← Back to IP report

Log Explorer

Fact drill-down for 81.199.26.35

Risk 2 LOW Scope All time All-time facts 17 In-scope 17 Filtered 17 Seen 2025-05-11 → 2025-05-11

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 12 sfp — 3 trav — 2 Severity (exact) (any) (none) — 12 34 — 2 40 — 2 24 — 1 Label (exact) (any) observed — 12 sensitive_file — 3 trav — 2

HTTP facets

Method (exact, case-insensitive) (any) GET — 12 POST — 5 HTTP status (exact) (any) 301 — 9 404 — 8

Snapshot facets

Subnet (exact) (any) 81.199.26.0/24 — 17 ASN (exact) (any) 62240 — 17 Country / Region / City (exact)

(any country) Germany — 17 (any region) Hesse — 17

(any city) Frankfurt am Main — 17

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 12 sfp 3 trav 2

Top labels (facts, in-scope)

observed 12 sensitive_file 3 trav 2

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 17 rows

← Prev Next →

#1 2025-05-11 23:01:36 event 15904939 GET 301 bytes 169

ann base label observed

Request event observed

/config.development.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.development.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#2 2025-05-11 23:00:32 event 15904763 POST 301 bytes 169

ann base label observed

Request event observed

/tests/TestCase.php%20%20

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/tests/TestCase.php%20%20

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#3 2025-05-11 23:00:05 event 15904687 GET 301 bytes 169

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/sendgrid.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/sendgrid.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#4 2025-05-11 23:00:05 event 15904687 GET 301 bytes 169

ann base label observed

Request event observed

/sendgrid.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sendgrid.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#5 2025-05-11 22:59:38 event 15904639 POST 301 bytes 169

ann base label observed

Request event observed

/debug/default/view

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/debug/default/view

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#6 2025-05-11 22:58:25 event 15904452 GET 301 bytes 169

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/conf/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/conf/.env'

More (full fields + snapshot) expand

url

/conf/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/conf/.env'

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#7 2025-05-11 22:58:25 event 15904452 GET 301 bytes 169

ann base label observed

Request event observed

/conf/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/conf/.env

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#8 2025-05-11 22:57:07 event 15904253 GET 301 bytes 169

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#9 2025-05-11 22:57:07 event 15904253 GET 301 bytes 169

ann base label observed

Request event observed

/.git/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#10 2025-05-11 22:52:44 event 15903575 GET 404 bytes 28510

ann base label observed

Request event observed

/config/session.php%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/session.php%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#11 2025-05-11 22:52:32 event 15903550 POST 404 bytes 28510

ann base label observed

Request event observed

/routes/api.php%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/routes/api.php%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#12 2025-05-11 22:51:34 event 15903474 GET 404 bytes 28510

ann base label observed

Request event observed

/database/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/database/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#13 2025-05-11 22:49:28 event 15903212 POST 404 bytes 28510

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php-backup

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wp-config.php-backup

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#14 2025-05-11 22:49:28 event 15903212 POST 404 bytes 28510

ann base label observed

Request event observed

/wp-config.php-backup

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php-backup

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#15 2025-05-11 22:49:16 event 15903187 GET 404 bytes 28510

ann sfp 40 label sensitive_file

Request Probe for environment/secret file (.env)

/core/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

Annotation facts

label

sensitive_file

rule

sfp:file:env

conf

92.00

details

Request targeted a .env-style file (often contains secrets). Snippet='/core/.env'

More (full fields + snapshot) expand

url

/core/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

summary

Probe for environment/secret file (.env)

details

Request targeted a .env-style file (often contains secrets). Snippet='/core/.env'

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#16 2025-05-11 22:49:16 event 15903187 GET 404 bytes 28510

ann base label observed

Request event observed

/core/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/core/.env

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

#17 2025-05-11 22:46:47 event 15902888 GET 404 bytes 28510

ann base label observed

Request event observed

/public/css/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/public/css/%20%20

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0

summary

event observed

details

—

subnet

81.199.26.0/24

asn

62240 — Clouvider

geo

Germany, Hesse, Frankfurt am Main

org

Ipxo

Page 1 of 1

← Prev Next →