DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back to IP report

Log Explorer

Fact drill-down for 18.201.70.75
Risk 4 LOW Scope All time All-time facts 46 In-scope 46 Filtered 46 Seen 2025-01-31 → 2025-01-31
Reset (all-time)
Active (none) Clear
Faceted filters (facts-based) exact core + snapshot + optional start/end
Annotation facets
HTTP facets
Snapshot facets
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base 20 trav 10 ua 8 sfp 5 scan_velocity 2 method 1
Top labels (facts, in-scope)
observed 20 trav 10 ua 8 sensitive_file 5 scan_velocity 2 method 1
Click a pill to apply it as a filter.

Annotated access events

Showing page 1 / 1 — total 46 rows
#1 2025-01-31 07:12:22 event 2954765 GET 301 bytes 169
ann base label observed
Request event observed
/api/geojson?url=file:///etc/hosts
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/api/geojson?url=file:///etc/hosts
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#2 2025-01-31 07:12:22 event 2954764 GET 301 bytes 169
ann base label observed
Request event observed
/info.php
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/info.php
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#3 2025-01-31 07:12:22 event 2954765 GET 301 bytes 169
ann trav 30 label trav
Request Path traversal / LFI indicator detected
/api/geojson?url=file:///etc/hosts
referer
-
UA
l9explore/1.2.2
Annotation facts
label
trav
rule
trav:wrapper
conf
94.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/api/geojson?url=file:///etc/hosts
referer
-
UA
l9explore/1.2.2
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#4 2025-01-31 07:12:21 event 2954763 GET 301 bytes 169
ann base label observed
Request event observed
/.env
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.env
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#5 2025-01-31 07:12:21 event 2954762 GET 301 bytes 169
ann base label observed
Request event observed
/login.action
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/login.action
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#6 2025-01-31 07:12:21 event 2954761 GET 301 bytes 169
ann base label observed
Request event observed
/.json
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.json
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#7 2025-01-31 07:12:21 event 2954763 GET 301 bytes 169
ann scan_velocity 12 label scan_velocity
Request Scan-velocity indicator: scanv:ua_signature
/.env
referer
-
UA
l9explore/1.2.2
Annotation facts
label
scan_velocity
rule
scanv:ua_signature
conf
85.00
details
ua=scanner_signature; score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=0/18(0.00); ext_hits=0; ua_sig=1; methods=['GET', '\\X16\\X03\\X01\\X00']
More (full fields + snapshot) expand
url
/.env
referer
-
UA
l9explore/1.2.2
summary
Scan-velocity indicator: scanv:ua_signature
details
ua=scanner_signature; score=6; window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=0/18(0.00); ext_hits=0; ua_sig=1; methods=['GET', '\\X16\\X03\\X01\\X00']
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#8 2025-01-31 07:12:21 event 2954763 GET 301 bytes 169
ann scan_velocity label scan_velocity
Request Scan-velocity window summary
/.env
referer
-
UA
l9explore/1.2.2
Annotation facts
label
scan_velocity
rule
scanv:window
conf
—
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=0/18(0.00); ext_hits=0; ua_sig=1; methods=['GET', '\\X16\\X03\\X01\\X00']
More (full fields + snapshot) expand
url
/.env
referer
-
UA
l9explore/1.2.2
summary
Scan-velocity window summary
details
window=90s; total=18; rpm_equiv=12.0; upm_nonstatic_equiv=8.7; 404=0/18(0.00); ext_hits=0; ua_sig=1; methods=['GET', '\\X16\\X03\\X01\\X00']
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#9 2025-01-31 07:12:21 event 2954763 GET 301 bytes 169
ann sfp 40 label sensitive_file
Request Probe for environment/secret file (.env)
/.env
referer
-
UA
l9explore/1.2.2
Annotation facts
label
sensitive_file
rule
sfp:file:env
conf
92.00
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
More (full fields + snapshot) expand
url
/.env
referer
-
UA
l9explore/1.2.2
summary
Probe for environment/secret file (.env)
details
Request targeted a .env-style file (often contains secrets). Snippet='/.env'
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#10 2025-01-31 07:12:20 event 2954760 GET 301 bytes 169
ann base label observed
Request event observed
/telescope/requests
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/telescope/requests
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#11 2025-01-31 07:12:20 event 2954759 GET 301 bytes 169
ann base label observed
Request event observed
/idx_config/
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/idx_config/
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#12 2025-01-31 07:12:20 event 2954758 GET 301 bytes 169
ann base label observed
Request event observed
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#13 2025-01-31 07:12:20 event 2954757 GET 301 bytes 169
ann base label observed
Request event observed
/config.json
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/config.json
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#14 2025-01-31 07:12:20 event 2954758 GET 301 bytes 169
ann sfp 24 label sensitive_file
Request Probe for Git metadata
/.git/config
referer
-
UA
l9explore/1.2.2
Annotation facts
label
sensitive_file
rule
sfp:file:git_metadata
conf
82.00
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
More (full fields + snapshot) expand
url
/.git/config
referer
-
UA
l9explore/1.2.2
summary
Probe for Git metadata
details
Request targeted Git metadata (can reveal source/config). Snippet='/.git/config'
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#15 2025-01-31 07:12:19 event 2954754 GET 301 bytes 169
ann ua 10 label ua
Request HTTP library/automation runtime user-agent
/.DS_Store
referer
-
UA
Go-http-client/1.1
Annotation facts
label
ua
rule
ua:library_client
conf
72.00
details
UA indicates a low-level HTTP client library or automation runtime.
More (full fields + snapshot) expand
url
/.DS_Store
referer
-
UA
Go-http-client/1.1
summary
HTTP library/automation runtime user-agent
details
UA indicates a low-level HTTP client library or automation runtime.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#16 2025-01-31 07:12:19 event 2954756 GET 301 bytes 169
ann base label observed
Request event observed
/server-status
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/server-status
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#17 2025-01-31 07:12:19 event 2954755 GET 301 bytes 169
ann base label observed
Request event observed
/s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties
referer
-
UA
l9explore/1.2.2
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties
referer
-
UA
l9explore/1.2.2
