IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 101858 hits 50929.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	101858	1	50929.00	{'count': 101858, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 11816 hits 15145.56 pts

Severity	Hits	Labels	Weighted	Top labels
10	6679	1	12022.20	{'count': 6679, 'label': 'scan_velocity'}
14	273	1	687.96	{'count': 273, 'label': 'scan_velocity'}
12	306	1	660.96	{'count': 306, 'label': 'scan_velocity'}
18	158	1	511.92	{'count': 158, 'label': 'scan_velocity'}
20	108	1	388.80	{'count': 108, 'label': 'scan_velocity'}
16	105	1	302.40	{'count': 105, 'label': 'scan_velocity'}
22	44	1	174.24	{'count': 44, 'label': 'scan_velocity'}
24	20	1	86.40	{'count': 20, 'label': 'scan_velocity'}
30	16	1	86.40	{'count': 16, 'label': 'scan_velocity'}
32	13	1	74.88	{'count': 13, 'label': 'scan_velocity'}
26	14	1	65.52	{'count': 14, 'label': 'scan_velocity'}
28	13	1	65.52	{'count': 13, 'label': 'scan_velocity'}
34	3	1	18.36	{'count': 3, 'label': 'scan_velocity'}
0	4064	1	0.00	{'count': 4064, 'label': 'scan_velocity'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 62 hits 509.08 pts

Severity	Hits	Labels	Weighted	Top labels
40	48	1	422.40	{'count': 48, 'label': 'sensitive_file'}
36	6	1	47.52	{'count': 6, 'label': 'sensitive_file'}
16	4	1	14.08	{'count': 4, 'label': 'sensitive_file'}
24	2	1	10.56	{'count': 2, 'label': 'sensitive_file'}
44	1	1	9.68	{'count': 1, 'label': 'sensitive_file'}
22	1	1	4.84	{'count': 1, 'label': 'sensitive_file'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 27 hits 238.68 pts

Severity	Hits	Labels	Weighted	Top labels
34	27	1	238.68	{'count': 27, 'label': 'trav'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 7 hits 166.60 pts

Severity	Hits	Labels	Weighted	Top labels
30	3	1	76.50	{'count': 3, 'label': 'cmdi'}
28	3	1	71.40	{'count': 3, 'label': 'cmdi'}
22	1	1	18.70	{'count': 1, 'label': 'cmdi'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 36 hits 112.20 pts

Severity	Hits	Labels	Weighted	Top labels
10	14	1	77.00	{'count': 14, 'label': 'cred'}
8	8	1	35.20	{'count': 8, 'label': 'cred'}
0	14	1	0.00	{'count': 14, 'label': 'cred'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 4 hits 53.10 pts

Severity	Hits	Labels	Weighted	Top labels
34	1	1	15.30	{'count': 1, 'label': 'fwprobe'}
30	1	1	13.50	{'count': 1, 'label': 'fwprobe'}
28	1	1	12.60	{'count': 1, 'label': 'fwprobe'}
26	1	1	11.70	{'count': 1, 'label': 'fwprobe'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 16 hits 3.15 pts

Severity	Hits	Labels	Weighted	Top labels
6	13	1	2.34	{'count': 13, 'label': 'ref'}
9	3	1	0.81	{'count': 3, 'label': 'ref'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 1 hits 1.92 pts

Severity	Hits	Labels	Weighted	Top labels
24	1	1	1.92	{'count': 1, 'label': 'proto'}