← Back to IP report

Log Explorer

Fact drill-down for 94.156.65.188

Risk 7 LOW Scope All time All-time facts 83 In-scope 83 Filtered 83 Seen 2024-02-06 → 2024-02-06

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

sfp 25 ua 24 base 24 trav 4 cred 3 scan_velocity 2 ref 1

Top labels (facts, in-scope)

sensitive_file 25 observed 24 ua 24 trav 4 cred 3 scan_velocity 2 ref 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 83 rows

← Prev Next →

#1 2024-02-06 14:13:47 event 877822 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#2 2024-02-06 14:13:47 event 877821 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/admin/.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/admin/.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#3 2024-02-06 14:13:47 event 877820 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#4 2024-02-06 14:13:47 event 877819 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/app/.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/app/.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#5 2024-02-06 14:13:47 event 877818 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/admin/.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/admin/.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#6 2024-02-06 14:13:47 event 877817 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/wp-content/plugins/.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#7 2024-02-06 14:13:47 event 877822 GET 400 bytes 255

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#8 2024-02-06 14:13:47 event 877821 GET 400 bytes 255

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/admin/.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/.git/config'

More (full fields + snapshot) expand

url

/admin/.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#9 2024-02-06 14:13:47 event 877820 GET 400 bytes 255

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/wp-content/plugins/.git/config'

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/wp-content/plugins/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#10 2024-02-06 14:13:47 event 877819 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/app/.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

More (full fields + snapshot) expand

url

/app/.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#11 2024-02-06 14:13:47 event 877818 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/admin/.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/.git/config'

More (full fields + snapshot) expand

url

/admin/.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#12 2024-02-06 14:13:47 event 877817 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/wp-content/plugins/.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/wp-content/plugins/.git/config'

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/wp-content/plugins/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#13 2024-02-06 14:13:47 event 877822 GET 400 bytes 255

ann base label observed

Request event observed

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#14 2024-02-06 14:13:47 event 877821 GET 400 bytes 255

ann base label observed

Request event observed

/admin/.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#15 2024-02-06 14:13:47 event 877820 GET 400 bytes 255

ann base label observed

Request event observed

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#16 2024-02-06 14:13:47 event 877819 GET http —

ann base label observed

Request event observed

/app/.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.git/config

referer

—

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#17 2024-02-06 14:13:47 event 877818 GET http —

ann base label observed

Request event observed

/admin/.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/.git/config

referer

—

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#18 2024-02-06 14:13:47 event 877817 GET http —

ann base label observed

Request event observed

/wp-content/plugins/.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-content/plugins/.git/config

referer

—

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#19 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#20 2024-02-06 14:13:46 event 877815 GET 400 bytes 255

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#21 2024-02-06 14:13:46 event 877814 GET 404 bytes 3870

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#22 2024-02-06 14:13:46 event 877813 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/static../.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/static../.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#23 2024-02-06 14:13:46 event 877812 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#24 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

Path traversal / LFI indicator detected

details

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#25 2024-02-06 14:13:46 event 877813 GET http —

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/static../.git/config

referer

—

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

More (full fields + snapshot) expand

url

/static../.git/config

referer

—

summary

Path traversal / LFI indicator detected

details

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#26 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann scan_velocity 12 label scan_velocity

Request Scan-velocity indicator: scanv:ua_signature

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

scan_velocity

rule

scanv:ua_signature

conf

85.00

details

ua=scanner_signature; score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=4.7; 404=3/18(0.17); ext_hits=0; ua_sig=1; methods=['GET', 'HEAD']

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

Scan-velocity indicator: scanv:ua_signature

details

ua=scanner_signature; score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=4.7; 404=3/18(0.17); ext_hits=0; ua_sig=1; methods=['GET', 'HEAD']

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#27 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=4.7; 404=3/18(0.17); ext_hits=0; ua_sig=1; methods=['GET', 'HEAD']

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

Scan-velocity window summary

details

window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=4.7; 404=3/18(0.17); ext_hits=0; ua_sig=1; methods=['GET', 'HEAD']

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#28 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/static../.git/config'

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/static../.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#29 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/static../.git/config'

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/static../.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#30 2024-02-06 14:13:46 event 877815 GET 400 bytes 255

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#31 2024-02-06 14:13:46 event 877814 GET 404 bytes 3870

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

More (full fields + snapshot) expand

url

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#32 2024-02-06 14:13:46 event 877813 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/static../.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/static../.git/config'

More (full fields + snapshot) expand

url

/static../.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/static../.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#33 2024-02-06 14:13:46 event 877813 GET http —

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/static../.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/static../.git/config'

More (full fields + snapshot) expand

url

/static../.git/config

referer

—

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/static../.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#34 2024-02-06 14:13:46 event 877812 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#35 2024-02-06 14:13:46 event 877816 GET 400 bytes 255

ann base label observed

Request event observed

/static../.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static../.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#36 2024-02-06 14:13:46 event 877815 GET 400 bytes 255

ann base label observed

Request event observed

/.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#37 2024-02-06 14:13:46 event 877814 GET 404 bytes 3870

ann base label observed

Request event observed

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.git/config

referer

http://139.59.53.236:80/app/.git/config

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#38 2024-02-06 14:13:46 event 877813 GET http —

ann base label observed

Request event observed

/static../.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static../.git/config

referer

—

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#39 2024-02-06 14:13:46 event 877812 GET http —

ann base label observed

Request event observed

/.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#40 2024-02-06 14:13:43 event 877811 GET 301 bytes 169

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#41 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#42 2024-02-06 14:13:43 event 877811 GET 301 bytes 169

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/app/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#43 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/login/?next=/admin/.git/config'

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/admin/login/?next=/admin/.git/config'

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#44 2024-02-06 14:13:43 event 877811 GET 301 bytes 169

ann base label observed

Request event observed

/app/.git/config

referer

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/.git/config

referer

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#45 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann base label observed

Request event observed

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

event observed

details

—

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#46 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#47 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann cred 8 label cred

Request Auth success (200) on auth endpoint

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

cred

rule

cred:auth_success

conf

70.00

details

Useful for takeover-style correlations when preceded by failures from same source.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

Auth success (200) on auth endpoint

details

Useful for takeover-style correlations when preceded by failures from same source.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#48 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#49 2024-02-06 14:13:43 event 877810 GET 200 bytes 899

ann cred label cred

Request Auth endpoint request observed

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

Annotation facts

label

cred

rule

cred:auth_hit:admin_login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/admin/login/?next=/admin/.git/config

referer

https://139.59.53.236/admin/.git/config

Go-http-client/1.1

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

#50 2024-02-06 14:13:39 event 877809 GET 302

ann ua 10 label ua

Request HTTP library/automation runtime user-agent

/admin/.git/config

referer

http://139.59.53.236:80/admin/.git/config

Go-http-client/1.1

Annotation facts

label

rule

ua:library_client

conf

72.00

details

UA indicates a low-level HTTP client library or automation runtime.

More (full fields + snapshot) expand

url

/admin/.git/config

referer

http://139.59.53.236:80/admin/.git/config

Go-http-client/1.1

summary

HTTP library/automation runtime user-agent

details

UA indicates a low-level HTTP client library or automation runtime.

subnet

94.156.65.0/24

asn

208893 — SPARKS COMMUNICATIONS LTD

geo

United Kingdom, England, Poplar

org

Sparks Communications LTD

Log Explorer

Annotated access events

Confirm Action