DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 185.36.81.36
Risk 18 LOW Scope All time All-time facts 109 In-scope 109 Filtered 109 Seen 2025-08-122025-09-21
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 3 — total 109 rows
#1 2025-09-21 07:41:52 event 20783872 GET 302 bytes 154
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/sites/all/libraries/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#2 2025-09-21 07:41:52 event 20783870 GET 302 bytes 154
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/sites/all/libraries/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#3 2025-09-06 03:56:08 event 14760978 GET 302
ann scan_velocity 20 label scan_velocity
Request Scan-velocity indicator: scanv:ext_enum
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
scan_velocity
rule
scanv:ext_enum
conf
90.00
details
ext_hits=15; score=10; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
More (full fields + snapshot) expand
url
/admin/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Scan-velocity indicator: scanv:ext_enum
details
ext_hits=15; score=10; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#4 2025-09-06 03:56:08 event 14760978 GET 302
ann scan_velocity 20 label scan_velocity
Request Scan-velocity indicator: scanv:404_ratio
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
scan_velocity
rule
scanv:404_ratio
conf
90.00
details
404=15/18(0.83); score=10; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
More (full fields + snapshot) expand
url
/admin/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Scan-velocity indicator: scanv:404_ratio
details
404=15/18(0.83); score=10; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#5 2025-09-06 03:56:08 event 14760978 GET 302
ann scan_velocity label scan_velocity
Request Scan-velocity window summary
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
scan_velocity
rule
scanv:window
conf
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
More (full fields + snapshot) expand
url
/admin/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Scan-velocity window summary
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=12.0; 404=15/18(0.83); ext_hits=15; ua_sig=0; methods=['GET']
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#6 2025-09-06 03:56:08 event 14760978 GET 302
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#7 2025-09-06 03:56:08 event 14760977 GET 302
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/ckeditor/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#8 2025-09-06 03:56:08 event 14760976 GET 404 bytes 7944
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#9 2025-09-06 03:56:08 event 14760975 GET 404 bytes 7948
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/plugins/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#10 2025-09-06 03:56:08 event 14760974 GET 404 bytes 7945
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/js/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#11 2025-09-06 03:56:08 event 14760973 GET 404 bytes 7948
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/lib/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#12 2025-09-06 03:56:08 event 14760972 GET 404 bytes 7944
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/js/tinymce/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#13 2025-09-06 03:56:08 event 14760971 GET 302
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/ckeditor/plugins/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#14 2025-09-06 03:56:08 event 14760970 GET 404 bytes 7946
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/plugins/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#15 2025-09-06 03:56:08 event 14760969 GET 404 bytes 7945
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/ckeditor/plugins/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#16 2025-09-06 03:56:08 event 14760968 GET 404 bytes 7941
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/resources/admin/Editor/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#17 2025-09-06 03:56:08 event 14760967 GET 404 bytes 7946
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/core/scripts/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#18 2025-09-06 03:56:08 event 14760966 GET 404 bytes 7947
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/ckeditor/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#19 2025-09-06 03:56:08 event 14760965 GET 404 bytes 7945
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/asset/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#20 2025-09-06 03:56:08 event 14760964 GET 404 bytes 7946
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/core/scripts/wysiwyg/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#21 2025-09-06 03:56:08 event 14760963 GET 404 bytes 7946
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#22 2025-09-06 03:56:08 event 14760962 GET 404 bytes 7942
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/js/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#23 2025-09-06 03:56:08 event 14760961 GET 404 bytes 7947
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/components/kcfinder/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#24 2025-08-23 13:23:08 event 16156066 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/sites/all/libraries/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#25 2025-08-23 13:23:08 event 16156065 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#26 2025-08-23 13:23:08 event 16156064 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/elFinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#27 2025-08-23 13:23:08 event 16156063 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/elFinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#28 2025-08-23 13:23:08 event 16156062 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/plugins/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#29 2025-08-23 13:23:08 event 16156061 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#30 2025-08-23 13:23:08 event 16156060 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#31 2025-08-23 13:23:08 event 16156059 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/sites/all/libraries/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#32 2025-08-23 13:23:08 event 16156058 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#33 2025-08-23 13:23:08 event 16156057 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/elFinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#34 2025-08-23 13:23:08 event 16156056 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/admin/elFinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#35 2025-08-23 13:23:08 event 16156055 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/plugins/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#36 2025-08-23 13:23:08 event 16156054 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/assets/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#37 2025-08-23 13:23:08 event 16156053 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/elfinder/php/connector.minimal.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#38 2025-08-21 07:06:03 event 15120505 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#39 2025-08-21 07:06:03 event 15120505 GET 499
ann cred 12 label cred
Request WordPress auth endpoint targeted
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
cred
rule
cred:wp_focus:wp_login
conf
75.00
details
wp-login.php and xmlrpc.php are frequent brute-force targets; aggregate these signals by IP.
