DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

CITY REPORT — São Paulo / Sao Paulo / Brazil · São Paulo / Sao Paulo / Brazil

First sighted: Aug. 6, 2023, 3 a.m. · Last sighted: Dec. 18, 2025, 2 a.m.

Risk
9 (low)
Total hits
229
Total errors
160
Distinct IPs
60
Distinct ASNs
2
Country
Brazil
Region
Sao Paulo
City
São Paulo

Risk

Model: v1 Computed: 2026-01-15 09:35:10
Risk score
9
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 28
Points 202.80
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 24
Points 176.88
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 2
Points 42.50
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 81
Points 40.50
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 7
Points 29.70
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 12
Points 28.80
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 5
Points 4.08
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 23
Points 4.00

Top Organizations Operating In The City

Most-observed organizations in this city

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this city.

Loading activity…
Daily activity (hits per day). Total in window: .
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
47
3xx
17
4xx
157
5xx
3
Unique URLs
194
Total hits
229
First seen
Aug. 6, 2023, 3 a.m.
Last seen
Dec. 18, 2025, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Request paths/parameters resemble attempts to access files outside intended directories.
hits 28 pts 202.80
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 10 1 72.80 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
trav 10
26 10 1 67.60 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
trav 10
30 8 1 62.40 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
trav 8
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 24 pts 176.88
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
34 10 1 74.80 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
sensitive_file 10
40 8 1 70.40 Aug. 6, 2023, 6:44 p.m. Jan. 20, 2025, 6:06 p.m.
sensitive_file 8
24 6 1 31.68 Aug. 31, 2023, 5:45 p.m. Nov. 23, 2025, 1:34 a.m.
sensitive_file 6
Request content resembles attempts to execute OS commands via an application.
hits 2 pts 42.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 1 1 23.80 April 11, 2025, 12:37 a.m. April 11, 2025, 12:37 a.m.
cmdi 1
22 1 1 18.70 April 11, 2025, 12:37 a.m. April 11, 2025, 12:37 a.m.
cmdi 1
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 81 pts 40.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 81 1 40.50 Oct. 11, 2025, 8:21 a.m. Dec. 17, 2025, 9:29 p.m.
bot 81
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 7 pts 29.70
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 3 1 16.50 Oct. 7, 2024, 5:52 p.m. Oct. 7, 2024, 5:52 p.m.
cred 3
12 2 1 13.20 Oct. 7, 2024, 5:52 p.m. Oct. 7, 2024, 5:52 p.m.
cred 2
0 2 1 0.00 Oct. 7, 2024, 5:52 p.m. Oct. 7, 2024, 5:52 p.m.
cred 2
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 12 pts 28.80
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
20 4 1 14.40 April 11, 2025, 12:36 a.m. April 11, 2025, 12:37 a.m.
scan_velocity 4
22 2 1 7.92 April 11, 2025, 12:36 a.m. April 11, 2025, 12:36 a.m.
scan_velocity 2
18 2 1 6.48 April 11, 2025, 12:37 a.m. April 11, 2025, 12:37 a.m.
scan_velocity 2
0 4 1 0.00 April 11, 2025, 12:36 a.m. April 11, 2025, 12:37 a.m.
scan_velocity 4
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 5 pts 4.08
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 4 1 3.84 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
proto 4
3 1 1 0.24 Sept. 18, 2024, 5:37 p.m. Sept. 18, 2024, 5:37 p.m.
proto 1
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 23 pts 4.00
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 11 1 2.20 Aug. 18, 2023, 9:14 p.m. Jan. 20, 2025, 6:06 p.m.
ua 11
8 6 1 0.96 Sept. 18, 2024, 5:37 p.m. May 8, 2025, 6:14 a.m.
ua 6
6 5 1 0.60 Sept. 18, 2024, 5:37 p.m. April 11, 2025, 12:36 a.m.
ua 5
12 1 1 0.24 Aug. 31, 2023, 5:45 p.m. Aug. 31, 2023, 5:45 p.m.
ua 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

Top Autonomous System Networks

Most-observed networks in this city

Interesting IPs

Top risky peers inside this city (latest snapshot). Sorted by risk score, then hits.

