← Back to IP report

Log Explorer

Fact drill-down for 45.156.129.112

Risk 1 LOW Scope All time All-time facts 68 In-scope 68 Filtered 68 Seen 2024-09-17 → 2025-02-27

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 62 fwprobe — 2 cred — 2 ref — 1 ua — 1 Severity (exact) (any) (none) — 63 22 — 2 6 — 2 10 — 1 Label (exact) (any) observed — 62 fwprobe — 2 cred — 2 ref — 1 ua — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 68 HTTP status (exact) (any) 301 — 34 404 — 23 200 — 9 (none) — 2

Snapshot facets

Subnet (exact) (any) 45.156.129.0/24 — 68 ASN (exact) (any) 211680 — 68 Country / Region / City (exact)

(any country) United States — 68 (any region) Illinois — 68

(any city) Chicago — 68

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 62 fwprobe 2 cred 2 ref 1 ua 1

Top labels (facts, in-scope)

observed 62 fwprobe 2 cred 2 ref 1 ua 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 68 rows

← Prev Next →

# 2025-02-27 07:14:25 event 3425693 GET 301 bytes 169

ann base label observed

Request event observed

/owncloud/status.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/owncloud/status.php

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:14:15 event 3425692 GET 404 bytes 7899

ann base label observed

Request event observed

/WebInterface/

referer

http://68.183.80.204/WebInterface/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/WebInterface/

referer

http://68.183.80.204/WebInterface/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:14:14 event 3425691 GET 301 bytes 169

ann base label observed

Request event observed

/WebInterface/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/WebInterface/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:57 event 3425689 GET 301 bytes 169

ann base label observed

Request event observed

/showLogin.cc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/showLogin.cc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:57 event 3425688 GET 301 bytes 169

ann base label observed

Request event observed

/aspera/faspex/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/aspera/faspex/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:29 event 3425685 GET 404 bytes 7900

ann base label observed

Request event observed

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:29 event 3425685 GET 404 bytes 7900

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:29 event 3425685 GET 404 bytes 7900

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:29 event 3425685 GET 404 bytes 7900

ann cred label cred

Request Auth endpoint request observed

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:auth_other

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:13:18 event 3425682 GET 404 bytes 7897

ann base label observed

Request event observed

/sugar_version.json

referer

http://68.183.80.204/sugar_version.json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sugar_version.json

referer

http://68.183.80.204/sugar_version.json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:53 event 3425674 GET 404 bytes 7899

ann base label observed

Request event observed

/sitecore/shell/sitecore.version.xml

referer

http://68.183.80.204/sitecore/shell/sitecore.version.xml

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sitecore/shell/sitecore.version.xml

referer

http://68.183.80.204/sitecore/shell/sitecore.version.xml

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:52 event 3425672 GET 301 bytes 169

ann base label observed

Request event observed

/sitecore/shell/sitecore.version.xml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sitecore/shell/sitecore.version.xml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:33 event 3425671 GET 404 bytes 184

ann base label observed

Request event observed

/static/historypage.js

referer

http://68.183.80.204/static/historypage.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

http://68.183.80.204/static/historypage.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:33 event 3425670 GET http —

ann base label observed

Request event observed

/static/historypage.js

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

—

UA

—

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:33 event 3425670 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/static/historypage.js

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/static/historypage.js

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:12:32 event 3425669 GET 301 bytes 169

ann base label observed

Request event observed

/static/historypage.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:11:28 event 3425651 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:10:57 event 3425640 GET 301 bytes 169

ann base label observed

Request event observed

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:10:37 event 3425633 GET 301 bytes 169

ann base label observed

Request event observed

/admin/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:09:49 event 3425625 GET 301 bytes 169

ann base label observed

Request event observed

/partymgr/control/main

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/partymgr/control/main

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:09:27 event 3425623 GET 301 bytes 169

ann base label observed

Request event observed

/Telerik.Web.UI.WebResource.axd?type=rau

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Telerik.Web.UI.WebResource.axd?type=rau

