Log Explorer

Fact drill-down for 20.83.160.122

Risk 15 LOW Scope All time All-time facts 152 In-scope 152 Filtered 152 Seen 2023-09-04 → 2023-09-04

Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

HTTP facets

Snapshot facets

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 90 sfp 42 trav 8 scan_velocity 8 cred 4

Top labels (facts, in-scope)

observed 90 sensitive_file 42 trav 8 scan_velocity 8 cred 4

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 4 — total 152 rows

← Prev Next →

#1 2023-09-04 00:56:47 event 318499 GET 404 bytes 179

ann base label observed

Request event observed

/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#2 2023-09-04 00:56:47 event 318498 GET 404 bytes 179

ann base label observed

Request event observed

/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#3 2023-09-04 00:56:47 event 318497 GET 404 bytes 179

ann base label observed

Request event observed

/prevlaravel/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/prevlaravel/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#4 2023-09-04 00:56:47 event 318496 GET 404 bytes 179

ann base label observed

Request event observed

/prevlaravel/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/prevlaravel/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#5 2023-09-04 00:56:46 event 318495 GET 404 bytes 179

ann base label observed

Request event observed

/sftp.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#6 2023-09-04 00:56:46 event 318494 GET 404 bytes 179

ann base label observed

Request event observed

/sftp.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#7 2023-09-04 00:56:46 event 318493 GET 404 bytes 179

ann base label observed

Request event observed

/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#8 2023-09-04 00:56:46 event 318492 GET 404 bytes 179

ann base label observed

Request event observed

/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#9 2023-09-04 00:56:46 event 318491 GET 404 bytes 179

ann base label observed

Request event observed

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#10 2023-09-04 00:56:46 event 318490 GET 404 bytes 179

ann base label observed

Request event observed

/.ssh/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.ssh/sftp-config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#11 2023-09-04 00:56:46 event 318489 GET 404 bytes 179

ann base label observed

Request event observed

/.vscode/sftp.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.vscode/sftp.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#12 2023-09-04 00:56:46 event 318488 GET 404 bytes 179

ann base label observed

Request event observed

/.vscode/sftp.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.vscode/sftp.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#13 2023-09-04 00:56:46 event 318491 GET 404 bytes 179

ann scan_velocity 14 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

85.00

details

rpm_equiv=54.7; score=7; window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=54.7; score=7; window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#14 2023-09-04 00:56:46 event 318491 GET 404 bytes 179

ann scan_velocity 14 label scan_velocity

Request Scan-velocity indicator: scanv:ext_enum

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

scan_velocity

rule

scanv:ext_enum

conf

85.00

details

ext_hits=44; score=7; window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Scan-velocity indicator: scanv:ext_enum

details

ext_hits=44; score=7; window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#15 2023-09-04 00:56:46 event 318491 GET 404 bytes 179

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/.ssh/sftp-config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Scan-velocity window summary

details

window=90s; total=82; rpm_equiv=54.7; upm_nonstatic_equiv=24.7; 404=44/82(0.54); ext_hits=44; ua_sig=0; methods=['GET', 'POST']

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#16 2023-09-04 00:56:45 event 318487 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#17 2023-09-04 00:56:45 event 318486 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#18 2023-09-04 00:56:45 event 318485 GET 404 bytes 179

ann base label observed

Request event observed

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#19 2023-09-04 00:56:45 event 318484 GET 404 bytes 179

ann base label observed

Request event observed

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#20 2023-09-04 00:56:45 event 318483 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#21 2023-09-04 00:56:45 event 318482 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#22 2023-09-04 00:56:45 event 318481 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#23 2023-09-04 00:56:45 event 318480 GET 404 bytes 179

ann base label observed

Request event observed

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#24 2023-09-04 00:56:45 event 318487 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.old'

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.old'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#25 2023-09-04 00:56:45 event 318486 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.old'

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.old'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#26 2023-09-04 00:56:45 event 318485 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.wp-config.php.swp'

