← Back to IP report

Log Explorer

Fact drill-down for 85.203.15.144

Risk 2 LOW Scope All time All-time facts 20 In-scope 20 Filtered 20 Seen 2025-05-11 → 2025-05-11

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 13 sfp — 6 trav — 1 Severity (exact) (any) (none) — 13 40 — 5 34 — 1 16 — 1 Label (exact) (any) observed — 13 sensitive_file — 6 trav — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 18 POST — 2 HTTP status (exact) (any) 301 — 13 404 — 7

Snapshot facets

Subnet (exact) (any) 85.203.15.0/24 — 20 ASN (exact) (any) 62240 — 20 Country / Region / City (exact)

(any country) Germany — 20 (any region) Hesse — 20

(any city) Frankfurt am Main — 20

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 13 sfp 6 trav 1

Top labels (facts, in-scope)

observed 13 sensitive_file 6 trav 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 20 rows

← Prev Next →

#1 2025-05-11 23:00:39 event 15904774 GET 301 bytes 169

ann base label observed

Request event observed

/composer.lock%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/composer.lock%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#2 2025-05-11 22:59:57 event 15904669 GET 301 bytes 169

ann base label observed

Request event observed

/storage/framework/cache/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/storage/framework/cache/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#3 2025-05-11 22:59:11 event 15904584 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/backend/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/backend/.env'

More (full fields + snapshot) expand

url

/backend/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/backend/.env'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#4 2025-05-11 22:59:11 event 15904584 GET 301 bytes 169

ann base label observed

Request event observed

/backend/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/backend/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#5 2025-05-11 22:58:53 event 15904543 GET 301 bytes 169

ann base label observed

Request event observed

/database/migrations/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/database/migrations/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#6 2025-05-11 22:57:28 event 15904306 GET 301 bytes 169

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.env.bak'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#7 2025-05-11 22:57:28 event 15904306 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.bak'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#8 2025-05-11 22:57:28 event 15904306 GET 301 bytes 169

ann base label observed

Request event observed

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.bak

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#9 2025-05-11 22:56:29 event 15904144 GET 404 bytes 28510

ann base label observed

Request event observed

/env.prod.js

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/env.prod.js

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#10 2025-05-11 22:56:28 event 15904142 GET 404 bytes 28510

ann base label observed

Request event observed

/env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#11 2025-05-11 22:56:01 event 15904076 GET 404 bytes 28510

ann base label observed

Request event observed

/config.development.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.development.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#12 2025-05-11 22:54:58 event 15903920 GET 404 bytes 28510

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/client/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/client/.env'

More (full fields + snapshot) expand

url

/client/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/client/.env'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#13 2025-05-11 22:54:58 event 15903920 GET 404 bytes 28510

ann base label observed

Request event observed

/client/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/client/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#14 2025-05-11 22:54:09 event 15903773 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env.prod

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'

More (full fields + snapshot) expand

url

/.env.prod

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env.prod'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#15 2025-05-11 22:54:09 event 15903773 GET 301 bytes 169

ann base label observed

Request event observed

/.env.prod

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env.prod

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#16 2025-05-11 22:53:46 event 15903719 POST 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/wp-admin/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/wp-admin/.env'

More (full fields + snapshot) expand

url

/wp-admin/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/wp-admin/.env'

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#17 2025-05-11 22:53:46 event 15903719 POST 301 bytes 169

ann base label observed

Request event observed

/wp-admin/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-admin/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#18 2025-05-11 22:53:26 event 15903675 GET 404 bytes 28510

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/sendgrid.env

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/sendgrid.env

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#19 2025-05-11 22:53:26 event 15903675 GET 404 bytes 28510

ann base label observed

Request event observed

/sendgrid.env

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sendgrid.env

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

#20 2025-05-11 22:49:57 event 15903266 GET 301 bytes 169

ann base label observed

Request event observed

/.env%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

85.203.15.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Frankfurt

Page 1 of 1

← Prev Next →