← Back to IP report

Log Explorer

Fact drill-down for 45.156.128.7

Risk 2 LOW Scope All time All-time facts 159 In-scope 159 Filtered 159 Seen 2023-07-07 → 2024-06-13

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 138 cred — 15 ref — 3 ua — 3 Severity (exact) (any) (none) — 144 10 — 9 6 — 6 Label (exact) (any) observed — 138 cred — 15 ref — 3 ua — 3

HTTP facets

Method (exact, case-insensitive) (any) GET — 159 HTTP status (exact) (any) 301 — 82 404 — 43 200 — 28 (none) — 6

Snapshot facets

Subnet (exact) (any) 45.156.128.0/24 — 159 ASN (exact) (any) 211680 — 159 Country / Region / City (exact)

(any country) The Netherlands — 159 (any region) North Holland — 159

(any city) Amsterdam — 159

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 138 cred 15 ref 3 ua 3

Top labels (facts, in-scope)

observed 138 cred 15 ref 3 ua 3

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 4 — total 159 rows

← Prev Next →

# 2024-06-13 13:45:37 event 1409201 GET 404 bytes 5555

ann base label observed

Request event observed

/cgi-bin/authLogin.cgi

referer

http://68.183.80.204/cgi-bin/authLogin.cgi

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi-bin/authLogin.cgi

referer

http://68.183.80.204/cgi-bin/authLogin.cgi

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:34 event 1409200 GET 301 bytes 169

ann base label observed

Request event observed

/cgi-bin/authLogin.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cgi-bin/authLogin.cgi

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:34 event 1409199 GET 301 bytes 169

ann base label observed

Request event observed

/cf_scripts/scripts/ajax/ckeditor/ckeditor.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/cf_scripts/scripts/ajax/ckeditor/ckeditor.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:18 event 1409198 GET 404 bytes 184

ann base label observed

Request event observed

/static/historypage.js

referer

http://68.183.80.204/static/historypage.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

http://68.183.80.204/static/historypage.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:18 event 1409197 GET http —

ann base label observed

Request event observed

/static/historypage.js

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

—

UA

—

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:18 event 1409197 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/static/historypage.js

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/static/historypage.js

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:45:17 event 1409196 GET 301 bytes 169

ann base label observed

Request event observed

/static/historypage.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/historypage.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:56 event 1409195 GET 404 bytes 5555

ann base label observed

Request event observed

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://68.183.80.204/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Telerik.Web.UI.WebResource.axd?type=rau

referer

http://68.183.80.204/Telerik.Web.UI.WebResource.axd?type=rau

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:54 event 1409194 GET 301 bytes 169

ann base label observed

Request event observed

/Telerik.Web.UI.WebResource.axd?type=rau

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/Telerik.Web.UI.WebResource.axd?type=rau

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:31 event 1409193 GET 404 bytes 5559

ann base label observed

Request event observed

/webfig/

referer

http://68.183.80.204/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

http://68.183.80.204/webfig/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:28 event 1409192 GET 301 bytes 169

ann base label observed

Request event observed

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webfig/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:28 event 1409191 GET 404 bytes 5557

ann base label observed

Request event observed

/js/NewWindow_2_all.js

referer

http://68.183.80.204/js/NewWindow_2_all.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/js/NewWindow_2_all.js

referer

http://68.183.80.204/js/NewWindow_2_all.js

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:44:26 event 1409190 GET 301 bytes 169

ann base label observed

Request event observed

/js/NewWindow_2_all.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/js/NewWindow_2_all.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:54 event 1409187 GET 404 bytes 5557

ann base label observed

Request event observed

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:54 event 1409187 GET 404 bytes 5557

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:54 event 1409187 GET 404 bytes 5557

ann cred label cred

Request Auth endpoint request observed

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:auth_other

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:54 event 1409187 GET 404 bytes 5557

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/api/session/properties

referer

http://68.183.80.204/api/session/properties

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:52 event 1409186 GET 301 bytes 169

ann base label observed

Request event observed

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:52 event 1409186 GET 301 bytes 169

ann cred 10 label cred

Request Auth redirect (301) on auth endpoint

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_redirect

conf

72.00

details

Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.

