← Back to IP report

Log Explorer

Fact drill-down for 209.59.140.170

Risk 9 LOW Scope All time All-time facts 115 In-scope 115 Filtered 115 Seen 2023-12-26 → 2023-12-29

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 65 sfp — 30 ua — 20 Severity (exact) (any) (none) — 65 40 — 25 10 — 20 16 — 5 Label (exact) (any) observed — 65 sensitive_file — 30 ua — 20

HTTP facets

Method (exact, case-insensitive) (any) GET — 95 POST — 20 HTTP status (exact) (any) 301 — 65 404 — 20 410 — 20 403 — 10

Snapshot facets

Subnet (exact) (any) 209.59.140.0/24 — 115 ASN (exact) (any) 32244 — 115 Country / Region / City (exact)

(any country) United States — 115 (any region) Michigan — 115

(any city) Lansing — 115

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 65 sfp 30 ua 20

Top labels (facts, in-scope)

observed 65 sensitive_file 30 ua 20

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 3 — total 115 rows

← Prev Next →

#1 2023-12-29 11:12:07 event 742590 GET 404 bytes 3869

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#2 2023-12-29 11:12:07 event 742590 GET 404 bytes 3869

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#3 2023-12-29 11:12:05 event 742589 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#4 2023-12-29 11:12:05 event 742589 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#5 2023-12-29 11:12:04 event 742588 GET 301 bytes 169

ann base label observed

Request event observed

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#6 2023-12-29 11:12:04 event 742587 POST 403 bytes 974

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#7 2023-12-29 11:12:04 event 742588 GET 301 bytes 169

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#8 2023-12-29 11:12:04 event 742588 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#9 2023-12-29 11:12:03 event 742586 GET 410 bytes 545

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#10 2023-12-29 11:12:03 event 742586 GET 410 bytes 545

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#11 2023-12-29 11:12:02 event 742585 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#12 2023-12-29 11:12:02 event 742584 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#13 2023-12-29 11:12:02 event 742584 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#14 2023-12-29 11:12:01 event 742583 GET 404 bytes 3869

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#15 2023-12-29 11:12:01 event 742583 GET 404 bytes 3869

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#16 2023-12-29 11:11:59 event 742582 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#17 2023-12-29 11:11:59 event 742582 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#18 2023-12-29 11:11:58 event 742581 POST 403 bytes 974

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#19 2023-12-29 11:11:57 event 742579 GET 410 bytes 545

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#20 2023-12-29 11:11:57 event 742579 GET 410 bytes 545

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#21 2023-12-29 11:11:56 event 742578 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#22 2023-12-29 11:11:56 event 742577 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#23 2023-12-29 11:11:56 event 742577 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#24 2023-12-29 05:37:18 event 741416 GET 404 bytes 3869

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#25 2023-12-29 05:37:18 event 741416 GET 404 bytes 3869

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#26 2023-12-29 05:37:16 event 741415 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#27 2023-12-29 05:37:16 event 741415 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#28 2023-12-29 05:37:15 event 741414 GET 301 bytes 169

ann base label observed

Request event observed

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#29 2023-12-29 05:37:15 event 741413 POST 403 bytes 974

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#30 2023-12-29 05:37:15 event 741414 GET 301 bytes 169

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#31 2023-12-29 05:37:15 event 741414 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#32 2023-12-29 05:37:14 event 741412 GET 410 bytes 545

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#33 2023-12-29 05:37:14 event 741412 GET 410 bytes 545

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#34 2023-12-29 05:37:13 event 741411 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#35 2023-12-29 05:37:13 event 741410 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#36 2023-12-29 05:37:13 event 741410 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#37 2023-12-29 05:37:12 event 741409 GET 404 bytes 3867

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#38 2023-12-29 05:37:12 event 741409 GET 404 bytes 3867

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#39 2023-12-29 05:37:10 event 741408 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#40 2023-12-29 05:37:10 event 741408 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#41 2023-12-29 05:37:09 event 741407 POST 403 bytes 974

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#42 2023-12-29 05:37:08 event 741406 GET 410 bytes 545

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#43 2023-12-29 05:37:08 event 741405 POST 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#44 2023-12-29 05:37:08 event 741406 GET 410 bytes 545

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#45 2023-12-29 05:37:07 event 741404 GET 301 bytes 169

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#46 2023-12-29 05:37:07 event 741404 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#47 2023-12-28 04:10:51 event 711029 GET 404 bytes 3266

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#48 2023-12-28 04:10:51 event 711029 GET 404 bytes 3266

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#49 2023-12-28 04:10:48 event 711028 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

#50 2023-12-28 04:10:48 event 711028 GET 301 bytes 169

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

python-requests/2.31.0

summary

event observed

details

—

subnet

209.59.140.0/24

asn

32244 — Liquid Web, L.L.C

geo

United States, Michigan, Lansing

org

SourceDNS

Page 1 of 3

← Prev Next →