← Back to IP report
Log Explorer
Fact drill-down for
185.244.104.2
Risk
29
LOW
Scope
All time
All-time facts
4927
In-scope
4927
Filtered
4927
Seen
2025-08-16
→
2025-10-15
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
base — 1645
ua — 1645
method — 1637
Severity (exact)
(any)
(none) — 1645
8 — 1644
6 — 1638
Label (exact)
(any)
observed — 1645
ua — 1645
method — 1637
HTTP facets
Method (exact, case-insensitive)
(any)
PROPFIND — 4911
GET — 16
HTTP status (exact)
(any)
302 — 2025
403 — 1680
499 — 1203
301 — 10
404 — 6
(none) — 3
Snapshot facets
Subnet (exact)
(any)
185.244.104.0/24 — 4927
ASN (exact)
(any)
213200 — 4927
Country / Region / City (exact)
(any country)
Germany — 4927
(any region)
Hesse — 4927
(any city)
Frankfurt — 4927
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base
1645
ua
1645
method
1637
Top labels (facts, in-scope)
observed
1645
ua
1645
method
1637
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
99
— total
4927
rows
← Prev
Next →
#
1
2025-10-15 08:56:18
event
17977771
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
2
2025-10-15 08:56:18
event
17977771
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
3
2025-10-15 08:56:18
event
17977771
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
4
2025-10-15 07:33:57
event
17935022
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
5
2025-10-15 07:33:57
event
17935022
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
6
2025-10-15 07:33:57
event
17935022
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
7
2025-10-15 07:03:00
event
17934138
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
8
2025-10-15 07:03:00
event
17934138
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
9
2025-10-15 07:03:00
event
17934138
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
10
2025-10-15 06:53:41
event
17933879
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
11
2025-10-15 06:53:41
event
17933879
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
12
2025-10-15 06:53:41
event
17933879
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
13
2025-10-15 06:27:56
event
17933140
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
14
2025-10-15 06:27:56
event
17933140
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
15
2025-10-15 06:27:56
event
17933140
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
16
2025-10-15 05:53:52
event
17897169
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
17
2025-10-15 05:53:52
event
17897169
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
18
2025-10-15 05:53:52
event
17897169
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
19
2025-10-15 05:03:15
event
17895679
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
20
2025-10-15 05:03:15
event
17895679
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
21
2025-10-15 05:03:15
event
17895679
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
22
2025-10-15 04:26:17
event
17894356
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
23
2025-10-15 04:26:17
event
17894356
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
24
2025-10-15 04:26:17
event
17894356
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
25
2025-10-15 04:04:13
event
17893178
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
26
2025-10-15 04:04:13
event
17893178
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
27
2025-10-15 04:04:13
event
17893178
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
28
2025-10-15 02:22:08
event
17871973
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
29
2025-10-15 02:22:08
event
17871973
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
30
2025-10-15 02:22:08
event
17871973
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
31
2025-10-15 01:32:18
event
17870614
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
32
2025-10-15 01:32:18
event
17870614
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
33
2025-10-15 01:32:18
event
17870614
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
34
2025-10-15 01:01:31
event
17869849
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
35
2025-10-15 01:01:31
event
17869849
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
36
2025-10-15 01:01:31
event
17869849
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
37
2025-10-14 21:14:16
event
17814645
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
38
2025-10-14 21:14:16
event
17814645
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
39
2025-10-14 21:14:16
event
17814645
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
40
2025-10-14 20:57:40
event
17813445
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
41
2025-10-14 20:57:40
event
17813445
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
42
2025-10-14 20:57:40
event
17813445
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
43
2025-10-14 20:31:54
event
17774842
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
44
2025-10-14 20:31:54
event
17774842
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
45
2025-10-14 20:31:54
event
17774842
PROPFIND
403
bytes
1019
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
46
2025-10-14 15:57:42
event
17737821
PROPFIND
499
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
47
2025-10-14 15:57:42
event
17737821
PROPFIND
499
ann
base
label
observed
Request
event observed
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
48
2025-10-14 15:57:42
event
17737821
PROPFIND
499
ann
method
6
label
method
Request
WebDAV verb observed: PROPFIND
/
referer
http://139.59.53.236:443/
UA
-
Annotation
facts
label
method
rule
method:webdav_verb
conf
82.00
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
More (full fields + snapshot)
expand
url
/
referer
http://139.59.53.236:443/
UA
-
summary
WebDAV verb observed: PROPFIND
details
WebDAV methods are commonly used in probing for exposed WebDAV endpoints or misconfigurations.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
49
2025-10-14 15:47:01
event
17737274
PROPFIND
403
bytes
1019
ann
ua
8
label
ua
Request
Very short User-Agent string
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
#
50
2025-10-14 15:47:01
event
17737274
PROPFIND
403
bytes
1019
ann
base
label
observed
Request
event observed
/
referer
http://68.183.80.204:443/
UA
-
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/
referer
http://68.183.80.204:443/
UA
-
summary
event observed
details
—
subnet
185.244.104.0/24
asn
213200 — Ferdinand Zink trading as Tube-Hosting
geo
Germany, Hesse, Frankfurt
org
Xantho UAB
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?
