Log Explorer

Fact drill-down for 163.116.243.98

Risk 3 LOW Scope All time All-time facts 284 In-scope 284 Filtered 284 Seen 2025-03-28 → 2025-03-28

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 242 cred 18 scan_velocity 16 ref 6 request_size 1 ua 1

Top labels (facts, in-scope)

observed 242 cred 18 scan_velocity 16 ref 6 request_size 1 ua 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 6 — total 284 rows

← Prev Next →

# 2025-03-28 18:50:34 event 4306464 GET 101

ann base label observed

Request event observed

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:34 event 4306463 GET 101

ann base label observed

Request event observed

/chat_asgi/chatbot/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/chat_asgi/chatbot/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306461 GET 200 bytes 1775

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306461 GET 200 bytes 1775

ann cred 8 label cred

Request Auth success (200) on auth endpoint

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_success

conf

70.00

details

Useful for takeover-style correlations when preceded by failures from same source.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth success (200) on auth endpoint

details

Useful for takeover-style correlations when preceded by failures from same source.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306461 GET 200 bytes 1775

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306461 GET 200 bytes 1775

ann cred label cred

Request Auth endpoint request observed

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306461 GET 200 bytes 1775

ann base label observed

Request event observed

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:30 event 4306460 POST 302

ann base label observed

Request event observed

/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/code_reflection/multi_select/180222/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306459 GET 200 bytes 1776

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306459 GET 200 bytes 1776

ann cred 8 label cred

Request Auth success (200) on auth endpoint

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_success

conf

70.00

details

Useful for takeover-style correlations when preceded by failures from same source.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth success (200) on auth endpoint

details

Useful for takeover-style correlations when preceded by failures from same source.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306459 GET 200 bytes 1776

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306459 GET 200 bytes 1776

ann cred label cred

Request Auth endpoint request observed

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306459 GET 200 bytes 1776

ann base label observed

Request event observed

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:28 event 4306458 POST 302

ann base label observed

Request event observed

/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/code_reflection/multi_select/178939/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

70.00

details

rpm_equiv=112.7; score=5; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=8.7; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=112.7; score=5; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=8.7; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET', 'POST']

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=8.7; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Scan-velocity window summary

details

window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=8.7; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET', 'POST']

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann ref 6 label ref

Request External referer observed on an auth-like endpoint

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

ref

rule

ref:external_referer_to_auth

conf

70.00

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

External referer observed on an auth-like endpoint

details

External origins hitting login/auth endpoints can be a signal of phishing landing pages or malicious redirect chains. This is only emitted for auth-like paths.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann cred 8 label cred

Request Auth success (200) on auth endpoint

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_success

conf

70.00

details

Useful for takeover-style correlations when preceded by failures from same source.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth success (200) on auth endpoint

details

Useful for takeover-style correlations when preceded by failures from same source.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann cred 10 label cred

Request Auth request appears to use an automation-oriented user agent

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:scripted_user_agent

conf

70.00

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth request appears to use an automation-oriented user agent

details

Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann cred label cred

Request Auth endpoint request observed

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

cred

rule

cred:auth_hit:login

conf

55.00

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Auth endpoint request observed

details

Row-level auth primitive for downstream aggregation (no velocity logic here).

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306456 GET 200 bytes 1778

ann base label observed

Request event observed

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/accounts/login/?next=/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:25 event 4306455 POST 302

ann base label observed

Request event observed

/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/code_reflection/multi_select/178873/

referer

https://syndu.com/code_reflection/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:18 event 4306454 GET 200 bytes 16529

ann base label observed

Request event observed

/code_reflection/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/code_reflection/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:18 event 4306453 GET 301 bytes 5

ann base label observed

Request event observed

/code_reflection

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/code_reflection

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:14 event 4306451 GET 101 bytes 12

