High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 40 | 300 | 1 | 2640.00 |
sensitive_file 300
|
| 30 | 5 | 1 | 33.00 |
sensitive_file 5
|
| 36 | 3 | 1 | 23.76 |
sensitive_file 3
|
| 24 | 3 | 1 | 15.84 |
sensitive_file 3
|
| 16 | 4 | 1 | 14.08 |
sensitive_file 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 4804 | 1 | 2402.00 |
bot 4804
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 4804 | 1 | 1152.96 |
ua 4804
|
| 8 | 28 | 1 | 4.48 |
ua 28
|
| 6 | 14 | 1 | 1.68 |
ua 14
|
| 10 | 6 | 1 | 1.20 |
ua 6
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 72 | 1 | 396.00 |
cred 72
|
| 8 | 57 | 1 | 250.80 |
cred 57
|
| 12 | 5 | 1 | 33.00 |
cred 5
|
| 0 | 66 | 1 | 0.00 |
cred 66
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 42 | 1 | 75.60 |
scan_velocity 42
|
| 26 | 8 | 1 | 37.44 |
scan_velocity 8
|
| 24 | 4 | 1 | 17.28 |
scan_velocity 4
|
| 22 | 3 | 1 | 11.88 |
scan_velocity 3
|
| 20 | 2 | 1 | 7.20 |
scan_velocity 2
|
| 18 | 2 | 1 | 6.48 |
scan_velocity 2
|
| 16 | 2 | 1 | 5.76 |
scan_velocity 2
|
| 0 | 32 | 1 | 0.00 |
scan_velocity 32
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 30 | 2 | 1 | 15.60 |
trav 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 53 | 1 | 9.54 |
ref 53
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 2 | 1 | 1.20 |
method 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 0 | 2 | 1 | 0.00 |
request_size 2
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
