← Back to IP report

Log Explorer

Fact drill-down for 172.104.137.47

Risk 18 LOW Scope All time All-time facts 1183 In-scope 1183 Filtered 1183 Seen 2023-05-25 → 2024-06-01

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 533 ua — 533 scan_velocity — 93 sfp — 17 method — 7 Severity (exact) (any) (none) — 558 14 — 425 8 — 56 6 — 52 24 — 32 22 — 15 26 — 15 20 — 10 3 — 6 12 — 5 30 — 4 28 — 4 10 — 1 Label (exact) (any) observed — 533 ua — 533 scan_velocity — 93 sensitive_file — 17 method — 7

HTTP facets

Method (exact, case-insensitive) (any) GET — 1084 POST — 48 SSTP_DUPLEX_POST — 24 HEAD — 24 \x16\x03\x01\x02 — 3 HTTP status (exact) (any) 301 — 644 404 — 159 400 — 120 200 — 116 (none) — 116 499 — 28

Snapshot facets

Subnet (exact) (any) 172.104.137.0/24 — 1183 ASN (exact) (any) 63949 — 1183 Country / Region / City (exact)

(any country) Germany — 1183 (any region) Hesse — 1183

(any city) Frankfurt am Main — 1183

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 533 ua 533 scan_velocity 93 sfp 17 method 7

Top labels (facts, in-scope)

observed 533 ua 533 scan_velocity 93 sensitive_file 17 method 7

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 24 — total 1183 rows

← Prev Next →

# 2024-06-01 02:29:24 event 1436868 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:24 event 1436867 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:24 event 1436866 GET http —

ann base label observed

Request event observed

/

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:24 event 1436868 GET 301 bytes 169

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:24 event 1436867 GET 400 bytes 255

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:24 event 1436866 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436865 GET 400 bytes 255

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436864 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436863 GET http —

ann base label observed

Request event observed

/

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436865 GET 400 bytes 255

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436864 GET 301 bytes 169

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:16 event 1436863 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:15 event 1436862 GET 404 bytes 19155

ann base label observed

Request event observed

/index.pl

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.pl

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:15 event 1436861 GET 200 bytes 26304

ann base label observed

Request event observed

/

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:15 event 1436862 GET 404 bytes 19155

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/index.pl

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/index.pl

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:15 event 1436861 GET 200 bytes 26304

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436860 GET 400 bytes 255

ann base label observed

Request event observed

/home.shtml

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/home.shtml

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436859 HEAD 200

ann base label observed

Request event observed

/

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436858 GET 404 bytes 19155

ann base label observed

Request event observed

/__Additional

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/__Additional

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436857 GET 400 bytes 255

ann base label observed

Request event observed

/menu.html

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/menu.html

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436856 GET 400 bytes 255

ann base label observed

Request event observed

/inicio.asp

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/inicio.asp

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436855 GET http —

ann base label observed

Request event observed

/home.shtml

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/home.shtml

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436854 GET http —

ann base label observed

Request event observed

/menu.html

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/menu.html

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436853 GET http —

ann base label observed

Request event observed

/inicio.asp

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/inicio.asp

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436860 GET 400 bytes 255

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/home.shtml

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/home.shtml

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436859 HEAD 200

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436858 GET 404 bytes 19155

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/__Additional

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/__Additional

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436857 GET 400 bytes 255

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/menu.html

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/menu.html

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436856 GET 400 bytes 255

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/inicio.asp

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/inicio.asp

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436855 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/home.shtml

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/home.shtml

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436854 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/menu.html

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/menu.html

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:11 event 1436853 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/inicio.asp