More (full fields + snapshot) expand

url

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth redirect (301) on auth endpoint

details

Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:52 event 1409186 GET 301 bytes 169

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:52 event 1409186 GET 301 bytes 169

ann cred label cred

Request Auth endpoint request observed

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:auth_other

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/api/session/properties

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:24 event 1409185 GET 404 bytes 5558

ann base label observed

Request event observed

/solr/

referer

http://68.183.80.204/solr/#/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/solr/

referer

http://68.183.80.204/solr/#/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:43:21 event 1409184 GET 301 bytes 169

ann base label observed

Request event observed

/solr/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/solr/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:42:47 event 1409183 GET 404 bytes 5558

ann base label observed

Request event observed

/sitecore/shell/sitecore.version.xml

referer

http://68.183.80.204/sitecore/shell/sitecore.version.xml

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sitecore/shell/sitecore.version.xml

referer

http://68.183.80.204/sitecore/shell/sitecore.version.xml

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:42:44 event 1409182 GET 301 bytes 169

ann base label observed

Request event observed

/sitecore/shell/sitecore.version.xml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sitecore/shell/sitecore.version.xml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:42:44 event 1409181 GET 301 bytes 169

ann base label observed

Request event observed

/admin/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/admin/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:42:04 event 1409180 GET 404 bytes 5560

ann base label observed

Request event observed

/WebInterface/

referer

http://68.183.80.204/WebInterface/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/WebInterface/

referer

http://68.183.80.204/WebInterface/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:42:01 event 1409179 GET 301 bytes 169

ann base label observed

Request event observed

/WebInterface/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/WebInterface/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:41:57 event 1409178 GET 200 bytes 7647

ann base label observed

Request event observed

/

referer

http://68.183.80.204/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://68.183.80.204/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:41:54 event 1409177 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:41:12 event 1409171 GET 404 bytes 5556

ann base label observed

Request event observed

/showLogin.cc

referer

http://68.183.80.204/showLogin.cc

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/showLogin.cc

referer

http://68.183.80.204/showLogin.cc

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:41:10 event 1409162 GET 301 bytes 169

ann base label observed

Request event observed

/showLogin.cc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/showLogin.cc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:40:31 event 1409152 GET 404 bytes 5558

ann base label observed

Request event observed

/index.jsp

referer

http://68.183.80.204/index.jsp

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.jsp

referer

http://68.183.80.204/index.jsp

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:40:28 event 1409151 GET 301 bytes 169

ann base label observed

Request event observed

/index.jsp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.jsp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:40:28 event 1409150 GET 200 bytes 1300

ann base label observed

Request event observed

/static/img/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/img/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:40:28 event 1409149 GET 301

ann base label observed

Request event observed

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:40:25 event 1409148 GET 301 bytes 169

ann base label observed

Request event observed

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:39:40 event 1409147 GET 404 bytes 5557

ann base label observed

Request event observed

/identity

referer

http://68.183.80.204/identity

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/identity

referer

http://68.183.80.204/identity

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:39:38 event 1409144 GET 301 bytes 169

ann base label observed

Request event observed

/identity

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/identity

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:38:53 event 1409138 GET 200 bytes 1300

ann base label observed

Request event observed

/static/img/favicon.ico

referer

https://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/static/img/favicon.ico

referer

https://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:38:53 event 1409137 GET 301

ann base label observed

Request event observed

/favicon.ico

referer

http://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

http://68.183.80.204/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:38:50 event 1409136 GET 301 bytes 169

ann base label observed

Request event observed

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:38:07 event 1409132 GET 404 bytes 5558

ann base label observed

Request event observed

/zabbix/favicon.ico

referer

http://68.183.80.204/zabbix/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/zabbix/favicon.ico

referer

http://68.183.80.204/zabbix/favicon.ico

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:38:05 event 1409131 GET 301 bytes 169

ann base label observed

Request event observed

/zabbix/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/zabbix/favicon.ico

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:21 event 1409129 GET 404 bytes 5553

ann base label observed

Request event observed

/sugar_version.json

referer

http://68.183.80.204/sugar_version.json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sugar_version.json

referer

http://68.183.80.204/sugar_version.json

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:19 event 1409128 GET 301 bytes 169

ann base label observed

Request event observed

/sugar_version.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sugar_version.json

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:18 event 1409127 GET 404 bytes 5555

ann base label observed

Request event observed

/favicon-32x32.png

referer

http://68.183.80.204/favicon-32x32.png

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon-32x32.png

referer

http://68.183.80.204/favicon-32x32.png

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:16 event 1409126 GET 301 bytes 169

ann base label observed

Request event observed

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon-32x32.png

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:16 event 1409125 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

# 2024-06-13 13:37:15 event 1409124 GET 200 bytes 7649

ann base label observed

Request event observed

/

referer

http://68.183.80.204/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://68.183.80.204/

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

summary

event observed

details

—

subnet

45.156.128.0/24

asn

211680 — NSEC - Sistemas Informaticos, S.A.

geo

The Netherlands, North Holland, Amsterdam

org

Inap AMS

Page 1 of 4

← Prev Next →