IP Address Overview

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 4922 hits 30973.80 pts

Severity	Hits	Labels	Weighted	Top labels
24	3293	1	17387.04	{'count': 3293, 'label': 'sensitive_file'}
40	1428	1	12566.40	{'count': 1428, 'label': 'sensitive_file'}
34	79	1	590.92	{'count': 79, 'label': 'sensitive_file'}
16	122	1	429.44	{'count': 122, 'label': 'sensitive_file'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 561 hits 682.92 pts

Severity	Hits	Labels	Weighted	Top labels
10	292	1	525.60	{'count': 292, 'label': 'scan_velocity'}
12	17	1	36.72	{'count': 17, 'label': 'scan_velocity'}
22	8	1	31.68	{'count': 8, 'label': 'scan_velocity'}
14	12	1	30.24	{'count': 12, 'label': 'scan_velocity'}
20	6	1	21.60	{'count': 6, 'label': 'scan_velocity'}
24	5	1	21.60	{'count': 5, 'label': 'scan_velocity'}
18	3	1	9.72	{'count': 3, 'label': 'scan_velocity'}
16	2	1	5.76	{'count': 2, 'label': 'scan_velocity'}
0	216	1	0.00	{'count': 216, 'label': 'scan_velocity'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 79 hits 534.04 pts

Severity	Hits	Labels	Weighted	Top labels
26	79	1	534.04	{'count': 79, 'label': 'trav'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 108 hits 357.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	65	1	357.50	{'count': 65, 'label': 'cred'}
0	43	1	0.00	{'count': 43, 'label': 'cred'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 605 hits 87.72 pts

Severity	Hits	Labels	Weighted	Top labels
8	320	1	51.20	{'count': 320, 'label': 'ua'}
6	260	1	31.20	{'count': 260, 'label': 'ua'}
10	21	1	4.20	{'count': 21, 'label': 'ua'}
14	4	1	1.12	{'count': 4, 'label': 'ua'}

HTTP method anomaly method Unusual or unexpected HTTP methods observed for the target endpoints. 22 hits 13.20 pts

Severity	Hits	Labels	Weighted	Top labels
10	22	1	13.20	{'count': 22, 'label': 'method'}

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 4 hits 1.80 pts

Severity	Hits	Labels	Weighted	Top labels
10	2	1	1.00	{'count': 2, 'label': 'bot'}
8	2	1	0.80	{'count': 2, 'label': 'bot'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 1 hits 0.96 pts

Severity	Hits	Labels	Weighted	Top labels
12	1	1	0.96	{'count': 1, 'label': 'proto'}