IP Address Overview

Automated client behavior bot Traffic patterns strongly suggest automation rather than a human-operated browser. 70104 hits 35052.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	70104	1	35052.00	{'count': 70104, 'label': 'bot'}

Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 8039 hits 11043.00 pts

Severity	Hits	Labels	Weighted	Top labels
10	3513	1	6323.40	{'count': 3513, 'label': 'scan_velocity'}
14	895	1	2255.40	{'count': 895, 'label': 'scan_velocity'}
12	560	1	1209.60	{'count': 560, 'label': 'scan_velocity'}
18	133	1	430.92	{'count': 133, 'label': 'scan_velocity'}
16	128	1	368.64	{'count': 128, 'label': 'scan_velocity'}
20	51	1	183.60	{'count': 51, 'label': 'scan_velocity'}
22	44	1	174.24	{'count': 44, 'label': 'scan_velocity'}
24	12	1	51.84	{'count': 12, 'label': 'scan_velocity'}
30	3	1	16.20	{'count': 3, 'label': 'scan_velocity'}
28	3	1	15.12	{'count': 3, 'label': 'scan_velocity'}
26	3	1	14.04	{'count': 3, 'label': 'scan_velocity'}
0	2694	1	0.00	{'count': 2694, 'label': 'scan_velocity'}

Command injection attempts cmdi Request content resembles attempts to execute OS commands via an application. 12 hits 295.80 pts

Severity	Hits	Labels	Weighted	Top labels
30	6	1	153.00	{'count': 6, 'label': 'cmdi'}
28	6	1	142.80	{'count': 6, 'label': 'cmdi'}

Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 14 hits 117.04 pts

Severity	Hits	Labels	Weighted	Top labels
36	6	1	47.52	{'count': 6, 'label': 'sensitive_file'}
40	5	1	44.00	{'count': 5, 'label': 'sensitive_file'}
44	1	1	9.68	{'count': 1, 'label': 'sensitive_file'}
42	1	1	9.24	{'count': 1, 'label': 'sensitive_file'}
30	1	1	6.60	{'count': 1, 'label': 'sensitive_file'}

Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 3 hits 24.44 pts

Severity	Hits	Labels	Weighted	Top labels
30	2	1	15.60	{'count': 2, 'label': 'trav'}
34	1	1	8.84	{'count': 1, 'label': 'trav'}

Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 6 hits 19.80 pts

Severity	Hits	Labels	Weighted	Top labels
10	2	1	11.00	{'count': 2, 'label': 'cred'}
8	2	1	8.80	{'count': 2, 'label': 'cred'}
0	2	1	0.00	{'count': 2, 'label': 'cred'}

Protocol anomaly proto Request structure or protocol-level signals deviate from typical browser HTTP traffic. 1 hits 1.92 pts

Severity	Hits	Labels	Weighted	Top labels
24	1	1	1.92	{'count': 1, 'label': 'proto'}

Referrer abuse ref Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation. 4 hits 0.90 pts

Severity	Hits	Labels	Weighted	Top labels
9	2	1	0.54	{'count': 2, 'label': 'ref'}
6	2	1	0.36	{'count': 2, 'label': 'ref'}