IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 402387 hits 201193.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	402387	1	201193.50	{'count': 402387, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 46307 hits 56651.76 pts

Severity	Hits	Labels	Weighted	Top labels
10	28692	1	51645.60	{'count': 28692, 'label': 'scan_velocity'}
14	700	1	1764.00	{'count': 700, 'label': 'scan_velocity'}
12	691	1	1492.56	{'count': 691, 'label': 'scan_velocity'}
20	131	1	471.60	{'count': 131, 'label': 'scan_velocity'}
18	117	1	379.08	{'count': 117, 'label': 'scan_velocity'}
22	63	1	249.48	{'count': 63, 'label': 'scan_velocity'}
16	85	1	244.80	{'count': 85, 'label': 'scan_velocity'}
24	49	1	211.68	{'count': 49, 'label': 'scan_velocity'}
28	11	1	55.44	{'count': 11, 'label': 'scan_velocity'}
26	10	1	46.80	{'count': 10, 'label': 'scan_velocity'}
30	7	1	37.80	{'count': 7, 'label': 'scan_velocity'}
32	6	1	34.56	{'count': 6, 'label': 'scan_velocity'}
34	3	1	18.36	{'count': 3, 'label': 'scan_velocity'}
0	15742	1	0.00	{'count': 15742, 'label': 'scan_velocity'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 8013 hits 26433.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	2674	1	14707.00	{'count': 2674, 'label': 'cred'}
8	2665	1	11726.00	{'count': 2665, 'label': 'cred'}
0	2674	1	0.00	{'count': 2674, 'label': 'cred'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 103 hits 813.56 pts

Severity	Hits	Labels	Weighted	Top labels
40	71	1	624.80	{'count': 71, 'label': 'sensitive_file'}
36	12	1	95.04	{'count': 12, 'label': 'sensitive_file'}
24	8	1	42.24	{'count': 8, 'label': 'sensitive_file'}
22	7	1	33.88	{'count': 7, 'label': 'sensitive_file'}
16	5	1	17.60	{'count': 5, 'label': 'sensitive_file'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 20 hits 493.00 pts

Severity	Hits	Labels	Weighted	Top labels
30	10	1	255.00	{'count': 10, 'label': 'cmdi'}
28	10	1	238.00	{'count': 10, 'label': 'cmdi'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 2673 hits 481.14 pts

Severity	Hits	Labels	Weighted	Top labels
6	2673	1	481.14	{'count': 2673, 'label': 'ref'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 5 hits 66.60 pts

Severity	Hits	Labels	Weighted	Top labels
30	2	1	27.00	{'count': 2, 'label': 'fwprobe'}
28	2	1	25.20	{'count': 2, 'label': 'fwprobe'}
32	1	1	14.40	{'count': 1, 'label': 'fwprobe'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 4 hits 34.32 pts

Severity	Hits	Labels	Weighted	Top labels
34	3	1	26.52	{'count': 3, 'label': 'trav'}
30	1	1	7.80	{'count': 1, 'label': 'trav'}