136.248.83.241 low
7 /100
Last seen 2025-04-11 03:00
Hits
47
Errors
44
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
144.22.192.181 low
5 /100
Last seen 2024-09-19 03:00
Hits
18
Errors
14
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
144.22.218.243 low
2 /100
Last seen 2025-05-09 03:00
Hits
6
Errors
6
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
20.201.112.51 low
1 /100
Last seen 2023-09-02 03:00
Hits
4
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.195.163.53 low
1 /100
Last seen 2023-08-07 03:00
Hits
4
Errors
4
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
4.201.154.158 low
1 /100
Last seen 2025-11-23 02:00
Hits
3
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.195.164.171 low
1 /100
Last seen 2023-09-01 03:00
Hits
3
Errors
3
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
144.22.229.241 low
1 /100
Last seen 2024-10-08 03:00
Hits
2
Errors
1
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
20.206.204.15 low
0 /100
Last seen 2024-02-22 02:00
Hits
32
Errors
30
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.84 low
0 /100
Last seen 2025-11-07 02:00
Hits
8
Errors
8
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
168.75.107.11 low
0 /100
Last seen 2025-08-17 03:00
Hits
8
Errors
4
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
23.97.109.232 low
0 /100
Last seen 2025-11-29 02:00
Hits
6
Errors
5
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.28 low
0 /100
Last seen 2025-12-18 02:00
Hits
5
Errors
3
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.19 low
0 /100
Last seen 2025-12-18 02:00
Hits
4
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.197.177.101 low
0 /100
Last seen 2024-05-11 03:00
Hits
4
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
168.138.143.21 low
0 /100
Last seen 2023-12-13 02:00
Hits
4
Errors
4
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
191.235.66.30 low
0 /100
Last seen 2025-12-18 02:00
Hits
3
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.20 low
0 /100
Last seen 2025-12-15 02:00
Hits
3
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.95 low
0 /100
Last seen 2025-11-25 02:00
Hits
3
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.18 low
0 /100
Last seen 2025-11-24 02:00
Hits
3
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.28 low
0 /100
Last seen 2025-11-24 02:00
Hits
3
Errors
3
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.29 low
0 /100
Last seen 2025-11-07 02:00
Hits
3
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.86 low
0 /100
Last seen 2025-10-29 02:00
Hits
3
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.30 low
0 /100
Last seen 2025-10-12 03:00
Hits
3
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.23 low
0 /100
Last seen 2025-12-02 02:00
Hits
2
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.27 low
0 /100
Last seen 2025-11-24 02:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.26 low
0 /100
Last seen 2025-11-07 02:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.25 low
0 /100
Last seen 2025-11-07 02:00
Hits
2
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.43 low
0 /100
Last seen 2025-10-15 03:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.32 low
0 /100
Last seen 2025-10-13 03:00
Hits
2
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.17 low
0 /100
Last seen 2025-10-12 03:00
Hits
2
Errors
2
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
4.228.76.163 low
0 /100
Last seen 2025-05-13 03:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.201.214 low
0 /100
Last seen 2025-03-19 02:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.3.202 low
0 /100
Last seen 2025-03-17 02:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.201.121.58 low
0 /100
Last seen 2025-01-21 02:00
Hits
2
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.18 low
0 /100
Last seen 2025-12-18 02:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
23.97.109.237 low
0 /100
Last seen 2025-12-15 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.85 low
0 /100
Last seen 2025-12-15 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.17 low
0 /100
Last seen 2025-11-27 02:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
23.97.109.236 low
0 /100
Last seen 2025-11-24 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.24 low
0 /100
Last seen 2025-11-24 02:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.27 low
0 /100
Last seen 2025-11-24 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.34 low
0 /100
Last seen 2025-11-16 02:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.20 low
0 /100
Last seen 2025-11-07 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.66.22 low
0 /100
Last seen 2025-11-07 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.21 low
0 /100
Last seen 2025-11-07 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.239.245.31 low
0 /100
Last seen 2025-11-07 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.40 low
0 /100
Last seen 2025-10-29 02:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.41 low
0 /100
Last seen 2025-10-29 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.233.194.42 low
0 /100
Last seen 2025-10-29 02:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.80 low
0 /100
Last seen 2025-10-15 03:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.82 low
0 /100
Last seen 2025-10-13 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.92 low
0 /100
Last seen 2025-10-13 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.81 low
0 /100
Last seen 2025-10-12 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
191.235.99.94 low
0 /100
Last seen 2025-10-12 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
144.22.191.49 low
0 /100
Last seen 2025-09-11 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS31898
AS Org
Oracle Corporation
191.235.202.48 low
0 /100
Last seen 2025-05-13 03:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.206.205.118 low
0 /100
Last seen 2024-09-09 03:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
20.206.243.169 low
0 /100
Last seen 2024-06-11 03:00
Hits
1
Errors
1
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation
104.41.52.59 low
0 /100
Last seen 2024-04-16 03:00
Hits
1
Errors
0
Country
Brazil
ASN
AS8075
AS Org
Microsoft Corporation