IP Address Overview

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 23116 hits 76280.60 pts

Severity	Hits	Labels	Weighted	Top labels
10	7706	1	42383.00	{'count': 7706, 'label': 'cred'}
8	7704	1	33897.60	{'count': 7704, 'label': 'cred'}
0	7706	1	0.00	{'count': 7706, 'label': 'cred'}

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 43645 hits 17458.00 pts

Severity	Hits	Labels	Weighted	Top labels
8	43645	1	17458.00	{'count': 43645, 'label': 'bot'}

Request size anomaly request_size Requests are unusually large or shaped in a way that suggests abuse or automation. 1802 hits 1513.68 pts

Severity	Hits	Labels	Weighted	Top labels
14	1802	1	1513.68	{'count': 1802, 'label': 'request_size'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 7 hits 173.40 pts

Severity	Hits	Labels	Weighted	Top labels
30	4	1	102.00	{'count': 4, 'label': 'cmdi'}
28	3	1	71.40	{'count': 3, 'label': 'cmdi'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 10 hits 72.16 pts

Severity	Hits	Labels	Weighted	Top labels
36	4	1	31.68	{'count': 4, 'label': 'sensitive_file'}
40	3	1	26.40	{'count': 3, 'label': 'sensitive_file'}
24	2	1	10.56	{'count': 2, 'label': 'sensitive_file'}
16	1	1	3.52	{'count': 1, 'label': 'sensitive_file'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 3 hits 25.48 pts

Severity	Hits	Labels	Weighted	Top labels
34	2	1	17.68	{'count': 2, 'label': 'trav'}
30	1	1	7.80	{'count': 1, 'label': 'trav'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 10 hits 1.20 pts

Severity	Hits	Labels	Weighted	Top labels
6	10	1	1.20	{'count': 10, 'label': 'ua'}