File access
Someone tries to read private files on your website.
What it is
Addresses that try to climb out of your website's folder, ask for the server's own files, or make your site load a file from somewhere else.
- ../../etc/passwd in an address
- A request for .env or .git
- A page asked to include a file from another website
Why it matters
Configuration files hold passwords and keys. One readable file can be enough to take over the site.
If a real visitor is ever stopped
Rare for a real visitor. If your site has a real address that looks like this, mark the request as real.