DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 51.75.249.247
Risk 11 LOW Scope All time All-time facts 70 In-scope 70 Filtered 70 Seen 2025-04-14 → 2025-08-25
Reset (all-time)
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
sfp 22 trav 18 base 15 ua 15
Top labels (facts, in-scope)
sensitive_file 22 trav 18 observed 15 ua 15
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 70 rows
# 2025-08-25 01:54:44 event 13290753 GET 499
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-25 01:54:44 event 13290753 GET 499
ann base label observed
Request event observed
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-25 01:54:33 event 13290748 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-25 01:54:33 event 13290748 GET 301 bytes 178
ann base label observed
Request event observed
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-16 22:51:30 event 15141014 GET 499
ann base label observed
Request event observed
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-16 22:51:30 event 15141014 GET 499
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-16 22:51:19 event 15141007 GET 301 bytes 178
ann base label observed
Request event observed
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-08-16 22:51:19 event 15141007 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/api/index.php/v1/config/application?public=true
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:28 event 5680249 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:28 event 5680249 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:28 event 5680249 GET 301 bytes 178
ann base label observed
Request event observed
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680247 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680245 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680247 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680245 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680247 GET 301 bytes 178
ann base label observed
Request event observed
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:27 event 5680245 GET 301 bytes 178
ann base label observed
Request event observed
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:26 event 5680240 GET 301 bytes 178
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:26 event 5680240 GET 301 bytes 178
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-26 11:04:26 event 5680240 GET 301 bytes 178
ann base label observed
Request event observed
/.env
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann trav 34 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:sensitive_target
conf
95.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann sfp 36 label sensitive_file
Request Probe for CMS/app configuration file
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:app_config
conf
88.00
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Probe for CMS/app configuration file
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:50 event 11831809 GET 301 bytes 169
ann base label observed
Request event observed
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann trav 34 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:sensitive_target
conf
95.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann trav 34 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:sensitive_target
conf
95.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann sfp 36 label sensitive_file
Request Probe for CMS/app configuration file
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:app_config
conf
88.00
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Probe for CMS/app configuration file
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann sfp 36 label sensitive_file
Request Probe for CMS/app configuration file
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:file:app_config
conf
88.00
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Probe for CMS/app configuration file
details
Request targeted a common CMS/app configuration file. Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831808 GET 301 bytes 169
ann base label observed
Request event observed
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:49 event 11831807 GET 301 bytes 169
ann base label observed
Request event observed
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
event observed
details
—
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann trav 34 label trav
Request Path traversal / LFI indicator detected
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
trav
rule
trav:sensitive_target
conf
95.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
# 2025-05-13 06:59:48 event 11831804 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
More (full fields + snapshot) expand
url
/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
referer
-
UA
python-requests/2.22.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php'
subnet
51.75.249.0/24
asn
16276 — OVH SAS
geo
France, Hauts-de-France, Roubaix
org
OVH
Page 1 of 2