← Back to IP report

Log Explorer

Fact drill-down for 15.223.76.44

Risk 95 HIGH Scope All time All-time facts 2214 In-scope 2214 Filtered 2214 Seen 2023-10-24 → 2023-10-24

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 1015 cred — 408 trav — 387 sfp — 300 scan_velocity — 104 Severity (exact) (any) (none) — 1176 34 — 403 40 — 204 8 — 136 10 — 136 16 — 88 36 — 24 32 — 18 26 — 7 22 — 7 30 — 6 24 — 6 28 — 3 Label (exact) (any) observed — 1015 cred — 408 trav — 387 sensitive_file — 300 scan_velocity — 104

HTTP facets

Method (exact, case-insensitive) (any) GET — 2214 HTTP status (exact) (any) 403 — 682 404 — 650 200 — 638 302 — 244

Snapshot facets

Subnet (exact) (any) 15.223.76.0/24 — 2214 ASN (exact) (any) 16509 — 2214 Country / Region / City (exact)

(any country) Canada — 2214 (any region) Ontario — 2214

(any city) Toronto — 2214

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 1015 cred 408 trav 387 sfp 300 scan_velocity 104

Top labels (facts, in-scope)

observed 1015 cred 408 trav 387 sensitive_file 300 scan_velocity 104

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 45 — total 2214 rows

← Prev Next →

#1 2023-10-24 17:31:51 event 324279 GET 404 bytes 6391

ann base label observed

Request event observed

/database.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/database.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#2 2023-10-24 17:31:50 event 324277 GET 404 bytes 6391

ann base label observed

Request event observed

/secrets.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/secrets.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#3 2023-10-24 17:31:50 event 324275 GET 404 bytes 6391

ann base label observed

Request event observed

/config/secrets.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/secrets.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#4 2023-10-24 17:31:49 event 324273 GET 404 bytes 6391

ann base label observed

Request event observed

/app/config/parameters.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/config/parameters.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#5 2023-10-24 17:31:49 event 324271 GET 404 bytes 6391

ann base label observed

Request event observed

/app/config.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/app/config.yml

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#6 2023-10-24 17:31:48 event 324269 GET 404 bytes 6391

ann base label observed

Request event observed

/env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/env.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#7 2023-10-24 17:31:48 event 324267 GET 404 bytes 6391

ann base label observed

Request event observed

/env.config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/env.config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#8 2023-10-24 17:31:47 event 324265 GET 404 bytes 6391

ann base label observed

Request event observed

/js/envConfig.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/js/envConfig.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#9 2023-10-24 17:31:47 event 324263 GET 404 bytes 6391

ann base label observed

Request event observed

/js/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/js/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#10 2023-10-24 17:31:46 event 324261 GET 404 bytes 6391

ann base label observed

Request event observed

/config/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#11 2023-10-24 17:31:46 event 324259 GET 404 bytes 6391

ann base label observed

Request event observed

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#12 2023-10-24 17:31:46 event 324259 GET 404 bytes 6391

ann scan_velocity 32 label scan_velocity

Request Scan-velocity indicator: scanv:ext_enum

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:ext_enum

conf

85.00

details

ext_hits=32; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity indicator: scanv:ext_enum

details

ext_hits=32; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#13 2023-10-24 17:31:46 event 324259 GET 404 bytes 6391

ann scan_velocity 32 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

85.00

details

rpm_equiv=121.3; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=121.3; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#14 2023-10-24 17:31:46 event 324259 GET 404 bytes 6391

ann scan_velocity 32 label scan_velocity

Request Scan-velocity indicator: scanv:unique_paths

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:unique_paths

conf

85.00

details

upm_nonstatic_equiv=112.7; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity indicator: scanv:unique_paths

details

upm_nonstatic_equiv=112.7; score=16; window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#15 2023-10-24 17:31:46 event 324259 GET 404 bytes 6391

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

More (full fields + snapshot) expand

url

/config.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Scan-velocity window summary

details

window=90s; total=182; rpm_equiv=121.3; upm_nonstatic_equiv=112.7; 404=44/182(0.24); ext_hits=32; ua_sig=0; methods=['GET']

