IP Address Overview

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 133 hits 390.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	48	1	264.00	{'count': 48, 'label': 'cred'}
8	19	1	83.60	{'count': 19, 'label': 'cred'}
6	13	1	42.90	{'count': 13, 'label': 'cred'}
0	53	1	0.00	{'count': 53, 'label': 'cred'}

Request size anomaly request_size Requests are unusually large or shaped in a way that suggests abuse or automation. 404 hits 220.44 pts

Severity	Hits	Labels	Weighted	Top labels
12	251	1	180.72	{'count': 251, 'label': 'request_size'}
20	24	1	28.80	{'count': 24, 'label': 'request_size'}
14	13	1	10.92	{'count': 13, 'label': 'request_size'}
0	116	1	0.00	{'count': 116, 'label': 'request_size'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 697 hits 83.64 pts

Severity	Hits	Labels	Weighted	Top labels
6	697	1	83.64	{'count': 697, 'label': 'ua'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 64 hits 60.84 pts

Severity	Hits	Labels	Weighted	Top labels
10	29	1	52.20	{'count': 29, 'label': 'scan_velocity'}
12	4	1	8.64	{'count': 4, 'label': 'scan_velocity'}
0	31	1	0.00	{'count': 31, 'label': 'scan_velocity'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 21 hits 3.78 pts

Severity	Hits	Labels	Weighted	Top labels
6	21	1	3.78	{'count': 21, 'label': 'ref'}

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 6 hits 3.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	6	1	3.00	{'count': 6, 'label': 'bot'}