IP Address Overview

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 2409 hits 5193.36 pts

Severity	Hits	Labels	Weighted	Top labels
32	222	1	1278.72	{'count': 222, 'label': 'scan_velocity'}
10	499	1	898.20	{'count': 499, 'label': 'scan_velocity'}
22	99	1	392.04	{'count': 99, 'label': 'scan_velocity'}
18	105	1	340.20	{'count': 105, 'label': 'scan_velocity'}
16	118	1	339.84	{'count': 118, 'label': 'scan_velocity'}
12	136	1	293.76	{'count': 136, 'label': 'scan_velocity'}
24	67	1	289.44	{'count': 67, 'label': 'scan_velocity'}
14	110	1	277.20	{'count': 110, 'label': 'scan_velocity'}
20	75	1	270.00	{'count': 75, 'label': 'scan_velocity'}
30	49	1	264.60	{'count': 49, 'label': 'scan_velocity'}
26	54	1	252.72	{'count': 54, 'label': 'scan_velocity'}
28	40	1	201.60	{'count': 40, 'label': 'scan_velocity'}
36	9	1	58.32	{'count': 9, 'label': 'scan_velocity'}
34	6	1	36.72	{'count': 6, 'label': 'scan_velocity'}
0	820	1	0.00	{'count': 820, 'label': 'scan_velocity'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 8 hits 65.56 pts

Severity	Hits	Labels	Weighted	Top labels
40	4	1	35.20	{'count': 4, 'label': 'sensitive_file'}
34	3	1	22.44	{'count': 3, 'label': 'sensitive_file'}
36	1	1	7.92	{'count': 1, 'label': 'sensitive_file'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 12 hits 46.20 pts

Severity	Hits	Labels	Weighted	Top labels
10	4	1	22.00	{'count': 4, 'label': 'cred'}
12	3	1	19.80	{'count': 3, 'label': 'cred'}
8	1	1	4.40	{'count': 1, 'label': 'cred'}
0	4	1	0.00	{'count': 4, 'label': 'cred'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 6 hits 44.72 pts

Severity	Hits	Labels	Weighted	Top labels
28	2	1	14.56	{'count': 2, 'label': 'trav'}
26	2	1	13.52	{'count': 2, 'label': 'trav'}
34	1	1	8.84	{'count': 1, 'label': 'trav'}
30	1	1	7.80	{'count': 1, 'label': 'trav'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 2 hits 42.50 pts

Severity	Hits	Labels	Weighted	Top labels
28	1	1	23.80	{'count': 1, 'label': 'cmdi'}
22	1	1	18.70	{'count': 1, 'label': 'cmdi'}

SQL injection attempts sqli Input patterns resemble attempts to manipulate SQL queries via application parameters. 1 hits 24.00 pts

Severity	Hits	Labels	Weighted	Top labels
24	1	1	24.00	{'count': 1, 'label': 'sqli'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 1 hits 0.96 pts

Severity	Hits	Labels	Weighted	Top labels
12	1	1	0.96	{'count': 1, 'label': 'proto'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 2 hits 0.32 pts

Severity	Hits	Labels	Weighted	Top labels
8	2	1	0.32	{'count': 2, 'label': 'ua'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 1 hits 0.18 pts

Severity	Hits	Labels	Weighted	Top labels
6	1	1	0.18	{'count': 1, 'label': 'ref'}