Log Explorer

Fact drill-down for 170.39.218.12

Risk 36 MED Scope All time All-time facts 495 In-scope 495 Filtered 495 Seen 2025-03-23 → 2025-03-23

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 294 sfp 95 trav 43 scan_velocity 34 ref 16 ua 13

Top labels (facts, in-scope)

observed 294 sensitive_file 95 trav 43 scan_velocity 34 ref 16 ua 13

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 10 — total 495 rows

← Prev Next →

#1 2025-03-23 02:36:49 event 6487662 GET 200 bytes 6679

ann base label observed

Request event observed

/static/js/app/godai.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/app/godai.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#2 2025-03-23 02:36:49 event 6487661 GET 200 bytes 6004

ann base label observed

Request event observed

/static/js/app/vendors/tweenjs/tween.umd.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/app/vendors/tweenjs/tween.umd.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#3 2025-03-23 02:36:49 event 6487660 GET 200 bytes 681

ann base label observed

Request event observed

/static/js/app/vendors/uuid/uuidv4.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/app/vendors/uuid/uuidv4.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#4 2025-03-23 02:36:49 event 6487659 GET 200 bytes 7505

ann base label observed

Request event observed

/static/js/app/vendors/underscore/underscore-min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/app/vendors/underscore/underscore-min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#5 2025-03-23 02:36:20 event 6487658 GET 200 bytes 67957

ann base label observed

Request event observed

/static/js/app/vendors/jquery-ui/jquery-ui.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/app/vendors/jquery-ui/jquery-ui.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#6 2025-03-23 02:36:19 event 6487657 GET 200 bytes 30426

ann base label observed

Request event observed

/static/vendor/jquery/jquery.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/vendor/jquery/jquery.min.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#7 2025-03-23 02:36:19 event 6487656 GET 200 bytes 322

ann base label observed

Request event observed

/static/js/customAlert.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/customAlert.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#8 2025-03-23 02:36:07 event 6487655 GET 200 bytes 1824

ann base label observed

Request event observed

/static/blog/js/search.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/blog/js/search.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#9 2025-03-23 02:36:06 event 6487654 GET 200 bytes 878

ann base label observed

Request event observed

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#10 2025-03-23 02:36:06 event 6487654 GET 200 bytes 878

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

70.00

details

rpm_equiv=41.3; score=1; window=90s; total=62; rpm_equiv=41.3; upm_nonstatic_equiv=0.7; 404=0/62(0.00); ext_hits=0; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=41.3; score=1; window=90s; total=62; rpm_equiv=41.3; upm_nonstatic_equiv=0.7; 404=0/62(0.00); ext_hits=0; ua_sig=0; methods=['GET']

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#11 2025-03-23 02:36:06 event 6487654 GET 200 bytes 878

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=62; rpm_equiv=41.3; upm_nonstatic_equiv=0.7; 404=0/62(0.00); ext_hits=0; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/static/js/cloud_animation.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Scan-velocity window summary

details

window=90s; total=62; rpm_equiv=41.3; upm_nonstatic_equiv=0.7; 404=0/62(0.00); ext_hits=0; ua_sig=0; methods=['GET']

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#12 2025-03-23 02:35:53 event 6487653 GET 200 bytes 11178

ann base label observed

Request event observed

/static/js/prism.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/js/prism.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#13 2025-03-23 02:35:52 event 6487652 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=file:///var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#14 2025-03-23 02:35:52 event 6487651 GET 200 bytes 7190

ann base label observed

Request event observed

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#15 2025-03-23 02:35:52 event 6487650 GET 200 bytes 7191

ann base label observed

Request event observed

/?redirect=file:///var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#16 2025-03-23 02:35:52 event 6487651 GET 200 bytes 7190

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=file:///var/www/html/wp-config.php'

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=file:///var/www/html/wp-config.php'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#17 2025-03-23 02:35:52 event 6487652 GET 200 bytes 7188

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#18 2025-03-23 02:35:52 event 6487651 GET 200 bytes 7190

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#19 2025-03-23 02:35:52 event 6487651 GET 200 bytes 7190

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#20 2025-03-23 02:35:52 event 6487650 GET 200 bytes 7191

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#21 2025-03-23 02:35:51 event 6487649 GET 200 bytes 7191

ann base label observed

Request event observed

/?redirect=file:///var/www/html/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#22 2025-03-23 02:35:51 event 6487648 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#23 2025-03-23 02:35:51 event 6487647 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=http://169.254.169.254/latest/user-data

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/user-data

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#24 2025-03-23 02:35:51 event 6487646 GET 200 bytes 7190

ann base label observed

Request event observed

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/admin-role

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/admin-role

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#25 2025-03-23 02:35:51 event 6487648 GET 200 bytes 7189

