DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ORG REPORT — Brander Group Inc · brander group inc

First sighted: Feb. 19, 2024, 2 a.m. · Last sighted: Sept. 7, 2025, 3 a.m.

Risk
16 (low)
Total hits
1774
Total errors
69
Distinct IPs
7
Distinct ASNs
3
Top country
Luxembourg
Top city
Steinsel
Top region
Luxembourg

Risk

Model: v1 Computed: 2026-01-15 08:32:00
Risk score
16
Low
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 110
Points 290.52
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 11
Points 79.56
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 4
Points 29.92
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 6
Points 22.00
HTTP method anomaly
Unusual or unexpected HTTP methods observed for the target endpoints.
method
Hits 31
Points 14.88
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 85
Points 10.88
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 3
Points 2.16

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this organization.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
15
3xx
1621
4xx
68
5xx
1
Unique URLs
885
Total hits
1774
First seen
Feb. 19, 2024, 2 a.m.
Last seen
Sept. 7, 2025, 3 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 110 pts 290.52
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
36 15 1 97.20 May 16, 2025, 11:32 p.m. May 16, 2025, 11:34 p.m.
scan_velocity 15
10 17 1 30.60 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 17
30 4 1 21.60 May 16, 2025, 11:32 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
28 4 1 20.16 May 16, 2025, 11:32 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
26 4 1 18.72 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
24 4 1 17.28 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
22 4 1 15.84 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
20 4 1 14.40 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
18 4 1 12.96 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
16 4 1 11.52 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
32 2 1 11.52 May 16, 2025, 11:36 p.m. May 16, 2025, 11:36 p.m.
scan_velocity 2
14 4 1 10.08 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
12 4 1 8.64 May 16, 2025, 11:31 p.m. May 16, 2025, 11:35 p.m.
scan_velocity 4
0 36 1 0.00 May 16, 2025, 11:31 p.m. May 16, 2025, 11:36 p.m.
scan_velocity 36
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 11 pts 79.56
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 4 1 29.12 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
trav 4
26 4 1 27.04 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
trav 4
30 3 1 23.40 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
trav 3
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 4 pts 29.92
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
34 4 1 29.92 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
sensitive_file 4
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 6 pts 22.00
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 4 1 22.00 May 16, 2025, 11:35 p.m. May 16, 2025, 11:35 p.m.
cred 4
0 2 1 0.00 May 16, 2025, 11:35 p.m. May 16, 2025, 11:35 p.m.
cred 2
HTTP method anomaly method
Unusual or unexpected HTTP methods observed for the target endpoints.
hits 31 pts 14.88
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 31 1 14.88 May 14, 2024, 3:10 a.m. Nov. 24, 2024, 3:58 p.m.
method 31
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 85 pts 10.88
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 68 1 8.16 May 14, 2024, 3:10 a.m. Sept. 6, 2025, 8:28 p.m.
ua 68
8 17 1 2.72 May 14, 2024, 3:10 a.m. Sept. 6, 2025, 8:28 p.m.
ua 17
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 3 pts 2.16
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 2 1 1.92 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
proto 2
3 1 1 0.24 Sept. 6, 2025, 8:28 p.m. Sept. 6, 2025, 8:28 p.m.
proto 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

ASNs held by this org

Derived from IP rollups (IPReportTotal). Grouped by (asn, as_org_name).
Loading…

Interesting IPs

Top risky peers inside this org (latest snapshot). Sorted by risk score, then hits.

145.223.8.13 low
Open report
7 /100
Last seen 2025-05-17 03:00
Hits
1278
Errors
48
Country
Luxembourg
ASN
AS209854
AS Org
Cyberzone S.A.
145.223.8.23 low
Open report
5 /100
Last seen 2025-05-17 03:00
Hits
442
Errors
2
Country
Luxembourg
ASN
AS209854
AS Org
Cyberzone S.A.
148.135.111.20 low
Open report
4 /100
Last seen 2025-09-07 03:00
Hits
5
Errors
3
Country
United States
ASN
AS35916
AS Org
MULTACOM CORPORATION
148.135.35.230 low
Open report
1 /100
Last seen 2024-11-25 02:00
Hits
31
Errors
15
Country
United States
ASN
AS35916
AS Org
MULTACOM CORPORATION
148.135.72.248 low
Open report
0 /100
Last seen 2024-02-20 02:00
Hits
12
Errors
1
Country
United States
ASN
AS35916
AS Org
MULTACOM CORPORATION
146.103.5.8 low
Open report
0 /100
Last seen 2025-05-16 03:00
Hits
4
Errors
0
Country
United States
ASN
AS397423
AS Org
Tier.Net Technologies LLC
146.103.5.165 low
Open report
0 /100
Last seen 2025-05-14 03:00
Hits
2
Errors
0
Country
United States
ASN
AS397423
AS Org
Tier.Net Technologies LLC