IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 271622 hits 135811.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	271622	1	135811.00	{'count': 271622, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 31555 hits 38726.64 pts

Severity	Hits	Labels	Weighted	Top labels
10	19302	1	34743.60	{'count': 19302, 'label': 'scan_velocity'}
14	605	1	1524.60	{'count': 605, 'label': 'scan_velocity'}
12	582	1	1257.12	{'count': 582, 'label': 'scan_velocity'}
20	94	1	338.40	{'count': 94, 'label': 'scan_velocity'}
16	108	1	311.04	{'count': 108, 'label': 'scan_velocity'}
18	94	1	304.56	{'count': 94, 'label': 'scan_velocity'}
22	28	1	110.88	{'count': 28, 'label': 'scan_velocity'}
24	24	1	103.68	{'count': 24, 'label': 'scan_velocity'}
26	7	1	32.76	{'count': 7, 'label': 'scan_velocity'}
0	10711	1	0.00	{'count': 10711, 'label': 'scan_velocity'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 1848 hits 6091.80 pts

Severity	Hits	Labels	Weighted	Top labels
10	618	1	3399.00	{'count': 618, 'label': 'cred'}
8	612	1	2692.80	{'count': 612, 'label': 'cred'}
0	618	1	0.00	{'count': 618, 'label': 'cred'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 122 hits 991.76 pts

Severity	Hits	Labels	Weighted	Top labels
40	89	1	783.20	{'count': 89, 'label': 'sensitive_file'}
36	15	1	118.80	{'count': 15, 'label': 'sensitive_file'}
24	7	1	36.96	{'count': 7, 'label': 'sensitive_file'}
16	6	1	21.12	{'count': 6, 'label': 'sensitive_file'}
22	3	1	14.52	{'count': 3, 'label': 'sensitive_file'}
44	1	1	9.68	{'count': 1, 'label': 'sensitive_file'}
34	1	1	7.48	{'count': 1, 'label': 'sensitive_file'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 26 hits 640.90 pts

Severity	Hits	Labels	Weighted	Top labels
30	13	1	331.50	{'count': 13, 'label': 'cmdi'}
28	13	1	309.40	{'count': 13, 'label': 'cmdi'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 617 hits 111.06 pts

Severity	Hits	Labels	Weighted	Top labels
6	617	1	111.06	{'count': 617, 'label': 'ref'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 9 hits 73.84 pts

Severity	Hits	Labels	Weighted	Top labels
34	5	1	44.20	{'count': 5, 'label': 'trav'}
30	2	1	15.60	{'count': 2, 'label': 'trav'}
28	1	1	7.28	{'count': 1, 'label': 'trav'}
26	1	1	6.76	{'count': 1, 'label': 'trav'}

Firewall probing fwprobe Traffic behavior suggests probing of access controls and protected surfaces. 3 hits 40.50 pts

Severity	Hits	Labels	Weighted	Top labels
32	1	1	14.40	{'count': 1, 'label': 'fwprobe'}
30	1	1	13.50	{'count': 1, 'label': 'fwprobe'}
28	1	1	12.60	{'count': 1, 'label': 'fwprobe'}