DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ORG REPORT — De Rhr Bap Ngcs Public · de rhr bap ngcs public

First sighted: Aug. 6, 2023, 3 a.m. · Last sighted: Nov. 7, 2025, 2 a.m.

Risk
16 (low)
Total hits
592
Total errors
182
Distinct IPs
20
Distinct ASNs
1
Top country
Germany
Top city
Essen
Top region
North Rhine-Westphalia

Risk

Model: v1 Computed: 2026-01-15 08:32:00
Risk score
16
Low
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 35
Points 301.84
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 12
Points 88.40
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 22
Points 20.16
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 4
Points 17.60
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 3
Points 2.16
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 8
Points 1.12

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this organization.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
63
3xx
342
4xx
182
5xx
0
Unique URLs
402
Total hits
592
First seen
Aug. 6, 2023, 3 a.m.
Last seen
Nov. 7, 2025, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 35 pts 301.84
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 30 1 264.00 Jan. 13, 2024, 2:09 p.m. Aug. 3, 2025, 7:43 p.m.
sensitive_file 30
34 4 1 29.92 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
sensitive_file 4
36 1 1 7.92 Nov. 6, 2023, 5:21 a.m. Nov. 6, 2023, 5:21 a.m.
sensitive_file 1
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 12 pts 88.40
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 4 1 29.12 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
trav 4
26 4 1 27.04 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
trav 4
30 3 1 23.40 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
trav 3
34 1 1 8.84 Nov. 6, 2023, 5:21 a.m. Nov. 6, 2023, 5:21 a.m.
trav 1
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 22 pts 20.16
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 10 1 18.00 Sept. 21, 2023, 6:25 p.m. Aug. 3, 2025, 7:43 p.m.
scan_velocity 10
12 1 1 2.16 Sept. 21, 2023, 6:26 p.m. Sept. 21, 2023, 6:26 p.m.
scan_velocity 1
0 11 1 0.00 Sept. 21, 2023, 6:25 p.m. Aug. 3, 2025, 7:43 p.m.
scan_velocity 11
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 4 pts 17.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 2 1 11.00 Nov. 13, 2023, 5:39 p.m. Nov. 13, 2023, 5:39 p.m.
cred 2
12 1 1 6.60 Nov. 13, 2023, 5:39 p.m. Nov. 13, 2023, 5:39 p.m.
cred 1
0 1 1 0.00 Nov. 13, 2023, 5:39 p.m. Nov. 13, 2023, 5:39 p.m.
cred 1
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 3 pts 2.16
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 2 1 1.92 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
proto 2
3 1 1 0.24 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
proto 1
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 8 pts 1.12
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 5 1 0.60 Aug. 7, 2023, 2:33 a.m. Nov. 6, 2025, 8:02 a.m.
ua 5
8 2 1 0.32 Nov. 6, 2025, 8:02 a.m. Nov. 6, 2025, 8:02 a.m.
ua 2
10 1 1 0.20 April 6, 2025, 5:42 a.m. April 6, 2025, 5:42 a.m.
ua 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

ASNs held by this org

Derived from IP rollups (IPReportTotal). Grouped by (asn, as_org_name).
Loading…

Interesting IPs

Top risky peers inside this org (latest snapshot). Sorted by risk score, then hits.

82.165.252.107 low
Open report
8 /100
Last seen 2024-05-29 03:00
Hits
24
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
212.227.3.250 low
Open report
4 /100
Last seen 2025-11-07 02:00
Hits
5
Errors
3
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.38.57 low
Open report
1 /100
Last seen 2025-08-04 03:00
Hits
189
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.236.53 low
Open report
1 /100
Last seen 2023-11-07 02:00
Hits
54
Errors
54
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.238.39 low
Open report
1 /100
Last seen 2024-01-16 02:00
Hits
6
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.53.136 low
Open report
1 /100
Last seen 2024-01-20 02:00
Hits
4
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.184.76 low
Open report
1 /100
Last seen 2023-11-14 02:00
Hits
1
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.125.69 low
Open report
0 /100
Last seen 2025-02-06 02:00
Hits
59
Errors
14
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.61.230 low
Open report
0 /100
Last seen 2024-05-09 03:00
Hits
49
Errors
34
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.97.195 low
Open report
0 /100
Last seen 2025-01-26 02:00
Hits
42
Errors
3
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.13.165 low
Open report
0 /100
Last seen 2023-09-22 03:00
Hits
40
Errors
37
Country
Germany
ASN
AS8560
AS Org
IONOS SE
212.227.201.53 low
Open report
0 /100
Last seen 2025-02-09 02:00
Hits
34
Errors
8
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.125.158 low
Open report
0 /100
Last seen 2025-02-07 02:00
Hits
20
Errors
3
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.11.27 low
Open report
0 /100
Last seen 2025-02-03 02:00
Hits
20
Errors
4
Country
Germany
ASN
AS8560
AS Org
IONOS SE
212.227.203.178 low
Open report
0 /100
Last seen 2023-12-10 02:00
Hits
20
Errors
17
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.25.51 low
Open report
0 /100
Last seen 2025-01-24 02:00
Hits
12
Errors
1
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.102.90 low
Open report
0 /100
Last seen 2023-08-08 03:00
Hits
9
Errors
3
Country
Germany
ASN
AS8560
AS Org
IONOS SE
217.160.188.238 low
Open report
0 /100
Last seen 2025-02-09 02:00
Hits
2
Errors
1
Country
Germany
ASN
AS8560
AS Org
IONOS SE
212.227.182.116 low
Open report
0 /100
Last seen 2025-07-27 03:00
Hits
1
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE
82.165.125.50 low
Open report
0 /100
Last seen 2025-04-07 03:00
Hits
1
Errors
0
Country
Germany
ASN
AS8560
AS Org
IONOS SE