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#18 2025-01-31 07:12:19 event 2954754 GET 301 bytes 169
ann base label observed
Request event observed
/.DS_Store
referer
-
UA
Go-http-client/1.1
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/.DS_Store
referer
-
UA
Go-http-client/1.1
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#19 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#20 2025-01-31 07:12:18 event 2954751 GET 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
/
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
/
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#21 2025-01-31 07:12:18 event 2954750 \X16\X03\X01\X00 400 bytes 157
ann ua 8 label ua
Request Very short User-Agent string
\x82B
referer
-
UA
-
Annotation facts
label
ua
rule
ua:very_short
conf
65.00
details
Short/generic UAs are common in basic scripts and commodity automation.
More (full fields + snapshot) expand
url
\x82B
referer
-
UA
-
summary
Very short User-Agent string
details
Short/generic UAs are common in basic scripts and commodity automation.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#22 2025-01-31 07:12:18 event 2954749 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#23 2025-01-31 07:12:18 event 2954748 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#24 2025-01-31 07:12:18 event 2954747 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#25 2025-01-31 07:12:18 event 2954746 GET http —
ann ua 6 label ua
Request Missing User-Agent header
/
referer
—
UA
—
Annotation facts
label
ua
rule
ua:missing
conf
60.00
details
Request had no User-Agent value (missing/empty field).
More (full fields + snapshot) expand
url
/
referer
—
UA
—
summary
Missing User-Agent header
details
Request had no User-Agent value (missing/empty field).
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#26 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann base label observed
Request event observed
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#27 2025-01-31 07:12:18 event 2954752 GET 301 bytes 169
ann base label observed
Request event observed
/
referer
-
UA
l9tcpid/v1.1.0
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/
referer
-
UA
l9tcpid/v1.1.0
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#28 2025-01-31 07:12:18 event 2954751 GET 400 bytes 157
ann base label observed
Request event observed
/
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/
referer
-
UA
-
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#29 2025-01-31 07:12:18 event 2954750 \X16\X03\X01\X00 400 bytes 157
ann base label observed
Request event observed
\x82B
referer
-
UA
-
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
\x82B
referer
-
UA
-
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#30 2025-01-31 07:12:18 event 2954749 GET http —
ann base label observed
Request event observed
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#31 2025-01-31 07:12:18 event 2954748 GET http —
ann base label observed
Request event observed
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#32 2025-01-31 07:12:18 event 2954747 GET http —
ann base label observed
Request event observed
/
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/
referer
—
UA
—
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#33 2025-01-31 07:12:18 event 2954746 GET http —
ann base label observed
Request event observed
/
referer
—
UA
—
Annotation facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot) expand
url
/
referer
—
UA
—
summary
event observed
details
—
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#34 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#35 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#36 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann trav 30 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
trav
rule
trav:encoded_dotdot
conf
93.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#37 2025-01-31 07:12:18 event 2954749 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#38 2025-01-31 07:12:18 event 2954749 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#39 2025-01-31 07:12:18 event 2954749 GET http —
ann trav 30 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:encoded_dotdot
conf
93.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#40 2025-01-31 07:12:18 event 2954748 GET http —
ann trav 26 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:mixed_separators
conf
90.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#41 2025-01-31 07:12:18 event 2954748 GET http —
ann trav 28 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:dotdot_slash
conf
92.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#42 2025-01-31 07:12:18 event 2954748 GET http —
ann trav 30 label trav
Request Path traversal / LFI indicator detected
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
trav
rule
trav:encoded_dotdot
conf
93.00
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Path traversal / LFI indicator detected
details
Detected explicit traversal/LFI mechanics (dotdot segments, encoded traversal, local file / stream wrappers, or sensitive file targets). This annotator intentionally does not fire on mere URL depth or on traversal-ish parameter names without mechanics.
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#43 2025-01-31 07:12:18 event 2954753 GET 400 bytes 157
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
-
UA
-
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#44 2025-01-31 07:12:18 event 2954749 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#45 2025-01-31 07:12:18 event 2954748 GET http —
ann sfp 34 label sensitive_file
Request Directory traversal indicator
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
Annotation facts
label
sensitive_file
rule
sfp:traversal
conf
86.00
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
More (full fields + snapshot) expand
url
/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
referer
—
UA
—
summary
Directory traversal indicator
details
Traversal sequences were present (raw or encoded). Snippet='/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts'
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
#46 2025-01-31 07:12:18 event 2954750 \X16\X03\X01\X00 400 bytes 157
ann method 10 label method
Request Non-RFC HTTP method token
\x82B
referer
-
UA
-
Annotation facts
label
method
rule
method:non_rfc_token
conf
92.00
details
HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).
More (full fields + snapshot) expand
url
\x82B
referer
-
UA
-
summary
Non-RFC HTTP method token
details
HTTP method contains characters not allowed by RFC 9110 token grammar (often request smuggling/probing artifacts).
subnet
18.201.70.0/24
asn
16509 — Amazon.com, Inc.
geo
Ireland, Leinster, Dublin
org
AWS EC2 (eu-west-1)
Page 1 of 1