Log Explorer

Fact drill-down for 216.218.206.69

Risk 4 LOW Scope All time All-time facts 330 In-scope 330 Filtered 330 Seen 2023-07-11 → 2025-10-05

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 281 ua 28 sfp 18 bot 3

Top labels (facts, in-scope)

observed 281 ua 28 sensitive_file 18 bot 3

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 7 — total 330 rows

← Prev Next →

#1 2025-10-05 14:32:23 event 19200592 GET 301 bytes 178

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#2 2025-10-05 14:31:56 event 19200571 GET 301 bytes 178

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#3 2025-10-05 14:30:38 event 19200523 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#4 2025-10-05 14:30:08 event 19200503 GET 301 bytes 178

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#5 2025-10-05 14:28:39 event 19200476 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#6 2025-09-25 08:54:14 event 18823078 GET 302 bytes 154

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.160 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.160 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#7 2025-09-25 08:48:53 event 18823020 GET 302 bytes 154

ann base label observed

Request event observed

referer

Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#8 2025-09-25 08:48:10 event 18822996 GET 302 bytes 154

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#9 2025-08-20 17:08:48 event 14611735 GET 301 bytes 178

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#10 2025-08-20 17:08:48 event 14611734 GET 301 bytes 178

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#11 2025-08-20 17:06:47 event 14611558 GET 301 bytes 178

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#12 2025-08-20 17:03:02 event 14611329 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#13 2025-08-20 17:01:17 event 14611206 GET 301 bytes 178

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#14 2025-08-20 16:58:43 event 14611067 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#15 2025-08-10 10:28:35 event 15936816 GET 301 bytes 178

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#16 2025-08-10 10:28:35 event 15936815 GET 301 bytes 178

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#17 2025-08-10 10:26:53 event 15936685 GET 301 bytes 178

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#18 2025-08-10 10:22:16 event 15936384 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#19 2025-08-10 10:21:42 event 15936357 GET 301 bytes 178

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#20 2025-08-10 10:19:24 event 15936209 GET 301 bytes 178

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#21 2025-05-11 15:16:32 event 15795157 GET 301 bytes 169

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#22 2025-05-11 15:15:47 event 15795062 GET 301 bytes 169

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#23 2025-05-11 15:14:43 event 15795006 GET 301 bytes 169

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#24 2025-05-11 15:14:19 event 15794984 GET 301 bytes 169

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#25 2025-05-11 15:12:06 event 15794788 GET 301 bytes 169

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#26 2025-04-06 13:59:04 event 6937745 GET 404 bytes 7897

ann base label observed

Request event observed

/.git/config

referer

Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#27 2025-04-06 13:59:04 event 6937745 GET 404 bytes 7897

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#28 2025-04-06 13:50:53 event 6937170 GET 200 bytes 7216

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#29 2025-04-06 13:48:49 event 6937065 GET 301

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.57

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.57

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#30 2025-04-06 13:45:38 event 6936959 GET 404 bytes 7895

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#31 2025-04-06 13:45:38 event 6936957 GET 404 bytes 7895

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#32 2025-04-06 13:40:19 event 6936727 GET 200 bytes 7215

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#33 2025-03-25 12:35:16 event 3649284 GET 301 bytes 169

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#34 2025-03-25 12:34:18 event 3649276 GET 301 bytes 169

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#35 2025-03-25 12:32:51 event 3649271 GET 200 bytes 7190

ann base label observed

Request event observed

referer

http://68.183.80.204/

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

http://68.183.80.204/

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#36 2025-03-25 12:32:49 event 3649270 GET 301 bytes 169

ann base label observed

Request event observed

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#37 2025-03-25 12:32:19 event 3649266 GET 301 bytes 169

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#38 2025-03-25 12:30:01 event 3649242 GET 301 bytes 169

ann base label observed

Request event observed

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#39 2025-01-12 06:20:30 event 4145811 GET http —

ann base label observed

Request event observed

/.git/config

referer

—

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#40 2025-01-12 06:20:30 event 4145810 GET 499

ann base label observed

Request event observed

/.git/config

referer

Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.git/config

referer

Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#41 2025-01-12 06:20:30 event 4145811 GET http —

ann ua 6 label ua

Request Missing User-Agent header

/.git/config

referer

—

Annotation facts

label

rule

ua:missing

conf

60.00

details

Request had no User-Agent value (missing/empty field).

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

Missing User-Agent header

details

Request had no User-Agent value (missing/empty field).

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#42 2025-01-12 06:20:30 event 4145811 GET http —

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

—

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

—

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#43 2025-01-12 06:20:30 event 4145810 GET 499

ann sfp 24 label sensitive_file

Request Probe for Git metadata

/.git/config

referer

Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Annotation facts

label

sensitive_file

rule

sfp:file:git_metadata

conf

82.00

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

More (full fields + snapshot) expand

url

/.git/config

referer

Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

summary

Probe for Git metadata

details

Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#44 2025-01-12 06:14:06 event 4145769 GET 301

ann base label observed

Request event observed

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/favicon.ico

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#45 2025-01-12 06:10:42 event 4145759 GET 404 bytes 8109

ann base label observed

Request event observed

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#46 2025-01-12 06:10:42 event 4145759 GET 404 bytes 8109

ann ua 12 label ua

Request Headless browser/automation framework user-agent

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

Annotation facts

label

rule

ua:headless

conf

78.00

details

UA matched a headless/automation framework often seen in scripted browsing or scraping.

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

summary

Headless browser/automation framework user-agent

details

UA matched a headless/automation framework often seen in scripted browsing or scraping.

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#47 2025-01-12 06:10:42 event 4145759 GET 404 bytes 8109

ann bot 10 label bot

Request Bot user-agent detected: HeadlessChrome

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

Annotation facts

label

bot

rule

bot:headlesschrome

conf

95.00

details

Matched bot signature (explicit). Token='HeadlessChrome'. UA='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36'

More (full fields + snapshot) expand

url

/webui/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36

summary

Bot user-agent detected: HeadlessChrome

details

Matched bot signature (explicit). Token='HeadlessChrome'. UA='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36'

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#48 2025-01-12 06:05:30 event 4145735 GET 200 bytes 7180

ann base label observed

Request event observed

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

referer

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#49 2024-12-27 10:58:32 event 2530719 GET 301 bytes 169

ann base label observed

Request event observed

/geoserver/web/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 Safari/537.36

summary

event observed

details

—

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

#50 2024-12-27 10:58:32 event 2530719 GET 301 bytes 169

ann ua 12 label ua

Request Headless browser/automation framework user-agent

/geoserver/web/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 Safari/537.36

Annotation facts

label

rule

ua:headless

conf

78.00

details

UA matched a headless/automation framework often seen in scripted browsing or scraping.

More (full fields + snapshot) expand

url

/geoserver/web/

referer

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 Safari/537.36

summary

Headless browser/automation framework user-agent

details

UA matched a headless/automation framework often seen in scripted browsing or scraping.

subnet

216.218.206.0/24

asn

6939 — Hurricane Electric LLC

geo

United States, California, Cazadero

org

The Shadow Server Foundation

Log Explorer

Annotated access events

Confirm Action