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.wp-config.php.swp'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#27 2023-09-04 00:56:45 event 318484 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.wp-config.php.swp'

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/.wp-config.php.swp'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#28 2023-09-04 00:56:45 event 318483 GET 404 bytes 179

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/wp-config.php'

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/wp-config.php'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#29 2023-09-04 00:56:45 event 318482 GET 404 bytes 179

ann sfp 36 label sensitive_file

Request Probe for CMS/app configuration file

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

sensitive_file

rule

sfp:file:app_config

conf

88.00

details

Request targeted a common CMS/app configuration file. Snippet='/wp-config.php'

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Probe for CMS/app configuration file

details

Request targeted a common CMS/app configuration file. Snippet='/wp-config.php'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#30 2023-09-04 00:56:45 event 318481 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.bak'

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.bak'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#31 2023-09-04 00:56:45 event 318480 GET 404 bytes 179

ann sfp 16 label sensitive_file

Request Probe for backup/editor artifact

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

sensitive_file

rule

sfp:file:backup_artifact

conf

70.00

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.bak'

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Probe for backup/editor artifact

details

Request path contains a common backup/editor artifact extension/suffix. Snippet='/wp-config.php.bak'

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#32 2023-09-04 00:56:45 event 318487 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#33 2023-09-04 00:56:45 event 318486 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/wp-config.php.old

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#34 2023-09-04 00:56:45 event 318485 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#35 2023-09-04 00:56:45 event 318484 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/.wp-config.php.swp

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#36 2023-09-04 00:56:45 event 318483 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#37 2023-09-04 00:56:45 event 318482 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/wp-config.php

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#38 2023-09-04 00:56:45 event 318481 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#39 2023-09-04 00:56:45 event 318480 GET 404 bytes 179

ann trav 34 label trav

Request Path traversal / LFI indicator detected

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

trav

rule

trav:sensitive_target

conf

95.00

details

More (full fields + snapshot) expand

url

/wp-config.php.bak

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

Path traversal / LFI indicator detected

details

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#40 2023-09-04 00:56:44 event 318479 GET 404 bytes 179

ann base label observed

Request event observed

/config/config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/config.json

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#41 2023-09-04 00:56:44 event 318478 GET 404 bytes 179

ann base label observed

Request event observed

/config/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config/config.json

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#42 2023-09-04 00:56:44 event 318477 GET 404 bytes 179

ann base label observed

Request event observed

/helpers/utility.js

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/helpers/utility.js

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#43 2023-09-04 00:56:44 event 318476 GET 404 bytes 179

ann base label observed

Request event observed

/helpers/utility.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/helpers/utility.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#44 2023-09-04 00:56:44 event 318475 GET 404 bytes 179

ann base label observed

Request event observed

/config.js

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.js

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#45 2023-09-04 00:56:44 event 318474 GET 404 bytes 179

ann base label observed

Request event observed

/config.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/config.js

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#46 2023-09-04 00:56:44 event 318473 GET 404 bytes 179

ann base label observed

Request event observed

/.aws/credentials

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.aws/credentials

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#47 2023-09-04 00:56:44 event 318472 GET 404 bytes 179

ann base label observed

Request event observed

/.aws/credentials

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/.aws/credentials

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#48 2023-09-04 00:56:43 event 318471 GET 200 bytes 8191

ann base label observed

Request event observed

/?pp=env&pp=env

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?pp=env&pp=env

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#49 2023-09-04 00:56:43 event 318470 GET 200 bytes 8191

ann base label observed

Request event observed

/?pp=env&pp=env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?pp=env&pp=env

referer

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/100.0.0.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

#50 2023-09-04 00:56:43 event 318469 GET 200 bytes 8191

ann base label observed

Request event observed

/?pp=enable&pp=env

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?pp=enable&pp=env

referer

Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

summary

event observed

details

—

subnet

20.83.160.0/24

asn

8075 — Microsoft Corporation

geo

United States, Virginia, Boydton

org

Microsoft Azure Cloud (eastus)

Log Explorer

Annotated access events

Confirm Action