← Back to IP report
Log Explorer
Fact drill-down for
81.17.20.106
Risk
3
LOW
Scope
All time
All-time facts
82
In-scope
82
Filtered
82
Seen
2025-04-02
→
2025-04-14
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
base — 48
ua — 17
sfp — 16
method — 1
Severity (exact)
(any)
(none) — 48
8 — 17
24 — 16
10 — 1
Label (exact)
(any)
observed — 48
ua — 17
sensitive_file — 16
method — 1
HTTP facets
Method (exact, case-insensitive)
(any)
GET — 79
\x16\x03\x01\x00 — 3
HTTP status (exact)
(any)
400 — 35
301 — 27
404 — 14
200 — 6
Snapshot facets
Subnet (exact)
(any)
81.17.20.0/24 — 82
ASN (exact)
(any)
51852 — 82
Country / Region / City (exact)
(any country)
Switzerland — 82
(any region)
Zurich — 82
(any city)
Zurich — 82
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base
48
ua
17
sfp
16
method
1
Top labels (facts, in-scope)
observed
48
ua
17
sensitive_file
16
method
1
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
2
— total
82
rows
← Prev
Next →
#
2025-04-14 23:36:10
event
4757898
GET
301
bytes
169
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:10
event
4757898
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757890
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757885
\X16\X03\X01\X00
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757885
\X16\X03\X01\X00
400
bytes
157
ann
method
10
label
method
Request
Non-RFC HTTP method token
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
Annotation
facts
label
method
rule
method:non_rfc_token
conf
92.00
details
HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).
More (full fields + snapshot)
expand
url
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
summary
Non-RFC HTTP method token
details
HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757894
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757890
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:36:09
event
4757885
\X16\X03\X01\X00
400
bytes
157
ann
base
label
observed
Request
event observed
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
'\xA2r\x19\x14@\x90\xA0\xD6\xAE\xB5\xEC4\xE3\x05]\x85?7\x10J\xBFq\xBF
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:34:12
event
4757552
GET
404
bytes
7894
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:34:12
event
4757552
GET
404
bytes
7894
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:34:11
event
4757549
GET
200
bytes
27853
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:34:08
event
4757525
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 23:34:08
event
4757525
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 18:20:38
event
4625774
GET
301
bytes
169
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 18:20:38
event
4625774
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 18:20:37
event
4625771
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 18:20:37
event
4625773
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-14 18:20:37
event
4625771
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 19:47:35
event
6436128
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 19:47:35
event
6436128
GET
301
bytes
169
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 19:47:34
event
6436126
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 19:47:34
event
6436125
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 19:47:34
event
6436125
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 11:48:36
event
6234381
GET
404
bytes
7896
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 11:48:36
event
6234378
GET
200
bytes
27835
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 11:48:36
event
6234381
GET
404
bytes
7896
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 11:48:32
event
6234348
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 11:48:32
event
6234348
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 01:10:53
event
5943397
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 01:10:53
event
5943396
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 01:10:53
event
5943395
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 01:10:53
event
5943395
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-12 01:10:53
event
5943397
GET
301
bytes
169
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 18:41:39
event
5790748
GET
404
bytes
7897
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 18:41:39
event
5790748
GET
404
bytes
7897
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 18:41:38
event
5790746
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 18:41:38
event
5790746
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 04:18:26
event
5428546
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 04:18:26
event
5428546
GET
301
bytes
169
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 04:18:25
event
5428544
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 04:18:25
event
5428545
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-11 04:18:25
event
5428544
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-10 00:05:55
event
4908178
GET
404
bytes
7897
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-10 00:05:55
event
4908178
GET
404
bytes
7897
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-10 00:05:55
event
4908174
GET
200
bytes
27835
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-10 00:05:51
event
4908172
GET
400
bytes
157
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
-
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-10 00:05:51
event
4908172
GET
400
bytes
157
ann
base
label
observed
Request
event observed
/
referer
-
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-07 04:59:48
event
3753638
GET
404
bytes
7895
ann
sfp
24
label
sensitive_file
Request
Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-07 04:59:48
event
3753638
GET
404
bytes
7895
ann
base
label
observed
Request
event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
#
2025-04-07 04:59:47
event
3753635
GET
200
bytes
27835
ann
base
label
observed
Request
event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
81.17.20.0/24
asn
51852 — Private Layer INC
geo
Switzerland, Zurich, Zurich
org
—
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?