← Back to IP report
Log Explorer
Fact drill-down for
66.55.67.201
Risk
3
LOW
Scope
All time
All-time facts
206
In-scope
206
Filtered
206
Seen
2023-11-09
→
2023-11-09
Freestyle query (contains)
Time (days, optional)
Page size
25
50
100
200
Apply
Reset (all-time)
Active
(none)
Clear
Faceted filters (facts-based)
exact core + snapshot + optional start/end
Annotation facets
Annotator (exact)
(any)
base — 171
scan_velocity — 23
cred — 12
Severity (exact)
(any)
(none) — 182
10 — 15
12 — 5
14 — 2
16 — 2
Label (exact)
(any)
observed — 171
scan_velocity — 23
cred — 12
HTTP facets
Method (exact, case-insensitive)
(any)
GET — 206
HTTP status (exact)
(any)
301 — 206
Snapshot facets
Subnet (exact)
(any)
66.55.67.0/24 — 206
ASN (exact)
(any)
36007 — 206
Country / Region / City (exact)
(any country)
United States — 206
(any region)
Illinois — 206
(any city)
Chicago — 206
Org contains (ip_org or as_org_name)
Custom time window (optional override)
Provide start/end to scope time explicitly (overrides days). Leave blank for all-time.
Start
End
Tip: keep windows tight when you need speed, but the default is fact-complete.
Top annotators (facts, in-scope)
base
171
scan_velocity
23
cred
12
Top labels (facts, in-scope)
observed
171
scan_velocity
23
cred
12
Click a pill to apply it as a filter.
Annotated access events
Showing page
1
/
5
— total
206
rows
← Prev
Next →
#
1
2023-11-09 01:13:08
event
497810
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
2
2023-11-09 01:13:08
event
497809
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/z.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/z.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
3
2023-11-09 01:13:08
event
497808
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
4
2023-11-09 01:13:08
event
497808
GET
301
bytes
169
ann
scan_velocity
16
label
scan_velocity
Request
Scan-velocity indicator: scanv:unique_paths
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:unique_paths
conf
70.00
details
upm_nonstatic_equiv=72.0; score=8; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
Scan-velocity indicator: scanv:unique_paths
details
upm_nonstatic_equiv=72.0; score=8; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
5
2023-11-09 01:13:08
event
497808
GET
301
bytes
169
ann
scan_velocity
16
label
scan_velocity
Request
Scan-velocity indicator: scanv:rpm
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:rpm
conf
70.00
details
rpm_equiv=112.7; score=8; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
Scan-velocity indicator: scanv:rpm
details
rpm_equiv=112.7; score=8; window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
6
2023-11-09 01:13:08
event
497808
GET
301
bytes
169
ann
scan_velocity
label
scan_velocity
Request
Scan-velocity window summary
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:window
conf
—
details
window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/2.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
Scan-velocity window summary
details
window=90s; total=169; rpm_equiv=112.7; upm_nonstatic_equiv=72.0; 404=0/169(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
7
2023-11-09 01:13:07
event
497807
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/w3llstore.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/w3llstore.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
8
2023-11-09 01:13:07
event
497806
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/i.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/i.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
9
2023-11-09 01:13:06
event
497805
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-content/plugins/core-plugin/include.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-content/plugins/core-plugin/include.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
10
2023-11-09 01:13:06
event
497804
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/w3llstore.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/w3llstore.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
11
2023-11-09 01:13:06
event
497803
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/about.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/about.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
12
2023-11-09 01:13:05
event
497802
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/xmlrpc.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/xmlrpc.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
13
2023-11-09 01:13:05
event
497801
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-content/updates.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-content/updates.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
14
2023-11-09 01:13:04
event
497800
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-admin/shell20211028.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-admin/shell20211028.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
15
2023-11-09 01:13:04
event
497799
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/fx.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/fx.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
16
2023-11-09 01:13:04
event
497798
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/r.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/r.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
17
2023-11-09 01:13:03
event
497797
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-includes/Requests/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-includes/Requests/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
18
2023-11-09 01:13:03
event
497796
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/a.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/a.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
19
2023-11-09 01:13:02
event
497795
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/doc.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/doc.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
20
2023-11-09 01:13:02
event
497794
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-includes/random_compat/about.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-includes/random_compat/about.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
21
2023-11-09 01:13:01
event
497793
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/1index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/1index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
22
2023-11-09 01:13:01
event
497792
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
23
2023-11-09 01:13:01
event
497791
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-content/plugins/core-plugin/include.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-content/plugins/core-plugin/include.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
24
2023-11-09 01:13:01
event
497792
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth redirect (301) on auth endpoint
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
cred
rule
cred:auth_redirect
conf
72.00
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
More (full fields + snapshot)
expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
Auth redirect (301) on auth endpoint
details
Redirect outcomes can participate in 'success-after-fails' patterns during aggregation.