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:09:09 event 3425621 GET 404 bytes 7898

ann base label observed

Request event observed

/solr/

referer

http://68.183.80.204/solr/#/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/solr/

referer

http://68.183.80.204/solr/#/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:08:51 event 3425618 GET 200 bytes 1300

ann base label observed

Request event observed

/static/img/favicon.ico

referer

https://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/img/favicon.ico

referer

https://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:08:51 event 3425617 GET 301

ann base label observed

Request event observed

/favicon.ico

referer

http://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

http://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-27 07:08:34 event 3425614 GET 301 bytes 169

ann base label observed

Request event observed

/zabbix/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/zabbix/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:24 event 2949035 GET 200 bytes 7199

ann base label observed

Request event observed

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:24 event 2949034 GET 200 bytes 7199

ann base label observed

Request event observed

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:22 event 2949029 GET 301 bytes 169

ann base label observed

Request event observed

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:22 event 2949028 GET 301 bytes 169

ann base label observed

Request event observed

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:20 event 2949027 GET 404 bytes 7897

ann base label observed

Request event observed

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:20 event 2949026 GET 404 bytes 7897

ann base label observed

Request event observed

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:20 event 2949027 GET 404 bytes 7897

ann fwprobe 22 label fwprobe

Request pfSense/OPNsense admin UI probe

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

fwprobe

rule

fwprobe:pfsense:ui_probe

conf

80.00

details

Request path matched a known firewall/VPN/gateway management or portal surface.

More (full fields + snapshot) expand

url

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

pfSense/OPNsense admin UI probe

details

Request path matched a known firewall/VPN/gateway management or portal surface.

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:20 event 2949026 GET 404 bytes 7897

ann fwprobe 22 label fwprobe

Request pfSense/OPNsense admin UI probe

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

fwprobe

rule

fwprobe:pfsense:ui_probe

conf

80.00

details

Request path matched a known firewall/VPN/gateway management or portal surface.

More (full fields + snapshot) expand

url

/status.php

referer

http://139.59.53.236/status.php

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

pfSense/OPNsense admin UI probe

details

Request path matched a known firewall/VPN/gateway management or portal surface.

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:05 event 2949007 GET 404 bytes 7897

ann base label observed

Request event observed

/wp-json

referer

http://139.59.53.236/wp-json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-json

referer

http://139.59.53.236/wp-json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:05 event 2949006 GET 404 bytes 7897

ann base label observed

Request event observed

/wp-json

referer

http://139.59.53.236/wp-json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-json

referer

http://139.59.53.236/wp-json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:04 event 2949005 GET 301 bytes 169

ann base label observed

Request event observed

/wp-json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:08:04 event 2949004 GET 301 bytes 169

ann base label observed

Request event observed

/wp-json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:56 event 2948998 GET 301 bytes 169

ann base label observed

Request event observed

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:56 event 2948996 GET 301 bytes 169

ann base label observed

Request event observed

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/license.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:42 event 2948995 GET 404 bytes 7899

ann base label observed

Request event observed

/partymgr/control/main

referer

http://139.59.53.236/partymgr/control/main

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/partymgr/control/main

referer

http://139.59.53.236/partymgr/control/main

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:42 event 2948994 GET 404 bytes 7899

ann base label observed

Request event observed

/partymgr/control/main

referer

http://139.59.53.236/partymgr/control/main

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/partymgr/control/main

referer

http://139.59.53.236/partymgr/control/main

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:35 event 2948989 GET 404 bytes 7900

ann base label observed

Request event observed

/webfig/

referer

http://139.59.53.236/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

http://139.59.53.236/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:35 event 2948988 GET 404 bytes 7900

ann base label observed

Request event observed

/webfig/

referer

http://139.59.53.236/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

http://139.59.53.236/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:34 event 2948987 GET 301 bytes 169

ann base label observed

Request event observed

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:34 event 2948986 GET 301 bytes 169

ann base label observed

Request event observed

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:28 event 2948985 GET 404 bytes 7900

ann base label observed

Request event observed

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://139.59.53.236/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://139.59.53.236/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:07:28 event 2948984 GET 404 bytes 7900

ann base label observed

Request event observed

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://139.59.53.236/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://139.59.53.236/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:06:12 event 2948946 GET 200 bytes 7196

ann base label observed

Request event observed

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:06:12 event 2948944 GET 200 bytes 7196

ann base label observed

Request event observed

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

# 2025-02-25 12:06:11 event 2948943 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.129.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

United States, Illinois, Chicago

org

Inap CHI

Page 1 of 2

← Prev Next →