IP Address Overview

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 4815 hits 25841.64 pts

Severity	Hits	Labels	Weighted	Top labels
24	4650	1	24552.00	{'count': 4650, 'label': 'sensitive_file'}
34	113	1	845.24	{'count': 113, 'label': 'sensitive_file'}
40	46	1	404.80	{'count': 46, 'label': 'sensitive_file'}
30	6	1	39.60	{'count': 6, 'label': 'sensitive_file'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 603 hits 1103.04 pts

Severity	Hits	Labels	Weighted	Top labels
10	179	1	322.20	{'count': 179, 'label': 'scan_velocity'}
20	24	1	86.40	{'count': 24, 'label': 'scan_velocity'}
26	18	1	84.24	{'count': 18, 'label': 'scan_velocity'}
16	29	1	83.52	{'count': 29, 'label': 'scan_velocity'}
14	33	1	83.16	{'count': 33, 'label': 'scan_velocity'}
32	12	1	69.12	{'count': 12, 'label': 'scan_velocity'}
18	21	1	68.04	{'count': 21, 'label': 'scan_velocity'}
24	15	1	64.80	{'count': 15, 'label': 'scan_velocity'}
30	12	1	64.80	{'count': 12, 'label': 'scan_velocity'}
28	12	1	60.48	{'count': 12, 'label': 'scan_velocity'}
12	26	1	56.16	{'count': 26, 'label': 'scan_velocity'}
22	9	1	35.64	{'count': 9, 'label': 'scan_velocity'}
34	4	1	24.48	{'count': 4, 'label': 'scan_velocity'}
0	209	1	0.00	{'count': 209, 'label': 'scan_velocity'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 301 hits 990.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	180	1	990.00	{'count': 180, 'label': 'cred'}
0	121	1	0.00	{'count': 121, 'label': 'cred'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 113 hits 763.88 pts

Severity	Hits	Labels	Weighted	Top labels
26	113	1	763.88	{'count': 113, 'label': 'trav'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 521 hits 77.00 pts

Severity	Hits	Labels	Weighted	Top labels
8	356	1	56.96	{'count': 356, 'label': 'ua'}
6	163	1	19.56	{'count': 163, 'label': 'ua'}
12	2	1	0.48	{'count': 2, 'label': 'ua'}

HTTP method anomaly method Unusual or unexpected HTTP methods observed for the target endpoints. 21 hits 12.60 pts

Severity	Hits	Labels	Weighted	Top labels
10	21	1	12.60	{'count': 21, 'label': 'method'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 2 hits 1.92 pts

Severity	Hits	Labels	Weighted	Top labels
12	2	1	1.92	{'count': 2, 'label': 'proto'}

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 1 hits 0.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	1	1	0.50	{'count': 1, 'label': 'bot'}