More (full fields + snapshot) expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
WordPress auth endpoint targeted
details
wp-login.php and xmlrpc.php are frequent brute-force targets; aggregate these signals by IP.
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#40 2025-08-21 07:06:03 event 15120505 GET 499
ann cred 10 label cred
Request Auth request appears to use an automation-oriented user agent
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot) expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#41 2025-08-21 07:06:03 event 15120505 GET 499
ann cred label cred
Request Auth endpoint request observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
cred
rule
cred:auth_hit:wp_login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot) expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#42 2025-08-18 13:37:27 event 12403099 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/wp-json/wp/v2/pages?per_page=100
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#43 2025-08-13 11:23:59 event 13554391 GET 499
ann sfp 36 label sensitive_file
Request Command-style parameter observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:param:cmd
conf
86.00
details
A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='tor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder='
More (full fields + snapshot) expand
url
/ckeditor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Command-style parameter observed
details
A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='tor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder='
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#44 2025-08-13 11:23:59 event 13554390 GET 499
ann sfp 36 label sensitive_file
Request Command-style parameter observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
sensitive_file
rule
sfp:param:cmd
conf
86.00
details
A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='tor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder='
More (full fields + snapshot) expand
url
/plugins/fckeditor/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Command-style parameter observed
details
A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='tor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder='
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#45 2025-08-13 11:23:59 event 13554381 GET 499
ann scan_velocity 10 label scan_velocity
Request Scan-velocity indicator: scanv:ext_enum
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
scan_velocity
rule
scanv:ext_enum
conf
85.00
details
ext_hits=18; score=5; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.0; 404=0/18(0.00); ext_hits=18; ua_sig=0; methods=['GET']
More (full fields + snapshot) expand
url
/scripts/fckeditor/editor/filemanager/upload/php/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Scan-velocity indicator: scanv:ext_enum
details
ext_hits=18; score=5; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.0; 404=0/18(0.00); ext_hits=18; ua_sig=0; methods=['GET']
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#46 2025-08-13 11:23:59 event 13554381 GET 499
ann scan_velocity label scan_velocity
Request Scan-velocity window summary
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
scan_velocity
rule
scanv:window
conf
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.0; 404=0/18(0.00); ext_hits=18; ua_sig=0; methods=['GET']
More (full fields + snapshot) expand
url
/scripts/fckeditor/editor/filemanager/upload/php/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
Scan-velocity window summary
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.0; 404=0/18(0.00); ext_hits=18; ua_sig=0; methods=['GET']
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#47 2025-08-13 11:23:59 event 13554391 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/ckeditor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#48 2025-08-13 11:23:59 event 13554390 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/plugins/fckeditor/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#49 2025-08-13 11:23:59 event 13554389 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/scripts/FCKeditor/editor/filemanager/upload/php/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT
#50 2025-08-13 11:23:59 event 13554388 GET 499
ann base label observed
Request event observed
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
Annotation facts
label
observed
rule
base_observed
conf
details
More (full fields + snapshot) expand
url
/libraries/FCKeditor/editor/filemanager/upload/php/upload.php
referer
-
UA
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.50 Safari/537.36
summary
event observed
details
subnet
185.36.81.0/24
asn
209605 — UAB Host Baltic
geo
Lithuania, Kaunas, Kaunas
org
SERVEROFFER LT