
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/.env.dev'
More (full fields + snapshot) expand
url
/src/.env.dev
referer
-
UA
Mozilla/5.0 (Windows NT 5.1; U; Firefox/3.5; en; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.53
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/.env.dev'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#16 2025-10-12 10:37:14 event 19164271 GET 301 bytes 178
ann base label observed
Request event observed
/qa/.env.dist
referer
-
UA
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; HPDTDF; .NET4.0…
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/qa/.env.dist
referer
-
UA
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; HPDTDF; .NET4.0C; Tablet PC 2.0; .NET4.0E)
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#17 2025-10-12 10:37:14 event 19164270 GET 301 bytes 178
ann base label observed
Request event observed
/portal/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; LGMP260 Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/portal/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; LGMP260 Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#18 2025-10-12 10:37:14 event 19164271 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/qa/.env.dist
referer
-
UA
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; HPDTDF; .NET4.0…
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/qa/.env.dist'
More (full fields + snapshot) expand
url
/qa/.env.dist
referer
-
UA
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; HPDTDF; .NET4.0C; Tablet PC 2.0; .NET4.0E)
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/qa/.env.dist'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#19 2025-10-12 10:37:14 event 19164270 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/portal/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; LGMP260 Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/portal/.env'
More (full fields + snapshot) expand
url
/portal/.env
referer
-
UA
Mozilla/5.0 (Linux; Android 7.0; LGMP260 Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/portal/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#20 2025-10-12 10:37:13 event 19164269 GET 301 bytes 178
ann base label observed
Request event observed
/uat/env.json
referer
-
UA
Mozilla/5.0(compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/uat/env.json
referer
-
UA
Mozilla/5.0(compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#21 2025-10-12 10:37:13 event 19164268 GET 301 bytes 178
ann base label observed
Request event observed
/admin/.env.js
referer
-
UA
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.12) Gecko/20080214 Firefox/2.0.0.12
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/admin/.env.js
referer
-
UA
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.12) Gecko/20080214 Firefox/2.0.0.12
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#22 2025-10-12 10:37:13 event 19164268 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/admin/.env.js
referer
-
UA
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.12) Gecko/20080214 Firefox/2.0.0.12
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env.js'
More (full fields + snapshot) expand
url
/admin/.env.js
referer
-
UA
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.12) Gecko/20080214 Firefox/2.0.0.12
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env.js'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#23 2025-10-12 10:37:12 event 19164267 GET 301 bytes 178
ann base label observed
Request event observed
/media/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/538.1 (KHTML, like Gecko) TestQt Safari/538.1
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/media/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/538.1 (KHTML, like Gecko) TestQt Safari/538.1
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#24 2025-10-12 10:37:12 event 19164266 GET 301 bytes 178
ann base label observed
Request event observed
/stag/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020518 Ubuntu/9.04 (jaunty) Firefox/3.0.6
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/stag/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020518 Ubuntu/9.04 (jaunty) Firefox/3.0.6
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#25 2025-10-12 10:37:12 event 19164267 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/media/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/538.1 (KHTML, like Gecko) TestQt Safari/538.1
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/media/.env'
More (full fields + snapshot) expand
url
/media/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/538.1 (KHTML, like Gecko) TestQt Safari/538.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/media/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#26 2025-10-12 10:37:12 event 19164266 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/stag/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020518 Ubuntu/9.04 (jaunty) Firefox/3.0.6
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/stag/.env'
More (full fields + snapshot) expand
url
/stag/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020518 Ubuntu/9.04 (jaunty) Firefox/3.0.6
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/stag/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#27 2025-10-12 10:37:11 event 19164265 GET 301 bytes 178
ann base label observed
Request event observed
/projeto/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.207
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/projeto/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.207
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#28 2025-10-12 10:37:11 event 19164264 GET 301 bytes 178
ann base label observed
Request event observed
/.env.json
referer
-
UA
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; de-de) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 Safari/525.28.3
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env.json
referer
-
UA
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; de-de) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 Safari/525.28.3
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#29 2025-10-12 10:37:11 event 19164265 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/projeto/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.207
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/projeto/.env'
More (full fields + snapshot) expand
url
/projeto/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.207
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/projeto/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#30 2025-10-12 10:37:11 event 19164264 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env.json
referer
-
UA
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; de-de) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 Safari/525.28.3
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.json'
More (full fields + snapshot) expand
url
/.env.json
referer
-
UA
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; de-de) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 Safari/525.28.3
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.json'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#31 2025-10-12 10:37:10 event 19164263 GET 301 bytes 178
ann base label observed
Request event observed
/var/www/.env
referer
-
UA
Mozilla/5.0 (Linux; BRAVIA 2015 Build/LMY48E.S243) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36 OPR/28.0.1754.0 OMI/4.4.22.20.E102586-1.136
