DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 139.196.95.112
Risk 7 LOW Scope All time All-time facts 58 In-scope 58 Filtered 58 Seen 2024-05-27 → 2024-05-31
Reset (all-time)
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base 26 sfp 16 trav 16
Top labels (facts, in-scope)
observed 26 trav 16 sensitive_file 16
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 2 — total 58 rows
#1 2024-05-31 08:43:40 event 1372414 GET 404 bytes 19155
ann base label observed
Request event observed
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#2 2024-05-31 08:43:40 event 1372413 GET 404 bytes 19155
ann base label observed
Request event observed
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#3 2024-05-31 08:43:37 event 1372412 GET 301 bytes 169
ann base label observed
Request event observed
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#4 2024-05-31 08:43:37 event 1372411 GET 404 bytes 19155
ann base label observed
Request event observed
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#5 2024-05-31 08:43:37 event 1372410 GET 301 bytes 169
ann base label observed
Request event observed
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#6 2024-05-31 08:43:37 event 1372409 GET 404 bytes 19155
ann base label observed
Request event observed
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#7 2024-05-31 08:43:34 event 1372408 GET 301 bytes 169
ann base label observed
Request event observed
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#8 2024-05-31 08:43:34 event 1372407 GET 301 bytes 169
ann base label observed
Request event observed
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/conf/magmi.ini
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#9 2024-05-30 07:53:28 event 1330330 GET 404 bytes 19155
ann base label observed
Request event observed
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#10 2024-05-30 07:53:28 event 1330330 GET 404 bytes 19155
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#11 2024-05-30 07:53:28 event 1330330 GET 404 bytes 19155
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#12 2024-05-30 07:53:28 event 1330330 GET 404 bytes 19155
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#13 2024-05-30 07:53:28 event 1330330 GET 404 bytes 19155
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#14 2024-05-30 07:53:26 event 1330328 GET 301 bytes 169
ann base label observed
Request event observed
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#15 2024-05-30 07:53:26 event 1330326 GET 404 bytes 19155
ann base label observed
Request event observed
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#16 2024-05-30 07:53:26 event 1330328 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#17 2024-05-30 07:53:26 event 1330328 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#18 2024-05-30 07:53:26 event 1330326 GET 404 bytes 19155
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#19 2024-05-30 07:53:26 event 1330326 GET 404 bytes 19155
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#20 2024-05-30 07:53:26 event 1330328 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#21 2024-05-30 07:53:26 event 1330328 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/shop/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#22 2024-05-30 07:53:26 event 1330326 GET 404 bytes 19155
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#23 2024-05-30 07:53:26 event 1330326 GET 404 bytes 19155
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/magmi/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/magmi/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#24 2024-05-30 07:53:23 event 1330323 GET 301 bytes 169
ann base label observed
Request event observed
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#25 2024-05-30 07:53:23 event 1330323 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#26 2024-05-30 07:53:23 event 1330323 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#27 2024-05-30 07:53:23 event 1330323 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#28 2024-05-30 07:53:23 event 1330323 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/magmi/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/magmi/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/magmi/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#29 2024-05-29 10:07:24 event 1266012 GET 404 bytes 19155
ann base label observed
Request event observed
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#30 2024-05-29 10:07:24 event 1266012 GET 404 bytes 19155
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#31 2024-05-29 10:07:24 event 1266012 GET 404 bytes 19155
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#32 2024-05-29 10:07:24 event 1266012 GET 404 bytes 19155
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#33 2024-05-29 10:07:24 event 1266012 GET 404 bytes 19155
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#34 2024-05-29 10:07:21 event 1266011 GET 301 bytes 169
ann base label observed
Request event observed
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#35 2024-05-29 10:07:21 event 1266010 GET 404 bytes 19155
ann base label observed
Request event observed
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#36 2024-05-29 10:07:21 event 1266011 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#37 2024-05-29 10:07:21 event 1266011 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#38 2024-05-29 10:07:21 event 1266010 GET 404 bytes 19155
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#39 2024-05-29 10:07:21 event 1266010 GET 404 bytes 19155
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#40 2024-05-29 10:07:21 event 1266011 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#41 2024-05-29 10:07:21 event 1266011 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/shop/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#42 2024-05-29 10:07:21 event 1266010 GET 404 bytes 19155
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#43 2024-05-29 10:07:21 event 1266010 GET 404 bytes 19155
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#44 2024-05-29 10:07:18 event 1266009 GET 301 bytes 169
ann base label observed
Request event observed
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#45 2024-05-29 10:07:18 event 1266009 GET 301 bytes 169
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#46 2024-05-29 10:07:18 event 1266009 GET 301 bytes 169
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#47 2024-05-29 10:07:18 event 1266009 GET 301 bytes 169
ann sfp 8 label sensitive_file
Request File/path-style parameter observed (weak hint)
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:param:file_path_hint
conf
60.00
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
File/path-style parameter observed (weak hint)
details
A file/path/download-style parameter was present; treated as a weak correlating hint. Snippet='file/path/download param present'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#48 2024-05-29 10:07:18 event 1266009 GET 301 bytes 169
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
More (full fields + snapshot) expand
url
/magmi-importer/web/download_file.php?file=../../app/etc/local.xml
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/magmi-importer/web/download_file.php?file=../../app/etc/local.xml'
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#49 2024-05-28 10:27:57 event 1230306 GET 404 bytes 19155
ann base label observed
Request event observed
/var/resource_config.json
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/var/resource_config.json
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
#50 2024-05-28 10:27:54 event 1230305 GET 301 bytes 169
ann base label observed
Request event observed
/var/resource_config.json
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/var/resource_config.json
referer
-
UA
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0
summary
event observed
details
—
subnet
139.196.95.0/24
asn
37963 — Hangzhou Alibaba Advertising Co.,Ltd.
geo
China, Shanghai, Shanghai
org
Aliyun Computing Co., LTD
Page 1 of 2