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
25
2023-11-09 01:13:01
event
497792
GET
301
bytes
169
ann
cred
12
label
cred
Request
WordPress auth endpoint targeted
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
cred
rule
cred:wp_focus:wp_login
conf
75.00
details
wp-login.php and xmlrpc.php are frequent brute-force targets; aggregate these signals by IP.
More (full fields + snapshot)
expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
WordPress auth endpoint targeted
details
wp-login.php and xmlrpc.php are frequent brute-force targets; aggregate these signals by IP.
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
26
2023-11-09 01:13:01
event
497792
GET
301
bytes
169
ann
cred
10
label
cred
Request
Auth request appears to use an automation-oriented user agent
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
cred
rule
cred:scripted_user_agent
conf
70.00
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
More (full fields + snapshot)
expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
Auth request appears to use an automation-oriented user agent
details
Automation-ish UA strings are useful correlates when paired with failures or spraying patterns.
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
27
2023-11-09 01:13:01
event
497792
GET
301
bytes
169
ann
cred
label
cred
Request
Auth endpoint request observed
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
cred
rule
cred:auth_hit:wp_login
conf
55.00
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
More (full fields + snapshot)
expand
url
/wp-login.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
Auth endpoint request observed
details
Row-level auth primitive for downstream aggregation (no velocity logic here).
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
28
2023-11-09 01:13:00
event
497790
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/adminer.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/adminer.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
29
2023-11-09 01:13:00
event
497789
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/small.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/small.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
30
2023-11-09 01:12:59
event
497788
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-blog.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-blog.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
31
2023-11-09 01:12:59
event
497787
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/a.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/a.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
32
2023-11-09 01:12:59
event
497786
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-info.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-info.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
33
2023-11-09 01:12:58
event
497785
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/sh.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/sh.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
34
2023-11-09 01:12:58
event
497784
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-admin/includes/class-wp-media-list-data.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-admin/includes/class-wp-media-list-data.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
35
2023-11-09 01:12:57
event
497783
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-admin/css/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-admin/css/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
36
2023-11-09 01:12:57
event
497782
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/M1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/M1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
37
2023-11-09 01:12:57
event
497781
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-includes/themes.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-includes/themes.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
38
2023-11-09 01:12:56
event
497780
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wso.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wso.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
39
2023-11-09 01:12:56
event
497779
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
40
2023-11-09 01:12:56
event
497779
GET
301
bytes
169
ann
scan_velocity
14
label
scan_velocity
Request
Scan-velocity indicator: scanv:unique_paths
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:unique_paths
conf
70.00
details
upm_nonstatic_equiv=65.3; score=7; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
Scan-velocity indicator: scanv:unique_paths
details
upm_nonstatic_equiv=65.3; score=7; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
41
2023-11-09 01:12:56
event
497779
GET
301
bytes
169
ann
scan_velocity
14
label
scan_velocity
Request
Scan-velocity indicator: scanv:rpm
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:rpm
conf
70.00
details
rpm_equiv=93.3; score=7; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
Scan-velocity indicator: scanv:rpm
details
rpm_equiv=93.3; score=7; window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
42
2023-11-09 01:12:56
event
497779
GET
301
bytes
169
ann
scan_velocity
label
scan_velocity
Request
Scan-velocity window summary
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
scan_velocity
rule
scanv:window
conf
—
details
window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
More (full fields + snapshot)
expand
url
/wp-includes/js/tinymce/skins/lightgray/img/index.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
Scan-velocity window summary
details
window=90s; total=140; rpm_equiv=93.3; upm_nonstatic_equiv=65.3; 404=0/140(0.00); ext_hits=0; ua_sig=0; methods=['GET']
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
43
2023-11-09 01:12:55
event
497778
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.htacess.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.htacess.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
44
2023-11-09 01:12:55
event
497777
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-blog.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-blog.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
45
2023-11-09 01:12:55
event
497776
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/.well-known/acme-challenge/cloud.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/.well-known/acme-challenge/cloud.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
46
2023-11-09 01:12:54
event
497775
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/1.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
47
2023-11-09 01:12:54
event
497774
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/403.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/403.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
48
2023-11-09 01:12:53
event
497773
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/mar.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/mar.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
49
2023-11-09 01:12:53
event
497772
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/c.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/c.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
#
50
2023-11-09 01:12:52
event
497771
GET
301
bytes
169
ann
base
label
observed
Request
event observed
/wp-admin/ajax-actions.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
Annotation
facts
label
observed
rule
base_observed
conf
—
details
—
More (full fields + snapshot)
expand
url
/wp-admin/ajax-actions.php
referer
-
UA
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15
summary
event observed
details
—
subnet
66.55.67.0/24
asn
36007 — Kamatera, Inc.
geo
United States, Illinois, Chicago
org
Cloud Web Manage
×
This is a custom alert message.
×
Confirm Action
Are you sure you want to proceed?
