← Back to IP report

Log Explorer

Fact drill-down for 45.135.232.205

Risk 2 LOW Scope All time All-time facts 49 In-scope 49 Filtered 49 Seen 2025-07-14 → 2025-08-10

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 33 cred — 16 Severity (exact) (any) (none) — 41 10 — 8 Label (exact) (any) observed — 33 cred — 16

HTTP facets

Method (exact, case-insensitive) (any) GET — 45 POST — 4 HTTP status (exact) (any) 404 — 37 301 — 9 499 — 3

Snapshot facets

Subnet (exact) (any) 45.135.232.0/24 — 49 ASN (exact) (any) 198953 — 49 Country / Region / City (exact)

(any country) Russia — 49 (any region) St.-Petersburg — 49

(any city) St Petersburg — 49

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 33 cred 16

Top labels (facts, in-scope)

observed 33 cred 16

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 49 rows

← Prev Next →

#1 2025-08-10 07:07:54 event 15837100 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#2 2025-08-10 07:07:50 event 15837095 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#3 2025-08-10 06:49:18 event 15801050 GET 404 bytes 7944

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#4 2025-08-10 06:49:17 event 15801048 GET 404 bytes 7946

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#5 2025-08-10 05:08:00 event 15745399 GET 404 bytes 7942

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#6 2025-08-10 05:07:58 event 15745394 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#7 2025-08-10 05:07:58 event 15745393 GET 404 bytes 7947

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#8 2025-08-10 05:07:52 event 15745387 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#9 2025-08-10 04:30:53 event 15743657 GET 499

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#10 2025-08-10 04:30:44 event 15743654 GET 499

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#11 2025-08-10 02:08:37 event 15653532 GET 404 bytes 7944

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#12 2025-08-10 02:08:37 event 15653531 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#13 2025-08-10 02:08:37 event 15653530 GET 404 bytes 7946

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#14 2025-08-10 02:08:35 event 15653525 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#15 2025-08-09 23:58:11 event 15563383 GET 404 bytes 7945

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#16 2025-08-09 23:58:10 event 15563374 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#17 2025-08-09 23:58:10 event 15563371 GET 404 bytes 7945

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#18 2025-08-09 23:58:07 event 15563358 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#19 2025-08-09 21:51:05 event 15561909 GET 404 bytes 7943

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#20 2025-08-09 21:51:05 event 15561905 GET 301 bytes 178

ann base label observed

Request event observed

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/versions.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#21 2025-08-09 21:51:04 event 15561894 GET 404 bytes 7948

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#22 2025-08-07 08:51:48 event 14837346 GET 404 bytes 7944

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#23 2025-08-07 08:51:48 event 14837346 GET 404 bytes 7944

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#24 2025-08-07 08:51:48 event 14837346 GET 404 bytes 7944

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#25 2025-08-07 08:39:31 event 14801807 GET 404 bytes 7942

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#26 2025-08-07 08:39:31 event 14801807 GET 404 bytes 7942

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#27 2025-08-07 08:39:31 event 14801807 GET 404 bytes 7942

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#28 2025-08-07 08:37:49 event 14801718 GET 404 bytes 7946

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#29 2025-08-07 08:37:49 event 14801718 GET 404 bytes 7946

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#30 2025-08-07 08:37:49 event 14801718 GET 404 bytes 7946

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#31 2025-08-07 08:36:15 event 14801648 GET 404 bytes 7943

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#32 2025-08-07 08:36:15 event 14801648 GET 404 bytes 7943

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#33 2025-08-07 08:36:15 event 14801648 GET 404 bytes 7943

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#34 2025-08-07 02:17:42 event 14494004 GET 404 bytes 7945

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#35 2025-08-07 02:17:42 event 14494004 GET 404 bytes 7945

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#36 2025-08-07 02:17:42 event 14494004 GET 404 bytes 7945

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#37 2025-08-07 02:09:47 event 14493575 GET 404 bytes 7945

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#38 2025-08-07 02:09:47 event 14493575 GET 404 bytes 7945

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#39 2025-08-07 02:09:47 event 14493575 GET 404 bytes 7945

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#40 2025-08-07 02:02:19 event 14493281 GET 404 bytes 7945

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#41 2025-08-07 02:02:19 event 14493281 GET 404 bytes 7945

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#42 2025-08-07 02:02:19 event 14493281 GET 404 bytes 7945

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#43 2025-08-07 02:01:43 event 14493243 GET 404 bytes 7946

ann base label observed

Request event observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#44 2025-08-07 02:01:43 event 14493243 GET 404 bytes 7946

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#45 2025-08-07 02:01:43 event 14493243 GET 404 bytes 7946

ann cred label cred

Request Auth endpoint request observed

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/login?redir=/ng

referer

-

UA

Python/3.11 aiohttp/3.12.15

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#46 2025-07-26 20:17:12 event 14930045 POST 499

ann base label observed

Request event observed

/_layouts/15/ToolPane.aspx?DisplayMode=Edit

referer

https://139.59.53.236/_layouts/SignOut.aspx

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/_layouts/15/ToolPane.aspx?DisplayMode=Edit

referer

https://139.59.53.236/_layouts/SignOut.aspx

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#47 2025-07-14 08:42:09 event 9499702 POST 404 bytes 7948

ann base label observed

Request event observed

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#48 2025-07-14 08:42:05 event 9499700 POST 404 bytes 7946

ann base label observed

Request event observed

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

#49 2025-07-14 08:42:01 event 9499696 POST 404 bytes 7946

ann base label observed

Request event observed

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/p/u/doAuthentication.do

referer

-

UA

orange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mintorange0Mint

summary

event observed

details

—

subnet

45.135.232.0/24

asn

198953 — Proton66 OOO

geo

Russia, St.-Petersburg, St Petersburg

org

Proton66 LLC

Page 1 of 1

← Prev Next →