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/?redirect=file:///var/www/html/.env'

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/?redirect=file:///var/www/html/.env'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#26 2025-03-23 02:35:51 event 6487649 GET 200 bytes 7191

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#27 2025-03-23 02:35:51 event 6487648 GET 200 bytes 7189

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

More (full fields + snapshot) expand

url

/?redirect=file:///var/www/html/.env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#28 2025-03-23 02:35:51 event 6487647 GET 200 bytes 7189

ann ref 9 label ref

Request Open-redirect style parameter points to an external URL

/?redirect=http://169.254.169.254/latest/user-data

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

ref

rule

ref:open_redirect_param

conf

85.00

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/user-data

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Open-redirect style parameter points to an external URL

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#29 2025-03-23 02:35:51 event 6487646 GET 200 bytes 7190

ann ref 9 label ref

Request Open-redirect style parameter points to an external URL

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/admin-role

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

ref

rule

ref:open_redirect_param

conf

85.00

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/admin-role

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Open-redirect style parameter points to an external URL

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#30 2025-03-23 02:35:50 event 6487645 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#31 2025-03-23 02:35:50 event 6487644 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=http://169.254.169.254/latest/meta-data/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#32 2025-03-23 02:35:50 event 6487643 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=/var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/.htaccess

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#33 2025-03-23 02:35:50 event 6487642 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#34 2025-03-23 02:35:50 event 6487642 GET 200 bytes 7189

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/config.php'

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/config.php'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#35 2025-03-23 02:35:50 event 6487645 GET 200 bytes 7188

ann ref 9 label ref

Request Open-redirect style parameter points to an external URL

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

ref

rule

ref:open_redirect_param

conf

85.00

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Open-redirect style parameter points to an external URL

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#36 2025-03-23 02:35:50 event 6487644 GET 200 bytes 7188

ann ref 9 label ref

Request Open-redirect style parameter points to an external URL

/?redirect=http://169.254.169.254/latest/meta-data/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

ref

rule

ref:open_redirect_param

conf

85.00

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

More (full fields + snapshot) expand

url

/?redirect=http://169.254.169.254/latest/meta-data/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Open-redirect style parameter points to an external URL

details

A redirect-capable query parameter contains an absolute (external) URL. This is commonly used in phishing chains and open-redirect probing.

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#37 2025-03-23 02:35:49 event 6487641 GET 200 bytes 7190

ann base label observed

Request event observed

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#38 2025-03-23 02:35:49 event 6487640 GET 200 bytes 7190

ann base label observed

Request event observed

/?redirect=/config/database.yml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/config/database.yml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#39 2025-03-23 02:35:49 event 6487639 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=/var/www/html/settings.py

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/settings.py

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#40 2025-03-23 02:35:49 event 6487638 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=/var/www/html/config.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#41 2025-03-23 02:35:49 event 6487641 GET 200 bytes 7190

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/wp-config.php'

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/wp-config.php'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#42 2025-03-23 02:35:49 event 6487639 GET 200 bytes 7189

ann sfp 30 label sensitive_file

Request Probe for web/app configuration

/?redirect=/var/www/html/settings.py

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:web_config

conf

85.00

details

Request targeted common web/app configuration filenames. Snippet='/?redirect=/var/www/html/settings.py'

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/settings.py

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for web/app configuration

details

Request targeted common web/app configuration filenames. Snippet='/?redirect=/var/www/html/settings.py'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#43 2025-03-23 02:35:49 event 6487641 GET 200 bytes 7190

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Path traversal / LFI indicator detected

details

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#44 2025-03-23 02:35:34 event 6487637 GET 200 bytes 7187

ann base label observed

Request event observed

/?redirect=/var/www/html/settings.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/settings.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#45 2025-03-23 02:35:33 event 6487636 GET 200 bytes 7193

ann base label observed

Request event observed

/?redirect=/var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/settings.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#46 2025-03-23 02:35:33 event 6487635 GET 200 bytes 7189

ann base label observed

Request event observed

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#47 2025-03-23 02:35:33 event 6487635 GET 200 bytes 7189

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/config.php'

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/?redirect=/var/www/html/config.php'

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#48 2025-03-23 02:35:32 event 6487634 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=/var/www/html/config.yml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.yml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#49 2025-03-23 02:35:32 event 6487633 GET 200 bytes 7188

ann base label observed

Request event observed

/?redirect=/var/www/html/config.yaml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/html/config.yaml

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

#50 2025-03-23 02:35:32 event 6487632 GET 200 bytes 7187

ann base label observed

Request event observed

/?redirect=/var/www/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?redirect=/var/www/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

170.39.218.0/24

asn

52053 — REDHEBERG Association declaree

geo

France, Île-de-France, Paris

org

—

Log Explorer

Annotated access events

Confirm Action