← Back to IP report

Log Explorer

Fact drill-down for 217.156.22.179

Risk 2 LOW Scope All time All-time facts 10 In-scope 10 Filtered 10 Seen 2025-07-03 → 2025-07-03

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

trav 4 base 2 sfp 2 ua 2

Top labels (facts, in-scope)

trav 4 sensitive_file 2 observed 2 ua 2

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 10 rows

← Prev Next →

#1 2025-07-03 21:50:58 event 8573271 GET 400 bytes 264

ann base label observed

Request event observed

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#2 2025-07-03 21:50:58 event 8573270 GET 400 bytes 264

ann base label observed

Request event observed

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#3 2025-07-03 21:50:58 event 8573271 GET 400 bytes 264

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#4 2025-07-03 21:50:58 event 8573270 GET 400 bytes 264

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#5 2025-07-03 21:50:58 event 8573271 GET 400 bytes 264

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Path traversal / LFI indicator detected

details

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#6 2025-07-03 21:50:58 event 8573271 GET 400 bytes 264

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Path traversal / LFI indicator detected

details

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#7 2025-07-03 21:50:58 event 8573270 GET 400 bytes 264

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Path traversal / LFI indicator detected

details

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#8 2025-07-03 21:50:58 event 8573270 GET 400 bytes 264

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Path traversal / LFI indicator detected

details

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#9 2025-07-03 21:50:58 event 8573271 GET 400 bytes 264

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/locales/locale.json?locale=../../config/&namespace=database'

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/locales/locale.json?locale=../../config/&namespace=database'

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

#10 2025-07-03 21:50:58 event 8573270 GET 400 bytes 264

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/locales/locale.json?locale=../../config/&namespace=database'

More (full fields + snapshot) expand

url

/locales/locale.json?locale=../../config/&namespace=database

referer

Go-http-client/1.1

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/locales/locale.json?locale=../../config/&namespace=database'

subnet

217.156.22.0/24

asn

214918 — ESAGAMES HOSTING SHIELD S.R.L.

geo

Romania, Ilfov, Berceni

org

Esagames Hosting Shield SRL

Log Explorer

Annotated access events

Confirm Action