ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

All recent homepage requests, newest first. This page does not mint a new trace (unlike /), so you can browse the log without adding noise.

Recent homepage requests

Filter by user agent and the matching requests appear right below. Showing requests whose user agent contains Mozilla/5.0.

clear
TimestampUser AgentAssets
2026-06-24 04:32:01.113 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/149.0.7827.137 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-24 04:27:56.776 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.9 Safari/536.5 0
no JS—
2026-06-24 04:11:49.057 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-24 04:00:07.282 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36 17
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconpreloadprefetchiframeiframe-img@import
2026-06-24 03:32:59.927 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 0
no JS—
2026-06-24 03:20:52.645 UTC Mozilla/5.0 0
no JS—
2026-06-24 02:50:11.484 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.2903.51 0
no JS—
2026-06-24 02:45:36.507 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 0
no JS—
2026-06-24 02:17:46.254 UTC Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0
no JS—
2026-06-24 02:14:01.606 UTC Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Mobile Safari/537.36 (compatible; GoogleOther) 6
no JSCSSJSmoduleprefetchiframe@import
2026-06-24 01:31:51.052 UTC Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) 2
no JSfaviconapple-icon
2026-06-24 00:51:07.394 UTC Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0) 0
no JS—
2026-06-23 23:48:57.646 UTC Mozilla/5.0 (compatible; Drupalbot; +https://www.drupal.org) 0
no JS—
2026-06-23 23:21:03.822 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.3 18
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconpreloadprefetchiframe@importCSP reportreport-api
2026-06-23 22:47:15.661 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-23 22:37:07.408 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36 16
JS ranCSSJSmoduleimgfontcss-bgcss-fontpreloadprefetchiframeiframe-img@importCSP reportreport-api
2026-06-23 21:50:53.392 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 0
no JS—
2026-06-23 21:46:36.184 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36 17
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconpreloadprefetchiframeiframe-img@import
2026-06-23 21:05:12.298 UTC Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 0
no JS—
2026-06-23 20:26:52.068 UTC Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Mobile Safari/537.36 (compatible; GoogleOther) 6
no JSCSSJSmoduleprefetchiframe@import
2026-06-23 20:04:35.921 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 0
no JS—
2026-06-23 19:33:57.397 UTC Mozilla/5.0 (compatible; CT-WP-Scanner/1.0; +https://example.com/bot) 0
no JS—
2026-06-23 19:29:32.106 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 0
no JS—
2026-06-23 18:38:46.939 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-23 18:35:32.122 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-23 18:35:24.783 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1 22
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconmanifestpreloadprefetchiframeiframe-img@importCSP reportreport-api
2026-06-23 18:27:28.473 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 0
no JS—
2026-06-23 18:22:02.688 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 0
no JS—
2026-06-23 18:19:49.553 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 0
no JS—
2026-06-23 17:44:42.416 UTC Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) 12
no JSCSSJSmoduleimgfontfaviconapple-iconmanifestpreloadprefetchiframeiframe-img
2026-06-23 17:43:34.445 UTC Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36 18
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconmanifestpreload@importCSP reportreport-api
2026-06-23 17:43:17.361 UTC Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36 19
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconmanifestpreloadprefetch@importCSP reportreport-api
2026-06-23 17:42:54.377 UTC Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36 19
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconmanifestpreloadprefetch@importCSP reportreport-api
2026-06-23 17:42:22.016 UTC Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36 24
JS ranCSSmoduleimgfontcss-bgcss-fontfaviconapple-iconmanifestprefetchiframeiframe-img@importCSP reportreport-api
2026-06-23 17:17:20.700 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-23 17:14:17.396 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0
no JS—
2026-06-23 17:14:15.926 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0
no JS—
2026-06-23 17:13:33.677 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 0
no JS—
2026-06-23 17:13:32.238 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 0
no JS—
2026-06-23 17:10:52.722 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 3
no JSJSmodulemanifest
2026-06-23 17:07:00.192 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0
no JS—
2026-06-23 16:51:33.831 UTC Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.32.1743 19
JS ranCSSJSmoduleimgfontcss-fontmanifestpreloadiframe@importCSP reportreport-api
2026-06-23 16:48:37.375 UTC Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36 4
no JSCSSfontpreloadprefetch
2026-06-23 16:45:52.533 UTC Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 2
no JSJSmodule
2026-06-23 16:38:15.383 UTC Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 2
no JSJSmodule
2026-06-23 16:15:16.526 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36 16
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconprefetchiframeiframe-img@import
2026-06-23 16:06:49.358 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 0
no JS—
2026-06-23 16:02:33.499 UTC Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 0
no JS—
2026-06-23 15:43:12.550 UTC Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) 3
no JSJSmodulemanifest
2026-06-23 15:36:14.115 UTC Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 20
JS ranCSSJSmoduleimgfontcss-bgcss-fontfaviconapple-iconmanifestpreloadprefetchiframe-img@importCSP reportreport-api
← prev1–50 of 162next →

By user agent

Running counts across the last 200 homepage requests (95 distinct agents). Click one to set the filter above.

User AgentRequestsJS ran
Go-http-client/1.1 11 0
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/6… 10 0
TLM-Audit-Scanner/1.0 9 0
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)… 7 7
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gec… 7 5
okhttp/5.3.0 6 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 5 0
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)… 5 2
TelegramBot (like TwitterBot) 5 0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KH… 4 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 4 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 4 0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KH… 4 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 3 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 3 0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l… 3 0
Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.htm… 3 0
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGP… 3 0
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gec… 3 0
Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWeb… 3 3
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firef… 3 0
Mozilla/5.0 (l9scan/2.0.037313e2037313e27363e29363; +https://leakix.ne… 3 0
Mozilla/5.0 2 0
Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/… 2 0
Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-me… 2 0
← prev1–25 of 95next →

Unsolicited / well-known requests

Paths a user agent fetched on its own that ua-tracer never links to: robots.txt, sitemap.xml, /.well-known/*, llms.txt, the root favicon, and similar. Reveals what an agent probes on its own initiative.

Filtered to path /.well-known/security.txt to user agent Mozilla/5.0. clear filters

By path

Each unsolicited path with its request count and how many distinct user agents hit it. Click a path to see the individual requests; click a user agent below to reverse-look-up everything that UA did.

PathRequestsDistinct UAs
/robots.txt 72 12
/sitemap.xml 16 7
/favicon.ico 16 11
/sitemap_index.xml 2 2
/.well-known/security.txt 1 1
/.well-known/webmcp.json 1 1
/humans.txt 1 1

Requests (1 shown)

The Related trace column links a probe to a homepage trace from the same user agent and IP within 30 minutes (the same crawler that fetched a well-known file usually also loaded /). The offset shows how long before/after the probe that trace was minted.

TimestampPathUser Agent (click for reverse lookup)Related trace
2026-06-23 09:10:05.941 UTC /.well-known/security.txt Mozilla/5.0 (l9scan/2.0.037313e2037313e27363e29363; +https://leakix.net) 0NoZEJ2k (+6.0s)

← back to the live tracer (mints a new trace)