← Back to IP report

Log Explorer

Fact drill-down for 164.90.135.87

Risk 9 LOW Scope All time All-time facts 197 In-scope 197 Filtered 197 Seen 2024-11-10 → 2024-11-10

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 149 sfp — 23 scan_velocity — 19 cred — 3 trav — 2 ua — 1 Severity (exact) (any) (none) — 158 40 — 17 16 — 6 10 — 5 12 — 3 34 — 2 18 — 2 30 — 2 6 — 1 8 — 1 Label (exact) (any) observed — 149 sensitive_file — 23 scan_velocity — 19 cred — 3 trav — 2 ua — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 191 POST — 6 HTTP status (exact) (any) 404 — 145 410 — 40 200 — 6 (none) — 4 302 — 1 403 — 1

Snapshot facets

Subnet (exact) (any) 164.90.135.0/24 — 197 ASN (exact) (any) 14061 — 197 Country / Region / City (exact)

(any country) United States — 197 (any region) New Jersey — 197

(any city) Clifton — 197

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 149 sfp 23 scan_velocity 19 cred 3 trav 2 ua 1

Top labels (facts, in-scope)

observed 149 sensitive_file 23 scan_velocity 19 cred 3 trav 2 ua 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 4 — total 197 rows

← Prev Next →

#1 2024-11-10 21:27:11 event 2213044 POST http —

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#2 2024-11-10 21:27:11 event 2213043 POST 404 bytes 6307

ann base label observed

Request event observed

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#3 2024-11-10 21:27:11 event 2213044 POST http —

ann ua 6 label ua

Request Missing User-Agent header

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#4 2024-11-10 21:27:11 event 2213044 POST http —

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:404_ratio

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

Annotation facts

label

scan_velocity

rule

scanv:404_ratio

conf

75.00

details

404=16/18(0.89); score=5; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=16/18(0.89); ext_hits=3; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

summary

Scan-velocity indicator: scanv:404_ratio

details

404=16/18(0.89); score=5; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=16/18(0.89); ext_hits=3; ua_sig=0; methods=['GET', 'POST']

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#5 2024-11-10 21:27:11 event 2213044 POST http —

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=16/18(0.89); ext_hits=3; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

referer

—

UA

—

summary

Scan-velocity window summary

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=16/18(0.89); ext_hits=3; ua_sig=0; methods=['GET', 'POST']

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#6 2024-11-10 21:27:07 event 2213042 GET 404 bytes 6303

ann base label observed

Request event observed

/_ignition/execute-solution

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_ignition/execute-solution

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#7 2024-11-10 21:27:01 event 2213040 POST 403 bytes 974

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#8 2024-11-10 21:26:58 event 2213039 GET 404 bytes 6305

ann base label observed

Request event observed

/config/settings.ini

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/settings.ini

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#9 2024-11-10 21:26:53 event 2213038 GET 404 bytes 6306

ann base label observed

Request event observed

/config/travis-ci/stages.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/travis-ci/stages.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#10 2024-11-10 21:26:47 event 2213036 GET 404 bytes 6306

ann base label observed

Request event observed

/.circleci/config.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.circleci/config.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#11 2024-11-10 21:26:42 event 2213035 GET 404 bytes 6309

ann base label observed

Request event observed

/app/config.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/config.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#12 2024-11-10 21:26:37 event 2213034 GET 404 bytes 6306

ann base label observed

Request event observed

/src/lambda_function.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/src/lambda_function.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#13 2024-11-10 21:26:31 event 2213033 GET 404 bytes 6308

ann base label observed

Request event observed

/src/index.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/src/index.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#14 2024-11-10 21:26:24 event 2213032 GET 404 bytes 6306

ann base label observed

Request event observed

/config/application.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/application.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#15 2024-11-10 21:26:19 event 2213031 GET 404 bytes 6306

ann base label observed

Request event observed

/public/js/main.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/public/js/main.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#16 2024-11-10 21:26:15 event 2213030 GET 404 bytes 6305

ann base label observed

Request event observed

/test1.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/test1.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#17 2024-11-10 21:26:09 event 2213029 GET 404 bytes 6306

ann base label observed

Request event observed

/server.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/server.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#18 2024-11-10 21:26:03 event 2213028 GET 404 bytes 6304

ann base label observed

Request event observed

/ecosystem.config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/ecosystem.config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#19 2024-11-10 21:25:57 event 2213027 GET 404 bytes 6303

ann base label observed

Request event observed

/src/main/resources/appsettings.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/src/main/resources/appsettings.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#20 2024-11-10 21:25:51 event 2213026 GET 404 bytes 6304

ann base label observed

Request event observed

/config/services.yaml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/services.yaml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#21 2024-11-10 21:25:46 event 2213025 GET 404 bytes 6306

ann base label observed

Request event observed

/src/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/src/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#22 2024-11-10 21:25:40 event 2213024 GET 404 bytes 6303

ann base label observed

Request event observed

/configs/application.ini

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/configs/application.ini

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#23 2024-11-10 21:25:33 event 2213023 GET 404 bytes 6303

ann base label observed

Request event observed

/app_dev.php/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app_dev.php/_profiler/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#24 2024-11-10 21:25:28 event 2213022 GET 200 bytes 895

ann base label observed

Request event observed

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#25 2024-11-10 21:25:28 event 2213022 GET 200 bytes 895

ann cred 8 label cred

Request Auth success (200) on auth endpoint

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

cred

rule

cred:auth_success

conf

70.00

details

Useful for takeover-style correlations when preceded by failures from same source.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Auth success (200) on auth endpoint

details

Useful for takeover-style correlations when preceded by failures from same source.