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

70.00

details

rpm_equiv=109.3; score=4; window=90s; total=164; rpm_equiv=109.3; upm_nonstatic_equiv=7.3; 404=0/164(0.00); ext_hits=0; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=109.3; score=4; window=90s; total=164; rpm_equiv=109.3; upm_nonstatic_equiv=7.3; 404=0/164(0.00); ext_hits=0; ua_sig=0; methods=['GET']

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:14 event 4306451 GET 101 bytes 12

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=164; rpm_equiv=109.3; upm_nonstatic_equiv=7.3; 404=0/164(0.00); ext_hits=0; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Scan-velocity window summary

details

window=90s; total=164; rpm_equiv=109.3; upm_nonstatic_equiv=7.3; 404=0/164(0.00); ext_hits=0; ua_sig=0; methods=['GET']

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:14 event 4306452 GET 101 bytes 12

ann base label observed

Request event observed

/chat_asgi/chatbot/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/chat_asgi/chatbot/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:14 event 4306451 GET 101 bytes 12

ann base label observed

Request event observed

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/memory/action_notifications_/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:12 event 4306449 GET 200 bytes 224

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:11 event 4306448 GET 200 bytes 378

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:10 event 4306447 GET 200 bytes 228

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.14&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.14&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:09 event 4306446 GET 200 bytes 377

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.14

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.14

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:05 event 4306445 GET 200 bytes 228

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=84.17.62.180&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=84.17.62.180&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:03 event 4306444 GET 200 bytes 349

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=84.17.62.180

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=84.17.62.180

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:03 event 4306443 GET 200 bytes 228

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.4&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.4&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:02 event 4306442 GET 200 bytes 377

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.4

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.4

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:50:01 event 4306440 GET 200 bytes 225

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.174&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.174&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:58 event 4306439 GET 200 bytes 377

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.174

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.174

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:58 event 4306438 GET 200 bytes 377

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.174

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.174

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:57 event 4306437 GET 200 bytes 224

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:57 event 4306436 GET 200 bytes 224

ann base label observed

Request event observed

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/access-logs/?ip=86.127.226.169&page=1

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:49 event 4306435 GET 200 bytes 378

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:49 event 4306434 GET 200 bytes 378

ann base label observed

Request event observed

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-detail/?ip=86.127.226.169

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:47 event 4306433 GET 200 bytes 1320

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=36.94989178681327&maxLat=…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=36.94989178681327&maxLat=44.52001001133986&minLng=-14.216308593750002&maxLng=6.877441406250001

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:47 event 4306432 GET 200 bytes 1077

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat=42.90011265525328&minLng=-14.952392578125002&maxLng=6.141357421875001

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:47 event 4306431 GET 200 bytes 1320

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=36.94989178681327&maxLat=…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:47 event 4306430 GET 200 bytes 1077

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat=42.90011265525328&minLng=-14.952392578125002&maxLng=6.141357421875001

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:46 event 4306429 GET 200 bytes 1077

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat=42.90011265525328&minLng=-14.952392578125002&maxLng=6.141357421875001

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:46 event 4306428 GET 200 bytes 1077

ann base label observed

Request event observed

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=35.137879119634185&maxLat=42.90011265525328&minLng=-14.952392578125002&maxLng=6.141357421875001

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

# 2025-03-28 18:49:44 event 4306425 GET 200 bytes 625

ann scan_velocity 10 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=38.72194763292809&maxLat=…

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

70.00

details

rpm_equiv=93.3; score=4; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=6.0; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/logmap/api/ip-data/?start=2023-01-01T00%3A00%3A00.000Z&end=2025-12-31T23%3A59%3A59.000Z&offset=0&limit=1000&bots_only=false&problem_ips_only=true&minLat=38.72194763292809&maxLat=40.64730356252251&minLng=-6.611022949218751&maxLng=-1.3375854492187502

referer

https://syndu.com/logmap/

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=93.3; score=4; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=6.0; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']

subnet

163.116.243.0/24

asn

55256 — Netskope Inc

geo

Spain, Madrid, Madrid

org

Netskope MAD

Log Explorer

Annotated access events

Confirm Action