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/var/www/.env
referer
-
UA
Mozilla/5.0 (Linux; BRAVIA 2015 Build/LMY48E.S243) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36 OPR/28.0.1754.0 OMI/4.4.22.20.E102586-1.136
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#32 2025-10-12 10:37:10 event 19164263 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/var/www/.env
referer
-
UA
Mozilla/5.0 (Linux; BRAVIA 2015 Build/LMY48E.S243) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36 OPR/28.0.1754.0 OMI/4.4.22.20.E102586-1.136
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/var/www/.env'
More (full fields + snapshot) expand
url
/var/www/.env
referer
-
UA
Mozilla/5.0 (Linux; BRAVIA 2015 Build/LMY48E.S243) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36 OPR/28.0.1754.0 OMI/4.4.22.20.E102586-1.136
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/var/www/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#33 2025-10-12 10:37:09 event 19164262 GET 301 bytes 178
ann base label observed
Request event observed
/src/env/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/src/env/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#34 2025-10-12 10:37:09 event 19164262 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/src/env/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/env/.env'
More (full fields + snapshot) expand
url
/src/env/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/src/env/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#35 2025-10-12 10:37:08 event 19164261 GET 301 bytes 178
ann base label observed
Request event observed
/tmp/.env.uat
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.13) Gecko/20060410 Firefox/1.0.8
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/tmp/.env.uat
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.13) Gecko/20060410 Firefox/1.0.8
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#36 2025-10-12 10:37:08 event 19164260 GET 301 bytes 178
ann base label observed
Request event observed
/public_html/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/public_html/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#37 2025-10-12 10:37:08 event 19164261 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/tmp/.env.uat
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.13) Gecko/20060410 Firefox/1.0.8
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/tmp/.env.uat'
More (full fields + snapshot) expand
url
/tmp/.env.uat
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.13) Gecko/20060410 Firefox/1.0.8
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/tmp/.env.uat'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#38 2025-10-12 10:37:08 event 19164260 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/public_html/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/public_html/.env'
More (full fields + snapshot) expand
url
/public_html/.env
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/public_html/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#39 2025-10-12 10:37:07 event 19164259 GET 301 bytes 178
ann base label observed
Request event observed
/panel/.env.2
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/panel/.env.2
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#40 2025-10-12 10:37:07 event 19164259 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/panel/.env.2
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/panel/.env.2'
More (full fields + snapshot) expand
url
/panel/.env.2
referer
-
UA
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/panel/.env.2'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#41 2025-10-12 10:37:06 event 19164258 GET 301 bytes 178
ann base label observed
Request event observed
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20100101 Firefox/12.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20100101 Firefox/12.0
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#42 2025-10-12 10:37:06 event 19164257 GET 301 bytes 178
ann base label observed
Request event observed
/server/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/server/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#43 2025-10-12 10:37:06 event 19164257 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/server/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/server/.env'
More (full fields + snapshot) expand
url
/server/.env
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/server/.env'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#44 2025-10-12 10:37:05 event 19164256 GET 301 bytes 178
ann base label observed
Request event observed
/phpinfo/
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8.1.19) Gecko/20081213 SUSE/2.0.0.19-0.1 Firefox/2.0.0.19
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/phpinfo/
referer
-
UA
Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8.1.19) Gecko/20081213 SUSE/2.0.0.19-0.1 Firefox/2.0.0.19
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#45 2025-10-12 10:37:05 event 19164255 GET 301 bytes 178
ann base label observed
Request event observed
/.env.example
referer
-
UA
Mozilla/5.0 (Linux; U; Android 2.2; en-us; generic Build/Froyo) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env.example
referer
-
UA
Mozilla/5.0 (Linux; U; Android 2.2; en-us; generic Build/Froyo) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#46 2025-10-12 10:37:05 event 19164255 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env.example
referer
-
UA
Mozilla/5.0 (Linux; U; Android 2.2; en-us; generic Build/Froyo) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.example'
More (full fields + snapshot) expand
url
/.env.example
referer
-
UA
Mozilla/5.0 (Linux; U; Android 2.2; en-us; generic Build/Froyo) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.example'
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#47 2025-10-12 10:37:04 event 19164254 GET 301 bytes 178
ann base label observed
Request event observed
/app_dev.php/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; ARM; Trident/6.0; Touch)
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/app_dev.php/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; ARM; Trident/6.0; Touch)
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#48 2025-10-12 10:37:03 event 19164253 GET 301 bytes 178
ann base label observed
Request event observed
/?phpinfo=-1
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36 OPR/41.0.2353.46
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/?phpinfo=-1
referer
-
UA
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36 OPR/41.0.2353.46
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#49 2025-10-12 10:37:02 event 19164252 GET 301 bytes 178
ann base label observed
Request event observed
/admin/.env
referer
-
UA
Mozilla/5.0 (Linux; U; Android 4.4.2; en-gb; SM-T210 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/admin/.env
referer
-
UA
Mozilla/5.0 (Linux; U; Android 4.4.2; en-gb; SM-T210 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
#50 2025-10-12 10:37:02 event 19164251 GET 301 bytes 178
ann base label observed
Request event observed
/api/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/.env
referer
-
UA
Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31
summary
event observed
details
—
subnet
204.76.203.0/24
asn
51396 — Pfcloud UG
geo
The Netherlands, Limburg, Eygelshoven
org
Intelligence Hosting LLC
Page 1 of 8