Subnet Overview

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 379 hits 3257.76 pts

Severity	Hits	Labels	Weighted	Top labels
40	357	1	3141.60	{'count': 357, 'label': 'sensitive_file'}
24	22	1	116.16	{'count': 22, 'label': 'sensitive_file'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 335 hits 54.48 pts

Severity	Hits	Labels	Weighted	Top labels
8	313	1	50.08	{'count': 313, 'label': 'ua'}
10	22	1	4.40	{'count': 22, 'label': 'ua'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 9 hits 31.90 pts

Severity	Hits	Labels	Weighted	Top labels
12	3	1	19.80	{'count': 3, 'label': 'cred'}
6	2	1	6.60	{'count': 2, 'label': 'cred'}
10	1	1	5.50	{'count': 1, 'label': 'cred'}
0	3	1	0.00	{'count': 3, 'label': 'cred'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 2 hits 25.20 pts

Severity	Hits	Labels	Weighted	Top labels
28	2	1	25.20	{'count': 2, 'label': 'fwprobe'}

General injection attempts injg Suspicious input patterns consistent with injection-like probing across multiple families. 1 hits 25.20 pts

Severity	Hits	Labels	Weighted	Top labels
36	1	1	25.20	{'count': 1, 'label': 'injg'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 8 hits 7.20 pts

Severity	Hits	Labels	Weighted	Top labels
10	4	1	7.20	{'count': 4, 'label': 'scan_velocity'}
0	4	1	0.00	{'count': 4, 'label': 'scan_velocity'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 3 hits 2.64 pts

Severity	Hits	Labels	Weighted	Top labels
11	3	1	2.64	{'count': 3, 'label': 'proto'}

HTTP method anomaly method Unusual or unexpected HTTP methods observed for the target endpoints. 3 hits 1.44 pts

Severity	Hits	Labels	Weighted	Top labels
8	3	1	1.44	{'count': 3, 'label': 'method'}

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 1 hits 0.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	1	1	0.50	{'count': 1, 'label': 'bot'}