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#26 2024-11-10 21:25:28 event 2213022 GET 200 bytes 895

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#27 2024-11-10 21:25:28 event 2213022 GET 200 bytes 895

ann cred label cred

Request Auth endpoint request observed

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

cred

rule

cred:auth_hit:admin_login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#28 2024-11-10 21:25:21 event 2213021 GET 302

ann base label observed

Request event observed

/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#29 2024-11-10 21:25:16 event 2213020 GET 404 bytes 6305

ann base label observed

Request event observed

/info

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/info

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#30 2024-11-10 21:25:10 event 2213019 GET 404 bytes 6305

ann base label observed

Request event observed

/app.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#31 2024-11-10 21:25:04 event 2213018 GET 404 bytes 6305

ann base label observed

Request event observed

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#32 2024-11-10 21:25:04 event 2213018 GET 404 bytes 6305

ann scan_velocity 12 label scan_velocity

Request Scan-velocity indicator: scanv:404_ratio

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:404_ratio

conf

75.00

details

404=17/18(0.94); score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=10.0; 404=17/18(0.94); ext_hits=1; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity indicator: scanv:404_ratio

details

404=17/18(0.94); score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=10.0; 404=17/18(0.94); ext_hits=1; ua_sig=0; methods=['GET']

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#33 2024-11-10 21:25:04 event 2213018 GET 404 bytes 6305

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=10.0; 404=17/18(0.94); ext_hits=1; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/index.php/phpinfo

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity window summary

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=10.0; 404=17/18(0.94); ext_hits=1; ua_sig=0; methods=['GET']

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#34 2024-11-10 21:25:00 event 2213017 GET 404 bytes 6303

ann base label observed

Request event observed

/api/config/tsconfig.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/config/tsconfig.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#35 2024-11-10 21:24:54 event 2213016 GET 410 bytes 545

ann base label observed

Request event observed

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#36 2024-11-10 21:24:54 event 2213016 GET 410 bytes 545

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

More (full fields + snapshot) expand

url

/config/.env

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/config/.env'

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#37 2024-11-10 21:24:50 event 2213015 GET 404 bytes 6302

ann base label observed

Request event observed

/config/staging.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/staging.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#38 2024-11-10 21:24:50 event 2213015 GET 404 bytes 6302

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/config/staging.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/config/staging.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#39 2024-11-10 21:24:45 event 2213014 GET 404 bytes 6303

ann base label observed

Request event observed

/config/dev.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/dev.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#40 2024-11-10 21:24:45 event 2213014 GET 404 bytes 6303

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/config/dev.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/config/dev.env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#41 2024-11-10 21:24:41 event 2213013 GET 404 bytes 6306

ann base label observed

Request event observed

/config/settings/local.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/settings/local.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#42 2024-11-10 21:24:34 event 2213012 GET 404 bytes 6306

ann base label observed

Request event observed

/config/prod_settings.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/prod_settings.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#43 2024-11-10 21:24:28 event 2213011 GET 404 bytes 6304

ann base label observed

Request event observed

/config/dev_settings.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/dev_settings.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#44 2024-11-10 21:24:23 event 2213010 GET 404 bytes 6304

ann base label observed

Request event observed

/debug/default

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/debug/default

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#45 2024-11-10 21:24:17 event 2213009 GET 404 bytes 6305

ann base label observed

Request event observed

/config/environments/production.rb

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/environments/production.rb

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#46 2024-11-10 21:24:11 event 2213008 GET 404 bytes 6306

ann base label observed

Request event observed

/app.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app.py

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#47 2024-11-10 21:24:06 event 2213007 GET 404 bytes 6304

ann base label observed

Request event observed

/application-dev.properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/application-dev.properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#48 2024-11-10 21:24:01 event 2213006 GET 404 bytes 6306

ann base label observed

Request event observed

/config/aws.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/aws.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#49 2024-11-10 21:23:55 event 2213005 GET 404 bytes 6306

ann base label observed

Request event observed

/settings.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/settings.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

#50 2024-11-10 21:23:49 event 2213004 GET 404 bytes 6306

ann base label observed

Request event observed

/README.md

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/README.md

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

164.90.135.0/24

asn

14061 — DigitalOcean, LLC

geo

United States, New Jersey, Clifton

org

DigitalOcean, LLC

Page 1 of 4

← Prev Next →