DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ORG REPORT — anyNode · anynode

First sighted: Aug. 24, 2023, 3 a.m. · Last sighted: Dec. 15, 2025, 2 a.m.

Risk
11 (low)
Total hits
115
Total errors
29
Distinct IPs
7
Distinct ASNs
3
Top country
United States
Top city
Tampa
Top region
Florida

Risk

Model: v1 Computed: 2026-01-15 08:32:00
Risk score
11
Low
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 22
Points 171.60
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 13
Points 97.24
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 9
Points 21.60
HTTP method anomaly
Unusual or unexpected HTTP methods observed for the target endpoints.
method
Hits 9
Points 4.32
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 22
Points 3.56
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 3
Points 2.16
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 10
Points

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this organization.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
33
3xx
41
4xx
29
5xx
0
Unique URLs
78
Total hits
115
First seen
Aug. 24, 2023, 3 a.m.
Last seen
Dec. 15, 2025, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 22 pts 171.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 13 1 114.40 Nov. 6, 2025, 8:02 p.m. Dec. 14, 2025, 9:19 p.m.
sensitive_file 13
34 4 1 29.92 July 26, 2025, 4:07 p.m. July 26, 2025, 4:08 p.m.
sensitive_file 4
24 3 1 15.84 Nov. 6, 2025, 8:02 p.m. Nov. 6, 2025, 8:02 p.m.
sensitive_file 3
30 1 1 6.60 Nov. 6, 2025, 8:02 p.m. Nov. 6, 2025, 8:02 p.m.
sensitive_file 1
22 1 1 4.84 Nov. 6, 2025, 8:02 p.m. Nov. 6, 2025, 8:02 p.m.
sensitive_file 1
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 13 pts 97.24
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 4 1 29.12 July 26, 2025, 4:07 p.m. July 26, 2025, 4:08 p.m.
trav 4
26 4 1 27.04 July 26, 2025, 4:07 p.m. July 26, 2025, 4:08 p.m.
trav 4
30 3 1 23.40 July 26, 2025, 4:08 p.m. July 26, 2025, 4:08 p.m.
trav 3
34 2 1 17.68 Nov. 6, 2025, 8:02 p.m. Nov. 6, 2025, 8:02 p.m.
trav 2
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 9 pts 21.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
22 2 1 7.92 July 26, 2025, 4:09 p.m. July 26, 2025, 4:09 p.m.
scan_velocity 2
20 2 1 7.20 July 26, 2025, 4:09 p.m. July 26, 2025, 4:09 p.m.
scan_velocity 2
18 2 1 6.48 July 26, 2025, 4:09 p.m. July 26, 2025, 4:09 p.m.
scan_velocity 2
0 3 1 0.00 July 26, 2025, 4:09 p.m. July 26, 2025, 4:09 p.m.
scan_velocity 3
HTTP method anomaly method
Unusual or unexpected HTTP methods observed for the target endpoints.
hits 9 pts 4.32
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 9 1 4.32 Sept. 23, 2024, 6:10 a.m. Sept. 24, 2024, 4:10 a.m.
method 9
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 22 pts 3.56
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 9 1 1.80 Dec. 14, 2025, 9:19 p.m. Dec. 14, 2025, 9:19 p.m.
ua 9
6 8 1 0.96 Sept. 23, 2024, 6:10 a.m. July 26, 2025, 4:08 p.m.
ua 8
8 5 1 0.80 Sept. 23, 2024, 6:10 a.m. July 26, 2025, 4:08 p.m.
ua 5
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 3 pts 2.16
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 2 1 1.92 July 26, 2025, 4:08 p.m. July 26, 2025, 4:08 p.m.
proto 2
3 1 1 0.24 July 26, 2025, 4:08 p.m. July 26, 2025, 4:08 p.m.
proto 1
Request size anomaly request_size
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 10 pts 0.00
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
0 10 1 0.00 May 18, 2025, 9:34 p.m. May 18, 2025, 9:34 p.m.
request_size 10

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

ASNs held by this org

Derived from IP rollups (IPReportTotal). Grouped by (asn, as_org_name).
Loading…

Interesting IPs

Top risky peers inside this org (latest snapshot). Sorted by risk score, then hits.

216.126.238.127 low
Open report
5 /100
Last seen 2025-07-27 03:00
Hits
26
Errors
24
Country
United States
ASN
AS399804
AS Org
Hostodo
45.59.114.95 low
Open report
3 /100
Last seen 2025-11-07 02:00
Hits
27
Errors
0
Country
Switzerland
ASN
AS14956
AS Org
RouterHosting LLC
216.126.224.219 low
Open report
3 /100
Last seen 2025-12-15 02:00
Hits
9
Errors
0
Country
United States
ASN
AS14956
AS Org
RouterHosting LLC
216.126.231.11 low
Open report
0 /100
Last seen 2025-05-19 03:00
Hits
36
Errors
2
Country
United States
ASN
AS399804
AS Org
Hostodo
130.51.42.29 low
Open report
0 /100
Last seen 2024-09-25 03:00
Hits
9
Errors
3
Country
United States
ASN
AS931
AS Org
Hyonix
216.126.231.175 low
Open report
0 /100
Last seen 2023-10-15 03:00
Hits
6
Errors
0
Country
United States
ASN
AS399804
AS Org
Hostodo
45.59.125.243 low
Open report
0 /100
Last seen 2025-08-22 03:00
Hits
2
Errors
0
Country
Switzerland
ASN
AS14956
AS Org
RouterHosting LLC