DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 94.102.49.51
Risk 16 LOW Scope All time All-time facts 101 In-scope 101 Filtered 101 Seen 2024-12-14 → 2025-04-26
Reset (all-time)
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
trav 34 base 21 sfp 17 ua 17 cred 8 fwprobe 4
Top labels (facts, in-scope)
trav 34 observed 21 sensitive_file 17 ua 17 cred 8 fwprobe 4
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 3 — total 101 rows
#1 2025-04-26 23:44:12 event 9247838 GET 404 bytes 7895
ann base label observed
Request event observed
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#2 2025-04-26 23:44:12 event 9247838 GET 404 bytes 7895
ann fwprobe 28 label fwprobe
Request Fortinet SSL-VPN / remote login endpoint probe
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
fwprobe
rule
fwprobe:fortinet:remote_login_or_sslvpn
conf
90.00
details
Request path matched a known firewall/VPN/gateway management or portal surface.
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Fortinet SSL-VPN / remote login endpoint probe
details
Request path matched a known firewall/VPN/gateway management or portal surface.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#3 2025-04-26 23:44:12 event 9247838 GET 404 bytes 7895
ann cred 10 label cred
Request Auth request appears to use an automation-oriented user agent
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#4 2025-04-26 23:44:12 event 9247838 GET 404 bytes 7895
ann cred label cred
Request Auth endpoint request observed
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
cred
rule
cred:auth_hit:login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#5 2025-04-23 21:38:27 event 7494384 GET 404 bytes 7895
ann base label observed
Request event observed
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#6 2025-04-23 21:38:27 event 7494384 GET 404 bytes 7895
ann fwprobe 28 label fwprobe
Request Fortinet SSL-VPN / remote login endpoint probe
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
fwprobe
rule
fwprobe:fortinet:remote_login_or_sslvpn
conf
90.00
details
Request path matched a known firewall/VPN/gateway management or portal surface.
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Fortinet SSL-VPN / remote login endpoint probe
details
Request path matched a known firewall/VPN/gateway management or portal surface.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#7 2025-04-23 21:38:27 event 7494384 GET 404 bytes 7895
ann cred 10 label cred
Request Auth request appears to use an automation-oriented user agent
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#8 2025-04-23 21:38:27 event 7494384 GET 404 bytes 7895
ann cred label cred
Request Auth endpoint request observed
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Annotation facts
label
cred
rule
cred:auth_hit:login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot) expand
url
/remote/login?lang=en
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#9 2025-02-11 17:55:52 event 2955907 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#10 2025-02-11 17:55:52 event 2955906 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#11 2025-02-11 17:55:52 event 2955907 GET 400 bytes 157
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#12 2025-02-11 17:55:52 event 2955907 GET 400 bytes 157
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#13 2025-02-11 17:55:52 event 2955906 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#14 2025-02-11 17:55:52 event 2955906 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#15 2025-02-11 17:55:52 event 2955907 GET 400 bytes 157
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#16 2025-02-11 17:55:52 event 2955906 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#17 2025-02-11 17:55:52 event 2955907 GET 400 bytes 157
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#18 2025-02-11 17:55:52 event 2955906 GET http —
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#19 2025-02-11 17:55:51 event 2955905 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#20 2025-02-11 17:55:51 event 2955905 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#21 2025-02-11 17:55:51 event 2955905 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#22 2025-02-11 17:55:51 event 2955905 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#23 2025-02-11 17:55:51 event 2955905 GET http —
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#24 2025-02-11 14:49:33 event 2940444 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#25 2025-02-11 14:49:33 event 2940443 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#26 2025-02-11 14:49:33 event 2940444 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#27 2025-02-11 14:49:33 event 2940444 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#28 2025-02-11 14:49:33 event 2940443 GET 400 bytes 157
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#29 2025-02-11 14:49:33 event 2940443 GET 400 bytes 157
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#30 2025-02-11 14:49:33 event 2940444 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#31 2025-02-11 14:49:33 event 2940443 GET 400 bytes 157
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#32 2025-02-11 14:49:33 event 2940444 GET http —
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#33 2025-02-11 14:49:33 event 2940443 GET 400 bytes 157
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#34 2025-02-11 14:36:43 event 2940179 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#35 2025-02-11 14:36:43 event 2940178 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#36 2025-02-11 14:36:43 event 2940177 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#37 2025-02-11 14:36:43 event 2940179 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#38 2025-02-11 14:36:43 event 2940179 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#39 2025-02-11 14:36:43 event 2940178 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#40 2025-02-11 14:36:43 event 2940178 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#41 2025-02-11 14:36:43 event 2940177 GET 400 bytes 157
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#42 2025-02-11 14:36:43 event 2940177 GET 400 bytes 157
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#43 2025-02-11 14:36:43 event 2940179 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#44 2025-02-11 14:36:43 event 2940178 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#45 2025-02-11 14:36:43 event 2940177 GET 400 bytes 157
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/toolbox-resource/../translations/../../configuration/serverconfig.xml'
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#46 2025-02-11 14:36:43 event 2940179 GET http —
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#47 2025-02-11 14:36:43 event 2940178 GET http —
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#48 2025-02-11 14:36:43 event 2940177 GET 400 bytes 157
ann base label observed
Request event observed
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
event observed
details
—
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#49 2025-02-11 14:36:06 event 2940171 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
#50 2025-02-11 14:36:06 event 2940170 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/toolbox-resource/../translations/../../configuration/serverconfig.xml
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
94.102.49.0/24
asn
202425 — IP Volume inc
geo
The Netherlands, North Holland, Amsterdam
org
IP Volume inc
Page 1 of 3