DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ASN REPORT — AS44947 · AMWAJ ALKHYR COMMERCIAL BROKERS CO.

First sighted: Dec. 9, 2024, 2 a.m. · Last sighted: March 18, 2025, 1:59 a.m.

Risk
100 (high)
Total hits
43644
Total errors
8587
Observed IPs
79
Top country
N/A
Top city
N/A

Risk

Model: v1 Computed: 2026-01-18 11:53:36
Risk score
100
High
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 6862
Points 51535.27
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 505
Points 4232.96
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 2052
Points 3331.66
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 14330
Points 1449.55
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 1490
Points 749.17
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 131
Points 205.59
Firewall probing
Traffic behavior suggests probing of access controls and protected surfaces.
fwprobe
Hits 9
Points 53.14
Referrer abuse
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
ref
Hits 10
Points 2.30
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 1
Points 0.48

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this ASN.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
1472
3xx
29441
4xx
8571
5xx
16
Unique URLs
6786
Total hits
43644
First seen
Dec. 9, 2024, 2 a.m.
Last seen
March 18, 2025, 1:59 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 6862 pts 51535.27
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 5908 1 47831.17 Dec. 9, 2024, 3:36 a.m. March 17, 2025, 8:07 a.m.
sensitive_file 5908
16 518 1 1276.35 Dec. 9, 2024, 3:36 a.m. March 17, 2025, 8:05 a.m.
sensitive_file 518
30 133 1 746.13 Dec. 19, 2024, 11:20 a.m. March 15, 2025, 4:11 a.m.
sensitive_file 133
36 106 1 738.78 Dec. 19, 2024, 11:20 a.m. March 17, 2025, 8:04 a.m.
sensitive_file 106
24 149 1 645.11 Dec. 19, 2024, 11:20 a.m. March 17, 2025, 8:05 a.m.
sensitive_file 149
44 20 1 181.98 March 10, 2025, 11:47 p.m. March 17, 2025, 8:04 a.m.
sensitive_file 20
22 25 1 94.38 Dec. 20, 2024, 8:43 a.m. March 17, 2025, 8:05 a.m.
sensitive_file 25
34 2 1 12.87 Jan. 4, 2025, 7:01 p.m. Jan. 4, 2025, 7:01 p.m.
sensitive_file 2
42 1 1 8.50 Feb. 13, 2025, 3:07 a.m. Feb. 13, 2025, 3:07 a.m.
sensitive_file 1
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 505 pts 4232.96
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
34 501 1 4207.40 Dec. 19, 2024, 11:20 a.m. March 17, 2025, 8:07 a.m.
trav 501
28 2 1 13.40 Jan. 4, 2025, 7:01 p.m. Jan. 4, 2025, 7:01 p.m.
trav 2
26 2 1 12.17 Jan. 4, 2025, 7:01 p.m. Jan. 4, 2025, 7:01 p.m.
trav 2
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 2052 pts 3331.66
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 540 1 698.85 Dec. 9, 2024, 3:36 a.m. March 17, 2025, 8:02 a.m.
scan_velocity 540
22 102 1 359.57 Jan. 4, 2025, 9:14 p.m. March 17, 2025, 8:02 a.m.
scan_velocity 102
24 86 1 329.62 Jan. 4, 2025, 9:14 p.m. March 17, 2025, 8:02 a.m.
scan_velocity 86
36 51 1 292.57 March 17, 2025, 4 a.m. March 17, 2025, 8:07 a.m.
scan_velocity 51
20 73 1 227.88 Dec. 22, 2024, 2:45 p.m. March 17, 2025, 8:02 a.m.
scan_velocity 73
18 81 1 223.24 Dec. 22, 2024, 2:45 p.m. March 17, 2025, 8:02 a.m.
scan_velocity 81
16 92 1 222.19 Dec. 22, 2024, 2:45 p.m. March 17, 2025, 8:01 a.m.
scan_velocity 92
14 102 1 209.41 Dec. 22, 2024, 2:45 p.m. March 17, 2025, 8:01 a.m.
scan_velocity 102
26 45 1 188.14 Feb. 20, 2025, 8 p.m. March 17, 2025, 8:02 a.m.
scan_velocity 45
12 108 1 187.60 Dec. 17, 2024, 3:33 p.m. March 17, 2025, 8 a.m.
scan_velocity 108
28 31 1 135.83 Feb. 25, 2025, 1:52 a.m. March 17, 2025, 8:07 a.m.
scan_velocity 31
30 21 1 99.09 Feb. 25, 2025, 1:52 a.m. March 17, 2025, 8:07 a.m.
scan_velocity 21
32 18 1 91.58 Feb. 25, 2025, 1:52 a.m. March 17, 2025, 8:03 a.m.
scan_velocity 18
34 12 1 66.10 Feb. 25, 2025, 1:53 a.m. March 17, 2025, 8:03 a.m.
scan_velocity 12
0 690 1 0.00 Dec. 9, 2024, 3:36 a.m. March 17, 2025, 8:07 a.m.
scan_velocity 690
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 14330 pts 1449.55
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 13056 1 1357.82 Dec. 9, 2024, 3:36 a.m. March 17, 2025, 8 a.m.
ua 13056
6 1274 1 91.73 Dec. 22, 2024, 2:45 p.m. March 15, 2025, 4:10 a.m.
ua 1274
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 1490 pts 749.17
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
14 745 1 650.83 Jan. 22, 2025, 11:17 p.m. March 2, 2025, 4:21 a.m.
proto 745
3 745 1 98.34 Jan. 22, 2025, 11:17 p.m. March 2, 2025, 4:21 a.m.
proto 745
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 131 pts 205.59
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 37 1 73.26 Dec. 22, 2024, 2:45 p.m. March 12, 2025, 7:48 p.m.
cred 37
10 18 1 69.41 Feb. 19, 2025, 10:58 a.m. March 17, 2025, 8:04 a.m.
cred 18
8 22 1 62.92 Dec. 22, 2024, 2:45 p.m. Jan. 16, 2025, 1 p.m.
cred 22
0 54 1 0.00 Dec. 22, 2024, 2:45 p.m. March 17, 2025, 8:04 a.m.
cred 54
Firewall probing fwprobe
Traffic behavior suggests probing of access controls and protected surfaces.
hits 9 pts 53.14
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
16 6 1 29.38 March 17, 2025, 4 a.m. March 17, 2025, 8:04 a.m.
fwprobe 6
22 3 1 23.76 March 17, 2025, 4 a.m. March 17, 2025, 8:04 a.m.
fwprobe 3
Referrer abuse ref
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
hits 10 pts 2.30
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
9 10 1 2.30 Feb. 27, 2025, 9:15 p.m. March 15, 2025, 4:11 a.m.
ref 10
Automated client behavior bot
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 1 pts 0.48
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 1 1 0.48 Jan. 28, 2025, 4:08 a.m. Jan. 28, 2025, 4:08 a.m.
bot 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this ASN snapshot (peer IPs with coordinates).

Loading map…

SUBNETS HELD BY THIS ISP

Derived from ISP snapshot peers (Option A). Grouped into IPv4 /24 and IPv6 /48 by default.
IPv4
IPv6
Limit
Loading subnets…

Interesting IPs

Top risky peers inside this ASN (latest snapshot). Sorted by risk score, then hits.

No peer rows available for this ASN snapshot.