IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 142886 hits 71443.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	142886	1	71443.00	{'count': 142886, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 18015 hits 22301.28 pts

Severity	Hits	Labels	Weighted	Top labels
10	10839	1	19510.20	{'count': 10839, 'label': 'scan_velocity'}
14	443	1	1116.36	{'count': 443, 'label': 'scan_velocity'}
12	343	1	740.88	{'count': 343, 'label': 'scan_velocity'}
18	93	1	301.32	{'count': 93, 'label': 'scan_velocity'}
20	61	1	219.60	{'count': 61, 'label': 'scan_velocity'}
16	56	1	161.28	{'count': 56, 'label': 'scan_velocity'}
22	37	1	146.52	{'count': 37, 'label': 'scan_velocity'}
24	20	1	86.40	{'count': 20, 'label': 'scan_velocity'}
26	4	1	18.72	{'count': 4, 'label': 'scan_velocity'}
0	6119	1	0.00	{'count': 6119, 'label': 'scan_velocity'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 1914 hits 6312.90 pts

Severity	Hits	Labels	Weighted	Top labels
10	639	1	3514.50	{'count': 639, 'label': 'cred'}
8	636	1	2798.40	{'count': 636, 'label': 'cred'}
0	639	1	0.00	{'count': 639, 'label': 'cred'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 44 hits 287.76 pts

Severity	Hits	Labels	Weighted	Top labels
40	14	1	123.20	{'count': 14, 'label': 'sensitive_file'}
24	17	1	89.76	{'count': 17, 'label': 'sensitive_file'}
36	5	1	39.60	{'count': 5, 'label': 'sensitive_file'}
16	6	1	21.12	{'count': 6, 'label': 'sensitive_file'}
42	1	1	9.24	{'count': 1, 'label': 'sensitive_file'}
22	1	1	4.84	{'count': 1, 'label': 'sensitive_file'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 9 hits 221.00 pts

Severity	Hits	Labels	Weighted	Top labels
28	5	1	119.00	{'count': 5, 'label': 'cmdi'}
30	4	1	102.00	{'count': 4, 'label': 'cmdi'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 639 hits 115.02 pts

Severity	Hits	Labels	Weighted	Top labels
6	639	1	115.02	{'count': 639, 'label': 'ref'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 4 hits 35.36 pts

Severity	Hits	Labels	Weighted	Top labels
34	4	1	35.36	{'count': 4, 'label': 'trav'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 1 hits 12.60 pts

Severity	Hits	Labels	Weighted	Top labels
28	1	1	12.60	{'count': 1, 'label': 'fwprobe'}