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/inicio.asp

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436852 POST 404 bytes 19155

ann base label observed

Request event observed

/scripts/WPnBr.dll

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/scripts/WPnBr.dll

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436851 GET 200 bytes 71

ann base label observed

Request event observed

/robots.txt

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/robots.txt

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436850 GET 404 bytes 19155

ann base label observed

Request event observed

/.git/HEAD

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/HEAD

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436849 GET 400 bytes 255

ann base label observed

Request event observed

/HNAP1

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/HNAP1

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436848 GET 400 bytes 255

ann base label observed

Request event observed

/favicon.ico

referer

-

UA

curl/7.54.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

-

UA

curl/7.54.0

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436847 POST http —

ann base label observed

Request event observed

/scripts/WPnBr.dll

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/scripts/WPnBr.dll

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436846 GET http —

ann base label observed

Request event observed

/HNAP1

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/HNAP1

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436845 GET http —

ann base label observed

Request event observed

/favicon.ico

referer

—

UA

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

—

UA

—

summary

event observed

details

—

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436852 POST 404 bytes 19155

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/scripts/WPnBr.dll

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/scripts/WPnBr.dll

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436851 GET 200 bytes 71

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/robots.txt

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/robots.txt

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436850 GET 404 bytes 19155

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/.git/HEAD

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/.git/HEAD

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436849 GET 400 bytes 255

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/HNAP1

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/HNAP1

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436848 GET 400 bytes 255

ann ua 14 label ua

Request CLI HTTP client user-agent: curl

/favicon.ico

referer

-

UA

curl/7.54.0

Annotation facts

label

ua

rule

ua:cli:curl

conf

80.00

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

More (full fields + snapshot) expand

url

/favicon.ico

referer

-

UA

curl/7.54.0

summary

CLI HTTP client user-agent: curl

details

Command-line HTTP clients are common in probing and scripted requests (also used legitimately).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436847 POST http —

ann ua 6 label ua

Request Missing User-Agent header

/scripts/WPnBr.dll

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/scripts/WPnBr.dll

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436846 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/HNAP1

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/HNAP1

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436845 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/favicon.ico

referer

—

UA

—

Annotation facts

label

ua

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/favicon.ico

referer

—

UA

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436846 GET http —

ann scan_velocity 22 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/HNAP1

referer

—

UA

—

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

85.00

details

rpm_equiv=35.3; score=11; window=90s; total=53; rpm_equiv=35.3; upm_nonstatic_equiv=12.0; 404=0/53(0.00); ext_hits=2; ua_sig=1; methods=['GET', 'HEAD', 'SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']

More (full fields + snapshot) expand

url

/HNAP1

referer

—

UA

—

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=35.3; score=11; window=90s; total=53; rpm_equiv=35.3; upm_nonstatic_equiv=12.0; 404=0/53(0.00); ext_hits=2; ua_sig=1; methods=['GET', 'HEAD', 'SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

# 2024-06-01 02:29:10 event 1436846 GET http —

ann scan_velocity 22 label scan_velocity

Request Scan-velocity indicator: scanv:method_enum

/HNAP1

referer

—

UA

—

Annotation facts

label

scan_velocity

rule

scanv:method_enum

conf

85.00

details

non_safe_methods=['SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']; score=11; window=90s; total=53; rpm_equiv=35.3; upm_nonstatic_equiv=12.0; 404=0/53(0.00); ext_hits=2; ua_sig=1; methods=['GET', 'HEAD', 'SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']

More (full fields + snapshot) expand

url

/HNAP1

referer

—

UA

—

summary

Scan-velocity indicator: scanv:method_enum

details

non_safe_methods=['SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']; score=11; window=90s; total=53; rpm_equiv=35.3; upm_nonstatic_equiv=12.0; 404=0/53(0.00); ext_hits=2; ua_sig=1; methods=['GET', 'HEAD', 'SSTP_DUPLEX_POST', '\\X16\\X03\\X01\\X02']

subnet

172.104.137.0/24

asn

63949 — Akamai Connected Cloud

geo

Germany, Hesse, Frankfurt am Main

org

Linode

Page 1 of 24

← Prev Next →