DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ASN REPORT — AS141995 · Contabo Asia Private Limited

First sighted: July 12, 2023, 3 a.m. · Last sighted: Jan. 26, 2026, 1:59 a.m.

Risk
86 (high)
Total hits
5401
Total errors
3228
Observed IPs
160
Top country
N/A
Top city
N/A

Risk

Model: v1 Computed: 2026-01-29 10:18:33
Risk score
86
High
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 271
Points 2069.66
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 339
Points 953.86
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 100
Points 674.74
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 24
Points 443.53
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 140
Points 411.18
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 466
Points 221.35
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 1181
Points 165.06
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 15
Points 8.13
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 1
Points 0.59
Referrer abuse
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
ref
Hits 1
Points 0.13

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this ASN.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
258
3xx
1742
4xx
3221
5xx
7
Unique URLs
1459
Total hits
5401
First seen
July 12, 2023, 3 a.m.
Last seen
Jan. 26, 2026, 1:59 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 271 pts 2069.66
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 204 1 1651.58 July 12, 2023, 4:43 p.m. July 25, 2025, 10:41 p.m.
sensitive_file 204
34 34 1 218.72 June 9, 2024, 7 p.m. Nov. 7, 2025, 4:45 a.m.
sensitive_file 34
36 18 1 125.45 Oct. 28, 2024, 4:24 a.m. Feb. 1, 2025, 9:37 a.m.
sensitive_file 18
30 7 1 39.27 Oct. 28, 2024, 4:24 a.m. Feb. 1, 2025, 9:37 a.m.
sensitive_file 7
24 8 1 34.64 Feb. 9, 2025, 9:06 p.m. March 25, 2025, 11:50 a.m.
sensitive_file 8
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 339 pts 953.86
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
30 40 1 185.76 Nov. 8, 2024, 5:27 a.m. Nov. 18, 2024, 3:08 a.m.
scan_velocity 40
32 28 1 144.00 Nov. 8, 2024, 5:27 a.m. Nov. 18, 2024, 3:08 a.m.
scan_velocity 28
22 36 1 127.51 Oct. 28, 2024, 4:24 a.m. July 25, 2025, 9:23 p.m.
scan_velocity 36
28 27 1 116.42 Nov. 8, 2024, 5:27 a.m. Nov. 18, 2024, 3:05 a.m.
scan_velocity 27
34 16 1 88.13 Nov. 18, 2024, 3:06 a.m. Nov. 18, 2024, 3:10 a.m.
scan_velocity 16
20 26 1 84.24 June 9, 2024, 7 p.m. April 6, 2025, 5:59 a.m.
scan_velocity 26
18 18 1 52.49 June 9, 2024, 7 p.m. April 6, 2025, 5:58 a.m.
scan_velocity 18
36 8 1 46.66 Nov. 18, 2024, 3:06 a.m. Nov. 18, 2024, 3:10 a.m.
scan_velocity 8
26 9 1 36.50 Nov. 8, 2024, 5:27 a.m. July 25, 2025, 9:24 p.m.
scan_velocity 9
24 9 1 33.70 Nov. 8, 2024, 5:26 a.m. July 25, 2025, 9:24 p.m.
scan_velocity 9
10 20 1 26.46 Aug. 20, 2023, 10:29 p.m. Feb. 1, 2025, 9:37 a.m.
scan_velocity 20
16 4 1 10.37 Oct. 31, 2024, 7:29 a.m. Jan. 4, 2025, 1:42 p.m.
scan_velocity 4
12 1 1 1.62 Oct. 28, 2024, 8:09 a.m. Oct. 28, 2024, 8:09 a.m.
scan_velocity 1
0 97 1 0.00 Aug. 20, 2023, 10:29 p.m. July 25, 2025, 9:24 p.m.
scan_velocity 97
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 100 pts 674.74
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 34 1 227.72 June 9, 2024, 7 p.m. Nov. 7, 2025, 4:45 a.m.
trav 34
26 34 1 206.86 June 9, 2024, 7 p.m. Nov. 7, 2025, 4:45 a.m.
trav 34
30 26 1 189.77 June 9, 2024, 7 p.m. Jan. 22, 2026, 11:41 p.m.
trav 26
34 6 1 50.39 Oct. 28, 2024, 4:25 a.m. Feb. 1, 2025, 9:37 a.m.
trav 6
Command injection attempts cmdi
Request content resembles attempts to execute OS commands via an application.
hits 24 pts 443.53
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 10 1 209.44 June 1, 2024, 5:56 a.m. Nov. 7, 2025, 4:45 a.m.
cmdi 10
22 10 1 140.25 June 1, 2024, 5:56 a.m. Nov. 7, 2025, 4:45 a.m.
cmdi 10
30 4 1 93.84 June 1, 2024, 5:56 a.m. June 1, 2024, 2:49 p.m.
cmdi 4
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 140 pts 411.18
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 56 1 216.92 Oct. 28, 2024, 4:26 a.m. May 31, 2025, 7:41 a.m.
cred 56
12 38 1 188.10 Nov. 8, 2024, 5:27 a.m. May 31, 2025, 7:41 a.m.
cred 38
8 2 1 6.16 May 31, 2025, 7:41 a.m. May 31, 2025, 7:41 a.m.
cred 2
0 44 1 0.00 Oct. 28, 2024, 4:26 a.m. May 31, 2025, 7:41 a.m.
cred 44
Automated client behavior bot
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 466 pts 221.35
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 466 1 221.35 Feb. 23, 2024, 7:41 a.m. March 25, 2025, 10:28 a.m.
bot 466
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 1181 pts 165.06
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 1083 1 155.95 Aug. 28, 2023, 6:59 p.m. Aug. 28, 2025, 7:33 a.m.
ua 1083
6 64 1 4.61 Feb. 23, 2024, 7:48 a.m. April 6, 2025, 5:58 a.m.
ua 64
8 26 1 2.70 Oct. 21, 2023, 5:52 a.m. Sept. 30, 2025, 10:33 p.m.
ua 26
14 8 1 1.79 May 25, 2025, 10:56 a.m. May 25, 2025, 10:57 a.m.
ua 8
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 15 pts 8.13
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 11 1 7.60 June 9, 2024, 7 p.m. July 31, 2025, 10:28 p.m.
proto 11
3 4 1 0.53 June 9, 2024, 7 p.m. Jan. 4, 2025, 1:41 p.m.
proto 4
Request size anomaly request_size
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 1 pts 0.59
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
14 1 1 0.59 May 31, 2025, 7:41 a.m. May 31, 2025, 7:41 a.m.
request_size 1
Referrer abuse ref
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
hits 1 pts 0.13
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 1 1 0.13 May 31, 2025, 7:41 a.m. May 31, 2025, 7:41 a.m.
ref 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this ASN snapshot (peer IPs with coordinates).

Loading map…

SUBNETS HELD BY THIS ISP

Derived from ISP snapshot peers (Option A). Grouped into IPv4 /24 and IPv6 /48 by default.
IPv4
IPv6
Limit
Loading subnets…

Interesting IPs

Top risky peers inside this ASN (latest snapshot). Sorted by risk score, then hits.

No peer rows available for this ASN snapshot.