← Back to IP report

Log Explorer

Fact drill-down for 198.235.24.159

Risk 1 LOW Scope All time All-time facts 22 In-scope 22 Filtered 22 Seen 2023-10-20 → 2025-08-20

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 11 ua — 9 cmdi — 1 method — 1 Severity (exact) (any) (none) — 11 8 — 6 12 — 3 10 — 1 30 — 1 Label (exact) (any) observed — 11 ua — 9 cmdi — 1 method — 1

HTTP facets

Method (exact, case-insensitive) (any) GET — 18 \x16\x03\x01\x00 — 4 HTTP status (exact) (any) 301 — 10 200 — 6 400 — 5 499 — 1

Snapshot facets

Subnet (exact) (any) 198.235.24.0/24 — 22 ASN (exact) (any) 396982 — 22 Country / Region / City (exact)

(any country) United States — 22 (any region) California — 22

(any city) Santa Clara — 22

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 11 ua 9 cmdi 1 method 1

Top labels (facts, in-scope)

observed 11 ua 9 cmdi 1 method 1

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 22 rows

← Prev Next →

#1 2025-08-20 08:40:38 event 14122662 GET 499

ann base label observed

Request event observed

/

referer

-

UA

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#2 2025-07-29 09:12:07 event 10390400 GET 400 bytes 28251

ann base label observed

Request event observed

/

referer

-

UA

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#3 2024-12-21 06:24:18 event 2481453 GET 200 bytes 15041

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#4 2024-12-21 06:24:18 event 2481453 GET 200 bytes 15041

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#5 2024-01-22 05:49:14 event 679028 GET 301 bytes 169

ann ua 12 label ua

Request Unusually long User-Agent string

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

ua

rule

ua:excessive_length

conf

70.00

details

Very long UAs can be obfuscation/randomization or buggy clients.

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

Unusually long User-Agent string

details

Very long UAs can be obfuscation/randomization or buggy clients.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#6 2024-01-22 05:49:14 event 679027 GET 301 bytes 169

ann ua 12 label ua

Request Unusually long User-Agent string

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

ua

rule

ua:excessive_length

conf

70.00

details

Very long UAs can be obfuscation/randomization or buggy clients.

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

Unusually long User-Agent string

details

Very long UAs can be obfuscation/randomization or buggy clients.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#7 2024-01-22 05:49:14 event 679028 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#8 2024-01-22 05:49:14 event 679027 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#9 2023-12-10 13:12:27 event 671820 GET 200 bytes 12870

ann base label observed

Request event observed

/

referer

http://139.59.53.236:80/

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236:80/

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#10 2023-12-10 13:12:27 event 671819 GET 200 bytes 12870

ann base label observed

Request event observed

/

referer

http://139.59.53.236:80/

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236:80/

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#11 2023-12-10 13:12:27 event 671820 GET 200 bytes 12870

ann ua 8 label ua

Request Very short User-Agent string

/

referer

http://139.59.53.236:80/

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236:80/

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#12 2023-12-10 13:12:27 event 671819 GET 200 bytes 12870

ann ua 8 label ua

Request Very short User-Agent string

/

referer

http://139.59.53.236:80/

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

http://139.59.53.236:80/

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#13 2023-12-10 13:12:25 event 671818 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#14 2023-12-10 13:12:25 event 671817 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#15 2023-12-10 13:12:25 event 671818 GET 301 bytes 169

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#16 2023-12-10 13:12:25 event 671817 GET 301 bytes 169

ann ua 8 label ua

Request Very short User-Agent string

/

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

/

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#17 2023-11-11 00:59:42 event 587353 \X16\X03\X01\X00 400 bytes 157

ann base label observed

Request event observed

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#18 2023-11-11 00:59:42 event 587353 \X16\X03\X01\X00 400 bytes 157

ann ua 8 label ua

Request Very short User-Agent string

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

Annotation facts

label

ua

rule

ua:very_short

conf

65.00

details

Short/generic UAs are common in basic scripts and commodity automation.

More (full fields + snapshot) expand

url

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

summary

Very short User-Agent string

details

Short/generic UAs are common in basic scripts and commodity automation.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#19 2023-11-11 00:59:42 event 587353 \X16\X03\X01\X00 400 bytes 157

ann method 10 label method

Request Non-RFC HTTP method token

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

Annotation facts

label

method

rule

method:non_rfc_token

conf

92.00

details

HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).

More (full fields + snapshot) expand

url

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

summary

Non-RFC HTTP method token

details

HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#20 2023-11-11 00:59:42 event 587353 \X16\X03\X01\X00 400 bytes 157

ann cmdi 30 label cmdi

Request Command/file-injection indicator: cmdi:subshell

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

Annotation facts

label

cmdi

rule

cmdi:subshell

conf

92.00

details

Detected subshell execution syntax (`...` or $(...)). Snippet='\x16\x03\x01\x00 \xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B -'

More (full fields + snapshot) expand

url

\xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B

referer

-

UA

-

summary

Command/file-injection indicator: cmdi:subshell

details

Detected subshell execution syntax (`...` or $(...)). Snippet='\x16\x03\x01\x00 \xA0c`\xF0\x97.e\xA3`\xC8\x93wd\x96\x02\xD7P\xCER\x1B -'

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#21 2023-10-20 06:30:33 event 410651 GET 301 bytes 169

ann base label observed

Request event observed

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

event observed

details

—

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

#22 2023-10-20 06:30:33 event 410651 GET 301 bytes 169

ann ua 12 label ua

Request Unusually long User-Agent string

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be e…

Annotation facts

label

ua

rule

ua:excessive_length

conf

70.00

details

Very long UAs can be obfuscation/randomization or buggy clients.

More (full fields + snapshot) expand

url

/

referer

-

UA

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com

summary

Unusually long User-Agent string

details

Very long UAs can be obfuscation/randomization or buggy clients.

subnet

198.235.24.0/24

asn

396982 — Google LLC

geo

United States, California, Santa Clara

org

Palo Alto Networks, Inc

Page 1 of 1

← Prev Next →