IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 65239 hits 32619.50 pts

Severity	Hits	Labels	Weighted	Top labels
10	65239	1	32619.50	{'count': 65239, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 7638 hits 10383.12 pts

Severity	Hits	Labels	Weighted	Top labels
10	3663	1	6593.40	{'count': 3663, 'label': 'scan_velocity'}
14	554	1	1396.08	{'count': 554, 'label': 'scan_velocity'}
12	472	1	1019.52	{'count': 472, 'label': 'scan_velocity'}
18	163	1	528.12	{'count': 163, 'label': 'scan_velocity'}
20	78	1	280.80	{'count': 78, 'label': 'scan_velocity'}
16	88	1	253.44	{'count': 88, 'label': 'scan_velocity'}
24	24	1	103.68	{'count': 24, 'label': 'scan_velocity'}
22	22	1	87.12	{'count': 22, 'label': 'scan_velocity'}
28	12	1	60.48	{'count': 12, 'label': 'scan_velocity'}
30	6	1	32.40	{'count': 6, 'label': 'scan_velocity'}
26	6	1	28.08	{'count': 6, 'label': 'scan_velocity'}
0	2550	1	0.00	{'count': 2550, 'label': 'scan_velocity'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 10 hits 77.00 pts

Severity	Hits	Labels	Weighted	Top labels
40	6	1	52.80	{'count': 6, 'label': 'sensitive_file'}
42	1	1	9.24	{'count': 1, 'label': 'sensitive_file'}
36	1	1	7.92	{'count': 1, 'label': 'sensitive_file'}
16	2	1	7.04	{'count': 2, 'label': 'sensitive_file'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 2 hits 49.30 pts

Severity	Hits	Labels	Weighted	Top labels
30	1	1	25.50	{'count': 1, 'label': 'cmdi'}
28	1	1	23.80	{'count': 1, 'label': 'cmdi'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 5 hits 44.20 pts

Severity	Hits	Labels	Weighted	Top labels
34	5	1	44.20	{'count': 5, 'label': 'trav'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 3 hits 9.90 pts

Severity	Hits	Labels	Weighted	Top labels
10	1	1	5.50	{'count': 1, 'label': 'cred'}
8	1	1	4.40	{'count': 1, 'label': 'cred'}
0	1	1	0.00	{'count': 1, 'label': 'cred'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 2 hits 2.88 pts

Severity	Hits	Labels	Weighted	Top labels
24	1	1	1.92	{'count': 1, 'label': 'proto'}
12	1	1	0.96	{'count': 1, 'label': 'proto'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 1 hits 0.18 pts

Severity	Hits	Labels	Weighted	Top labels
6	1	1	0.18	{'count': 1, 'label': 'ref'}

User-Agent anomaly ua User-Agent signals look missing, inconsistent, or indicative of non-browser tooling. 1 hits 0.16 pts

Severity	Hits	Labels	Weighted	Top labels
8	1	1	0.16	{'count': 1, 'label': 'ua'}