← Back to IP report
Log Explorer
Fact drill-down for
92.118.39.228
Risk
7
LOW
Scope
All time
All-time facts
174
In-scope
174
Filtered
174
Seen
2025-01-26
→
2025-03-19
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
base — 130
sfp — 20
ua — 16
cred — 6
scan_velocity — 2
Severity (exact)
(any)
(none) — 133
40 — 18
6 — 14
10 — 5
12 — 2
16 — 2
Label (exact)
(any)
observed — 130
sensitive_file — 20
ua — 16
cred — 6
scan_velocity — 2
HTTP facets
Method (exact, case-insensitive)
(any)
GET — 172
POST — 2
HTTP status (exact)
(any)
301 — 68
404 — 32
(none) — 28
200 — 24
499 — 20
403 — 2
Snapshot facets
Subnet (exact)
(any)
92.118.39.0/24 — 174
ASN (exact)
(any)
47890 — 174
Country / Region / City (exact)
(any country)
The Netherlands — 174
(any region)
North Holland — 174
(any city)
Amsterdam — 174
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base
130
sfp
20
ua
16
cred
6
scan_velocity
2
Top labels (facts, in-scope)
observed
130
sensitive_file
20
ua
16
cred
6
scan_velocity
2
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
4
— total
174
rows
← Prev
Next →
#
1
2025-03-19 03:32:50
event
4436642
POST
403
bytes
974
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
2
2025-03-19 03:32:50
event
4436641
GET
404
bytes
7901
ann
base
label
observed
Request
event observed
/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
3
2025-03-19 03:32:50
event
4436640
POST
403
bytes
974
ann
base
label
observed
Request
event observed
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
4
2025-03-19 03:32:50
event
4436639
GET
404
bytes
7901
ann
base
label
observed
Request
event observed
/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/_profiler/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
5
2025-03-19 03:32:49
event
4436638
GET
404
bytes
7901
ann
base
label
observed
Request
event observed
/php_info.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/php_info.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
6
2025-03-19 03:32:49
event
4436637
GET
404
bytes
7902
ann
base
label
observed
Request
event observed
/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
7
2025-03-19 03:32:49
event
4436636
GET
404
bytes
7901
ann
base
label
observed
Request
event observed
/php_info.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/php_info.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
8
2025-03-19 03:32:49
event
4436635
GET
404
bytes
7902
ann
base
label
observed
Request
event observed
/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/phpinfo
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
9
2025-03-19 03:32:48
event
4436633
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/application/.env'
More (full fields + snapshot)
expand
url
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/application/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
10
2025-03-19 03:32:48
event
4436631
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/application/.env'
More (full fields + snapshot)
expand
url
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/application/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
11
2025-03-19 03:32:48
event
4436634
GET
404
bytes
7898
ann
base
label
observed
Request
event observed
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
12
2025-03-19 03:32:48
event
4436633
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
13
2025-03-19 03:32:48
event
4436632
GET
404
bytes
7898
ann
base
label
observed
Request
event observed
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/phpinfo.php
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
14
2025-03-19 03:32:48
event
4436631
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/application/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
15
2025-03-19 03:32:47
event
4436630
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/dev/.env'
More (full fields + snapshot)
expand
url
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/dev/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
16
2025-03-19 03:32:47
event
4436629
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env'
More (full fields + snapshot)
expand
url
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
17
2025-03-19 03:32:47
event
4436628
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/dev/.env'
More (full fields + snapshot)
expand
url
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/dev/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
18
2025-03-19 03:32:47
event
4436627
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env'
More (full fields + snapshot)
expand
url
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/admin/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
19
2025-03-19 03:32:47
event
4436630
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
20
2025-03-19 03:32:47
event
4436629
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
21
2025-03-19 03:32:47
event
4436628
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/dev/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
22
2025-03-19 03:32:47
event
4436627
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/admin/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
23
2025-03-19 03:32:46
event
4436626
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/local/.env'
More (full fields + snapshot)
expand
url
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/local/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
24
2025-03-19 03:32:46
event
4436625
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/login/.env'
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/login/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
25
2025-03-19 03:32:46
event
4436624
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/local/.env'
More (full fields + snapshot)
expand
url
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/local/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
26
2025-03-19 03:32:46
event
4436623
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/login/.env'
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/login/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
27
2025-03-19 03:32:46
event
4436626
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
28
2025-03-19 03:32:46
event
4436625
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
29
2025-03-19 03:32:46
event
4436624
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/local/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
30
2025-03-19 03:32:46
event
4436623
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
31
2025-03-19 03:32:46
event
4436625
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth redirect (301) on auth endpoint
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:auth_redirect
conf
72.00
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth redirect (301) on auth endpoint
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
32
2025-03-19 03:32:46
event
4436625
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth request appears to use an automation-oriented user agent
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
33
2025-03-19 03:32:46
event
4436625
GET
301
bytes
169
ann
cred
label
cred
Request
Auth endpoint request observed
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:auth_hit:login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
34
2025-03-19 03:32:46
event
4436623
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth redirect (301) on auth endpoint
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:auth_redirect
conf
72.00
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth redirect (301) on auth endpoint
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
35
2025-03-19 03:32:46
event
4436623
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth request appears to use an automation-oriented user agent
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
36
2025-03-19 03:32:46
event
4436623
GET
301
bytes
169
ann
cred
label
cred
Request
Auth endpoint request observed
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
cred
rule
cred:auth_hit:login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot)
expand
url
/login/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
37
2025-03-19 03:32:45
event
4436622
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'
More (full fields + snapshot)
expand
url
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
38
2025-03-19 03:32:45
event
4436621
GET
301
bytes
169
ann
sfp
16
label
sensitive_file
Request
Probe for backup/editor artifact
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:backup_artifact
conf
70.00
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.save'
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for backup/editor artifact
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.save'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
39
2025-03-19 03:32:45
event
4436621
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.save'
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.save'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
40
2025-03-19 03:32:45
event
4436619
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'
More (full fields + snapshot)
expand
url
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
41
2025-03-19 03:32:45
event
4436618
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'
More (full fields + snapshot)
expand
url
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
42
2025-03-19 03:32:45
event
4436617
GET
301
bytes
169
ann
sfp
16
label
sensitive_file
Request
Probe for backup/editor artifact
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:backup_artifact
conf
70.00
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.save'
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for backup/editor artifact
details
Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.save'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
43
2025-03-19 03:32:45
event
4436617
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.save'
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env.save'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
44
2025-03-19 03:32:45
event
4436615
GET
301
bytes
169
ann
sfp
40
label
sensitive_file
Request
Probe for environment/secret file (.env)
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'
More (full fields + snapshot)
expand
url
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/api/.env'
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
45
2025-03-19 03:32:45
event
4436622
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
46
2025-03-19 03:32:45
event
4436621
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
47
2025-03-19 03:32:45
event
4436619
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
48
2025-03-19 03:32:45
event
4436618
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.prod
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
49
2025-03-19 03:32:45
event
4436617
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.env.save
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
#
50
2025-03-19 03:32:45
event
4436615
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/api/.env
referer
-
UA
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
summary
event observed
details
—
subnet
92.118.39.0/24
asn
47890 — UNMANAGED LTD
geo
The Netherlands, North Holland, Amsterdam
org
Pptechnology Limited
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?
