← Back to IP report

Log Explorer

Fact drill-down for 89.248.162.181

Risk 1 LOW Scope All time All-time facts 32 In-scope 32 Filtered 32 Seen 2024-12-19 → 2025-03-10

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 19 ua — 9 trav — 2 sfp — 1 fwprobe — 1 Severity (exact) (any) (none) — 19 10 — 8 28 — 2 34 — 1 6 — 1 26 — 1 Label (exact) (any) observed — 19 ua — 9 trav — 2 fwprobe — 1 sensitive_file — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 26 POST — 6 HTTP status (exact) (any) 404 — 10 200 — 8 400 — 8 301 — 4 (none) — 2

Snapshot facets

Subnet (exact) (any) 89.248.162.0/24 — 32 ASN (exact) (any) 202425 — 32 Country / Region / City (exact)

(any country) The Netherlands — 32 (any region) North Holland — 32

(any city) Amsterdam — 32

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 19 ua 9 trav 2 sfp 1 fwprobe 1

Top labels (facts, in-scope)

observed 19 ua 9 trav 2 fwprobe 1 sensitive_file 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 32 rows

← Prev Next →

# 2025-03-10 17:09:48 event 3391668 GET 200 bytes 7220

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 17:09:48 event 3391668 GET 200 bytes 7220

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 17:09:47 event 3391667 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 17:09:47 event 3391667 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 04:05:45 event 3180349 GET 200 bytes 7223

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 04:05:45 event 3180349 GET 200 bytes 7223

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 04:05:44 event 3180348 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 04:05:44 event 3180348 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 00:34:06 event 3081074 GET 200 bytes 7224

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 00:34:06 event 3081074 GET 200 bytes 7224

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 00:34:05 event 3081073 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-10 00:34:05 event 3081073 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-03-08 00:26:42 event 4087749 POST 301 bytes 169

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:39 event 2525087 GET 200 bytes 7180

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:39 event 2525087 GET 200 bytes 7180

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:35 event 2525086 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:35 event 2525085 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

ua

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:35 event 2525086 GET http —

ann base label observed

Request event observed

/

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 07:48:35 event 2525085 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

python-requests/2.32.3

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

python-requests/2.32.3

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 01:48:11 event 2522498 GET 404 bytes 29098

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 01:48:11 event 2522498 GET 404 bytes 29098

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 01:48:11 event 2522498 GET 404 bytes 29098

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession'

More (full fields + snapshot) expand

url

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession'

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 01:48:11 event 2522498 GET 404 bytes 29098

ann base label observed

Request event observed

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2025-01-07 01:48:11 event 2522498 GET 404 bytes 29098

ann fwprobe 28 label fwprobe

Request Fortinet SSL-VPN / remote login endpoint probe

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

Annotation facts

label

fwprobe

rule

fwprobe:fortinet:remote_login_or_sslvpn

conf

90.00

details

Request path matched a known firewall/VPN/gateway management or portal surface.

More (full fields + snapshot) expand

url

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

referer

-

UA

Python-urllib/3.8

summary

Fortinet SSL-VPN / remote login endpoint probe

details

Request path matched a known firewall/VPN/gateway management or portal surface.

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-23 11:00:03 event 2005197 GET 404 bytes 7979

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-23 11:00:03 event 2005196 GET 404 bytes 7979

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-23 11:00:00 event 2005195 POST 301 bytes 169

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-23 11:00:00 event 2005194 POST 301 bytes 169

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-20 20:00:28 event 2476756 POST 404 bytes 4521

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-20 07:04:46 event 2442695 POST 404 bytes 4522

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-19 09:45:59 event 2298141 GET 404 bytes 4524

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

# 2024-12-19 09:45:56 event 2298140 POST 301 bytes 169

ann base label observed

Request event observed

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/%2577eb%2575i_%2577sma_Http

referer

-

UA

CVE-2023-20198

summary

event observed

details

—

subnet

89.248.162.0/24

asn

202425 — IP Volume inc

geo

The Netherlands, North Holland, Amsterdam

org

—

Page 1 of 1

← Prev Next →