Log Explorer

Fact drill-down for 185.177.72.201

Risk 14 LOW Scope All time All-time facts 104 In-scope 104 Filtered 104 Seen 2025-08-06 → 2025-09-08

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 32 sfp 28 trav 24 ua 18 proto 1 method 1

Top labels (facts, in-scope)

observed 32 sensitive_file 28 trav 24 ua 18 proto 1 method 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 3 — total 104 rows

← Prev Next →

#1 2025-09-08 10:54:42 event 17303939 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#2 2025-08-25 03:54:33 event 13567595 GET 499

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#3 2025-08-25 03:54:01 event 13567562 GET 301 bytes 178

ann ua 8 label ua

Request Very short User-Agent string

/.git/HEAD

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#4 2025-08-25 03:54:01 event 13567562 GET 301 bytes 178

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/HEAD

referer

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/HEAD'

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/HEAD'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#5 2025-08-25 03:54:01 event 13567562 GET 301 bytes 178

ann base label observed

Request event observed

/.git/HEAD

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#6 2025-08-24 02:33:53 event 16328154 GET 301 bytes 178

ann base label observed

Request event observed

/mail/send

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/mail/send

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#7 2025-08-24 02:33:53 event 16328148 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#8 2025-08-24 02:33:53 event 16328148 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#9 2025-08-24 02:33:53 event 16328148 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#10 2025-08-24 02:33:53 event 16328148 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#11 2025-08-24 02:33:53 event 16328148 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../var/log/apache2/access.log'

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../var/log/apache2/access.log'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#12 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#13 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../config/config.php

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#14 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#15 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../config/config.php

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#16 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#17 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#18 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../config/config.php

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#19 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../config/config.php

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#20 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../home/ubuntu/.env'

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../home/ubuntu/.env'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#21 2025-08-24 02:33:52 event 16328146 GET 400 bytes 166

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/../../../../../../home/ubuntu/.env'

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/../../../../../../home/ubuntu/.env'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#22 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../config/config.php

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../config/config.php'

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../config/config.php'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#23 2025-08-24 02:33:52 event 16328142 GET 400 bytes 166

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/../../../../../../config/config.php

referer

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/../../../../../../config/config.php'

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/../../../../../../config/config.php'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#24 2025-08-24 02:33:51 event 16328140 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../.aws/credentials

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../.aws/credentials

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#25 2025-08-24 02:33:51 event 16328137 GET 301 bytes 178

ann base label observed

Request event observed

/.git/HEAD

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#26 2025-08-24 02:33:51 event 16328140 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../.aws/credentials

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../.aws/credentials

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#27 2025-08-24 02:33:51 event 16328137 GET 301 bytes 178

ann ua 8 label ua

Request Very short User-Agent string

/.git/HEAD

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#28 2025-08-24 02:33:51 event 16328140 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../.aws/credentials

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/../../../../../../.aws/credentials

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#29 2025-08-24 02:33:51 event 16328140 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../.aws/credentials

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../.aws/credentials

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#30 2025-08-24 02:33:51 event 16328140 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../.aws/credentials

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../.aws/credentials'

More (full fields + snapshot) expand

url

/../../../../../../.aws/credentials

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../.aws/credentials'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#31 2025-08-24 02:33:51 event 16328137 GET 301 bytes 178

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/HEAD

referer

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/HEAD'

More (full fields + snapshot) expand

url

/.git/HEAD

referer

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/HEAD'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#32 2025-08-24 01:50:12 event 16314167 \X16\X03\X01\X05 400 bytes 166

ann base label observed

Request event observed

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#33 2025-08-24 01:50:12 event 16314167 \X16\X03\X01\X05 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#34 2025-08-24 01:50:12 event 16314167 \X16\X03\X01\X05 400 bytes 166

ann proto 12 label proto

Request Malformed percent-encoding in request target

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

Annotation facts

label

proto

rule

proto:bad_percent_encoding

conf

72.00

details

A '%' not followed by two hex digits was detected. Often caused by fuzzers/scanners or broken clients; sometimes used for evasions.

More (full fields + snapshot) expand

url

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

summary

Malformed percent-encoding in request target

details

A '%' not followed by two hex digits was detected. Often caused by fuzzers/scanners or broken clients; sometimes used for evasions.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#35 2025-08-24 01:50:12 event 16314167 \X16\X03\X01\X05 400 bytes 166

ann method 10 label method

Request Non-RFC HTTP method token

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

Annotation facts

label

method

rule

method:non_rfc_token

conf

92.00

details

HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).

More (full fields + snapshot) expand

url

%\xCB\x1F\xCF'K'\xEB\xB0w\xE0\x9B\x1A`.

referer

summary

Non-RFC HTTP method token

details

HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#36 2025-08-24 01:50:11 event 16314166 GET 301 bytes 178

ann base label observed

Request event observed

/mail/send

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/mail/send

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#37 2025-08-24 01:50:11 event 16314165 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#38 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#39 2025-08-24 01:50:11 event 16314165 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#40 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#41 2025-08-24 01:50:11 event 16314165 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#42 2025-08-24 01:50:11 event 16314165 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#43 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#44 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Path traversal / LFI indicator detected

details

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#45 2025-08-24 01:50:11 event 16314165 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../var/log/apache2/access.log

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../var/log/apache2/access.log'

More (full fields + snapshot) expand

url

/../../../../../../var/log/apache2/access.log

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../var/log/apache2/access.log'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#46 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../home/ubuntu/.env'

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/../../../../../../home/ubuntu/.env'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#47 2025-08-24 01:50:11 event 16314164 GET 400 bytes 166

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/../../../../../../home/ubuntu/.env

referer

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/../../../../../../home/ubuntu/.env'

More (full fields + snapshot) expand

url

/../../../../../../home/ubuntu/.env

referer

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/../../../../../../home/ubuntu/.env'

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#48 2025-08-24 01:49:55 event 16314152 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../config/config.php

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#49 2025-08-24 01:49:55 event 16314150 GET 400 bytes 166

ann base label observed

Request event observed

/../../../../../../config/config.php

referer

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

event observed

details

—

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

#50 2025-08-24 01:49:55 event 16314152 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

/../../../../../../config/config.php

referer

Annotation facts

label

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/../../../../../../config/config.php

referer

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

185.177.72.0/24

asn

211590 — Bucklog SARL

geo

France, Île-de-France, Vélizy-Villacoublay

org

FBW NETWORKS

Log Explorer

Annotated access events

Confirm Action