OK
reachable
Unknown on /edit.php - caught by Missing User-Agent header, Very few headers (1), Missing Accept header
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 8669 | 8669 | 0.00 (priority, header case pattern, sec fetch pattern) | 20:02:00 |
| signalr-negotiate | 14 | 14 | 0.45 (priority, header case pattern, ua family) | 19:59:11 |
| sub-resource | 29 | 29 | 0.36 (priority, ua family, sec fetch pattern) | 19:59:04 |
| websocket-upgrade | 4 | 4 | 0.40 (ua family, header case pattern, cache control pragma) | 18:40:36 |
| navigation | 31 | 31 | 0.49 (upgrade insecure requests, ua family, header order hash) | 08:53:41 |
| # | Path |
|---|---|
| 1 | /edit.php |
| 2 | //wp.php |
| 3 | /002.php |
| 4 | ///lobster.php |
| 5 | /3PJcpMFsD8B.php |
| 6 | //wp-includes/Requests/ |
| 7 | /kir.php |
| 8 | /pol.php |
| 9 | /111.php |
| 10 | /zildan.php |
| 11 | /green.php |
| 12 | /reop3.php |
| 13 | /nwflm.php |
| 14 | /xp.php |
| 15 | /xstelth.php |
| 16 | //2.php |
| 17 | /fpwch.php |
| 18 | /config.json.php |
| 19 | /82.php |
| 20 | /k2.php |
| 21 | //a1.php |
| 22 | /gecko.php |
| 23 | /fffm.php |
| 24 | ///wpxml.php |
| 25 | /yup.php |
| 26 | /for.php |
| 27 | /zz.php |
| 28 | /ms.php |
| 29 | /memberfuns.php |
| 30 | /xmrl.php |
| 31 | /f900.php |
| 32 | /f35.update.php |
| 33 | /BDKR28.php |
| 34 | /0.php |
| 35 | /coffexium.php |
| 36 | /hur.php |
| 37 | /177.php |
| 38 | //aa.php |
| 39 | /sss.php |
| 40 | /4PJcpMFsD8B.php |
| 41 | /insc.php |
| 42 | /w.php |
| 43 | /k.php |
| 44 | /a.php |
| 45 | /2P.update.php |
| 46 | /wp-links.php |
| 47 | /wp-admin/css/colors/midnight/about.php |
| 48 | /wp-admin/css/colors/sunrise/ |
| 49 | //wp-includes/assets/ |
| 50 | /wp-load.php |
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 19:05:41 | GET | /edit.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:05:38 | GET | //wp.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:05:35 | GET | /002.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:05:33 | GET | ///lobster.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.8ms |
| 19:05:30 | GET | /3PJcpMFsD8B.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.9ms |
| 19:05:28 | GET | //wp-includes/Requests/ | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.3ms |
| 19:05:25 | GET | /kir.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.5ms |
| 19:05:22 | GET | /pol.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.3ms |
| 19:05:19 | GET | /111.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.7ms |
| 19:05:16 | GET | /zildan.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.0ms |
| 19:05:13 | GET | /green.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.6ms |
| 19:05:11 | GET | /reop3.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:05:08 | GET | /nwflm.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.3ms |
| 19:05:05 | GET | /xp.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.2ms |
| 19:05:01 | GET | /xstelth.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.3ms |
| 19:04:58 | GET | //2.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.7ms |
| 19:04:55 | GET | /fpwch.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:04:51 | GET | /config.json.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.4ms |
| 19:04:48 | GET | /82.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.9ms |
| 19:04:46 | GET | /k2.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 12.5ms |
| 19:04:42 | GET | //a1.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.4ms |
| 19:04:40 | GET | /gecko.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.5ms |
| 19:04:37 | GET | /fffm.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.5ms |
| 19:04:34 | GET | ///wpxml.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.5ms |
| 19:04:31 | GET | /yup.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.5ms |
| 19:04:28 | GET | /for.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.9ms |
| 19:04:26 | GET | /zz.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:04:22 | GET | /ms.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.9ms |
| 19:04:21 | GET | /memberfuns.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.0ms |
| 19:04:18 | GET | /xmrl.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:04:15 | GET | /f900.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.4ms |
| 19:04:13 | GET | /f35.update.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.9ms |
| 19:04:11 | GET | /BDKR28.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.4ms |
| 19:04:08 | GET | /0.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.6ms |
| 19:04:07 | GET | /coffexium.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.8ms |
| 19:04:05 | GET | /hur.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:04:01 | GET | /177.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:03:59 | GET | //aa.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.3ms |
| 19:03:56 | GET | /sss.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.0ms |
| 19:03:54 | GET | /4PJcpMFsD8B.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 12.4ms |
| 19:03:50 | GET | /insc.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:03:48 | GET | /w.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:03:45 | GET | /k.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.8ms |
| 19:03:43 | GET | /a.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 10.3ms |
| 19:03:39 | GET | /2P.update.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.0ms |
| 19:03:36 | GET | /wp-links.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| 19:03:33 | GET | /wp-admin/css/colors/midnight/about.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.4ms |
| 19:03:29 | GET | /wp-admin/css/colors/sunrise/ | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.2ms |
| 19:03:27 | GET | //wp-includes/assets/ | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.3ms |
| 19:03:22 | GET | /wp-load.php | 404 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.1ms |
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
HeuristicLate
Heuristic model (late): 98 % bot likelihood (266 features)
|
+0.965 | 0.2 |
|
Header
Missing Accept header; Very few headers (1)
|
+1.226 | 0.1 |
|
Heuristic
Heuristic model (early): 80 % bot likelihood (18 features)
|
+0.600 | 0.0 |
|
Behavioral
No referrer on subsequent request; No cookies maintained across multiple requests; Visiting many random URLs in no logical order (random scanning pattern)
|
+0.750 | 0.5 |
|
UserAgent
Missing User-Agent header
|
+0.800 | 0.0 |
|
Ip
IP appears normal: 51.120.79.xxx
|
-0.150 | 0.0 |
|
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
|
+0.050 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 10.2 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
VerifiedBot
No known bot UA pattern
|
+0.000 | 0.0 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (0 % HTTP/2 over 93 samples)
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
reachable
ASP.NET pack enabled
77312030c6e244a59214a97b5e575612
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.
SlMOVzHvKf7rhAAbK5tECg
|
Processing: 11ms
|
Country: NO
|
First seen: 2026-07-25 19:03:22 UTC