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#16 2023-10-24 17:31:45 event 324257 GET 404 bytes 6391

ann base label observed

Request event observed

/index.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/index.js

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#17 2023-10-24 17:31:44 event 324255 GET 404 bytes 6391

ann base label observed

Request event observed

/frontend_dev.php/$

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/frontend_dev.php/$

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#18 2023-10-24 17:31:44 event 324253 GET 200 bytes 8541

ann base label observed

Request event observed

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#19 2023-10-24 17:31:43 event 324251 GET 404 bytes 6391

ann base label observed

Request event observed

/debug/default/view?panel=config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/debug/default/view?panel=config

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#20 2023-10-24 17:31:41 event 324244 GET 403 bytes 555

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wordpress/wp-config~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config~'

More (full fields + snapshot) expand

url

/wordpress/wp-config~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config~'

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#21 2023-10-24 17:31:41 event 324246 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-configbak

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-configbak

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#22 2023-10-24 17:31:41 event 324244 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#23 2023-10-24 17:31:40 event 324242 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#24 2023-10-24 17:31:40 event 324240 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#25 2023-10-24 17:31:39 event 324234 GET 403 bytes 555

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wordpress/wp-config.save

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.save'

More (full fields + snapshot) expand

url

/wordpress/wp-config.save

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.save'

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#26 2023-10-24 17:31:39 event 324238 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.temp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.temp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#27 2023-10-24 17:31:39 event 324236 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.tar

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.tar

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#28 2023-10-24 17:31:39 event 324234 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.save

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.save

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#29 2023-10-24 17:31:38 event 324232 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.prod.php.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.prod.php.txt

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#30 2023-10-24 17:31:38 event 324230 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phptmp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phptmp

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#31 2023-10-24 17:31:37 event 324228 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phporiginal

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phporiginal

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#32 2023-10-24 17:31:37 event 324226 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpold

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpold

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#33 2023-10-24 17:31:36 event 324224 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpnew

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpnew

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#34 2023-10-24 17:31:36 event 324222 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpn

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpn

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#35 2023-10-24 17:31:35 event 324220 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpd

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpd

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#36 2023-10-24 17:31:35 event 324218 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpc

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#37 2023-10-24 17:31:34 event 324216 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpbak

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpbak

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#38 2023-10-24 17:31:34 event 324214 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpb

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpb

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#39 2023-10-24 17:31:33 event 324212 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.phpa

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.phpa

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#40 2023-10-24 17:31:33 event 324210 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.php1

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.php1

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#41 2023-10-24 17:31:32 event 324208 GET 403 bytes 555

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#42 2023-10-24 17:31:32 event 324206 GET 403 bytes 555

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#43 2023-10-24 17:31:32 event 324208 GET 403 bytes 555

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.php~~~'

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.php~~~'

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#44 2023-10-24 17:31:32 event 324206 GET 403 bytes 555

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.php~'

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wordpress/wp-config.php~'

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#45 2023-10-24 17:31:32 event 324208 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~~~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#46 2023-10-24 17:31:32 event 324206 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.php~

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#47 2023-10-24 17:31:31 event 324204 GET 403 bytes 555

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wordpress/wp-config.php=

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wordpress/wp-config.php=

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#48 2023-10-24 17:31:31 event 324202 GET 403 bytes 555

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wordpress/wp-config.php.us

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wordpress/wp-config.php.us

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#49 2023-10-24 17:31:31 event 324200 GET 403 bytes 555

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wordpress/wp-config.php.uk

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wordpress/wp-config.php.uk

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

#50 2023-10-24 17:31:31 event 324204 GET 403 bytes 555

ann base label observed

Request event observed

/wordpress/wp-config.php=

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wordpress/wp-config.php=

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

summary

event observed

details

—

subnet

15.223.76.0/24

asn

16509 — Amazon.com, Inc.

geo

Canada, Ontario, Toronto

org

AWS EC2 (ca-central-1)

Page 1 of 45

← Prev Next →