← Back to IP report

Log Explorer

Fact drill-down for 128.90.177.34

Risk 3 LOW Scope All time All-time facts 22 In-scope 22 Filtered 22 Seen 2024-05-28 → 2024-05-28

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 14 sfp — 4 trav — 2 fwprobe — 1 ua — 1 Severity (exact) (any) (none) — 14 34 — 2 28 — 1 42 — 1 44 — 1 24 — 1 8 — 1 40 — 1 Label (exact) (any) observed — 14 sensitive_file — 4 trav — 2 fwprobe — 1 ua — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 22 HTTP status (exact) (any) 404 — 18 200 — 2 410 — 2

Snapshot facets

Subnet (exact) (any) 128.90.177.0/24 — 22 ASN (exact) (any) 22363 — 22 Country / Region / City (exact)

(any country) Liechtenstein — 22 (any region) Schaan — 22

(any city) Schaan — 22

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 14 sfp 4 trav 2 fwprobe 1 ua 1

Top labels (facts, in-scope)

observed 14 sensitive_file 4 trav 2 fwprobe 1 ua 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 22 rows

← Prev Next →

#1 2024-05-28 07:06:02 event 1229847 GET 404 bytes 19155

ann sfp 44 label sensitive_file

Request Probe for OS credential/secret file

/.bash_history

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

sensitive_file

rule

sfp:file:os_secrets

conf

94.00

details

Request targeted OS credential/secret artifacts (e.g., /etc/passwd, shadow). Snippet='/.bash_history'

More (full fields + snapshot) expand

url

/.bash_history

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Probe for OS credential/secret file

details

Request targeted OS credential/secret artifacts (e.g., /etc/passwd, shadow). Snippet='/.bash_history'

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#2 2024-05-28 07:06:02 event 1229847 GET 404 bytes 19155

ann base label observed

Request event observed

/.bash_history

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.bash_history

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#3 2024-05-28 07:05:56 event 1229846 GET 404 bytes 19155

ann base label observed

Request event observed

/ssl/server.key

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/ssl/server.key

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#4 2024-05-28 07:05:50 event 1229845 GET 404 bytes 19155

ann base label observed

Request event observed

/ssl/key.pem

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/ssl/key.pem

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#5 2024-05-28 07:05:43 event 1229844 GET 404 bytes 19155

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#6 2024-05-28 07:05:43 event 1229844 GET 404 bytes 19155

ann sfp 42 label sensitive_file

Request Probe for SSH private key file

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

sensitive_file

rule

sfp:file:ssh_key

conf

92.00

details

Request targeted an SSH private key filename (high risk). Snippet='/.ssh/id_rsa'

More (full fields + snapshot) expand

url

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Probe for SSH private key file

details

Request targeted an SSH private key filename (high risk). Snippet='/.ssh/id_rsa'

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#7 2024-05-28 07:05:43 event 1229844 GET 404 bytes 19155

ann base label observed

Request event observed

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.ssh/id_rsa

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#8 2024-05-28 07:05:30 event 1229843 GET 404 bytes 19155

ann base label observed

Request event observed

/database.yml

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/database.yml

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#9 2024-05-28 07:05:17 event 1229842 GET 404 bytes 19155

ann base label observed

Request event observed

/manager/html

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/manager/html

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#10 2024-05-28 07:05:02 event 1229841 GET 404 bytes 19155

ann base label observed

Request event observed

/jmx-console

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/jmx-console

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#11 2024-05-28 07:04:42 event 1229840 GET 404 bytes 19155

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/web.config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/web.config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#12 2024-05-28 07:04:42 event 1229840 GET 404 bytes 19155

ann base label observed

Request event observed

/web.config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/web.config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#13 2024-05-28 07:04:19 event 1229839 GET 404 bytes 19155

ann base label observed

Request event observed

/.DS_Store

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.DS_Store

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#14 2024-05-28 07:04:01 event 1229838 GET 410 bytes 143

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/.env'

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#15 2024-05-28 07:04:01 event 1229838 GET 410 bytes 143

ann base label observed

Request event observed

/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#16 2024-05-28 07:03:50 event 1229837 GET 404 bytes 19155

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#17 2024-05-28 07:03:50 event 1229837 GET 404 bytes 19155

ann base label observed

Request event observed

/.git/config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#18 2024-05-28 07:03:33 event 1229836 GET 404 bytes 19155

ann base label observed

Request event observed

/global-protect/login.esp

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/global-protect/login.esp

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#19 2024-05-28 07:03:33 event 1229836 GET 404 bytes 19155

ann fwprobe 28 label fwprobe

Request Palo Alto GlobalProtect / SSL-VPN portal probe

/global-protect/login.esp

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

fwprobe

rule

fwprobe:paloalto:globalprotect_or_sslvpn_esp

conf

90.00

details

Request path matched a known firewall/VPN/gateway management or portal surface.

More (full fields + snapshot) expand

url

/global-protect/login.esp

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

Palo Alto GlobalProtect / SSL-VPN portal probe

details

Request path matched a known firewall/VPN/gateway management or portal surface.

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#20 2024-05-28 07:03:24 event 1229833 GET 404 bytes 19155

ann base label observed

Request event observed

/global-protect/portal/css/login.css

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/global-protect/portal/css/login.css

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#21 2024-05-28 07:03:18 event 1229832 GET 200 bytes 26304

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

Cro

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

Cro

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

#22 2024-05-28 07:03:18 event 1229832 GET 200 bytes 26304

ann base label observed

Request event observed

/

referer

-

UA

Cro

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Cro

summary

event observed

details

—

subnet

128.90.177.0/24

asn

22363 — Powerhouse Management, Inc.

geo

Liechtenstein, Schaan, Schaan

org

Unus, Inc.

Page 1 of 1

← Prev Next →