IP Address Overview

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 2205 hits 18399.92 pts

Severity	Hits	Labels	Weighted	Top labels
40	1920	1	16896.00	{'count': 1920, 'label': 'sensitive_file'}
24	77	1	406.56	{'count': 77, 'label': 'sensitive_file'}
16	113	1	397.76	{'count': 113, 'label': 'sensitive_file'}
36	41	1	324.72	{'count': 41, 'label': 'sensitive_file'}
30	37	1	244.20	{'count': 37, 'label': 'sensitive_file'}
44	10	1	96.80	{'count': 10, 'label': 'sensitive_file'}
22	7	1	33.88	{'count': 7, 'label': 'sensitive_file'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 166 hits 1467.44 pts

Severity	Hits	Labels	Weighted	Top labels
34	166	1	1467.44	{'count': 166, 'label': 'trav'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 475 hits 1101.24 pts

Severity	Hits	Labels	Weighted	Top labels
36	51	1	330.48	{'count': 51, 'label': 'scan_velocity'}
10	120	1	216.00	{'count': 120, 'label': 'scan_velocity'}
20	17	1	61.20	{'count': 17, 'label': 'scan_velocity'}
24	14	1	60.48	{'count': 14, 'label': 'scan_velocity'}
18	18	1	58.32	{'count': 18, 'label': 'scan_velocity'}
30	10	1	54.00	{'count': 10, 'label': 'scan_velocity'}
14	21	1	52.92	{'count': 21, 'label': 'scan_velocity'}
16	16	1	46.08	{'count': 16, 'label': 'scan_velocity'}
32	8	1	46.08	{'count': 8, 'label': 'scan_velocity'}
22	11	1	43.56	{'count': 11, 'label': 'scan_velocity'}
28	8	1	40.32	{'count': 8, 'label': 'scan_velocity'}
12	16	1	34.56	{'count': 16, 'label': 'scan_velocity'}
26	7	1	32.76	{'count': 7, 'label': 'scan_velocity'}
34	4	1	24.48	{'count': 4, 'label': 'scan_velocity'}
0	154	1	0.00	{'count': 154, 'label': 'scan_velocity'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 2915 hits 465.16 pts

Severity	Hits	Labels	Weighted	Top labels
8	2884	1	461.44	{'count': 2884, 'label': 'ua'}
6	31	1	3.72	{'count': 31, 'label': 'ua'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 50 hits 133.10 pts

Severity	Hits	Labels	Weighted	Top labels
10	13	1	71.50	{'count': 13, 'label': 'cred'}
8	8	1	35.20	{'count': 8, 'label': 'cred'}
6	8	1	26.40	{'count': 8, 'label': 'cred'}
0	21	1	0.00	{'count': 21, 'label': 'cred'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 9 hits 72.90 pts

Severity	Hits	Labels	Weighted	Top labels
16	6	1	43.20	{'count': 6, 'label': 'fwprobe'}
22	3	1	29.70	{'count': 3, 'label': 'fwprobe'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 56 hits 38.08 pts

Severity	Hits	Labels	Weighted	Top labels
14	28	1	31.36	{'count': 28, 'label': 'proto'}
3	28	1	6.72	{'count': 28, 'label': 'proto'}