High-level context about this IP: ownership, geography, and traffic profile.
sqli, cmdi, trav, sfp).
Totals and breakdowns are derived from rollups and explainability tables only.
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 25969 | 1 | 12984.50 | n/a |
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 169 | 1 | 304.20 | n/a |
| 14 | 8 | 1 | 20.16 | n/a |
| 12 | 8 | 1 | 17.28 | n/a |
| 16 | 6 | 1 | 17.28 | n/a |
| 18 | 4 | 1 | 12.96 | n/a |
| 24 | 2 | 1 | 8.64 | n/a |
| 22 | 2 | 1 | 7.92 | n/a |
| 20 | 2 | 1 | 7.20 | n/a |
| 0 | 130 | 1 | 0.00 | n/a |
Daily activity (hits per day) plus HTTP response mix and basic counters from the traffic rollup.
Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 10 | 25969 | 1 | 12984.50 | May 16, 2025, 2:43 a.m. | Aug. 2, 2025, 12:31 a.m. | — |
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 10 | 169 | 1 | 304.20 | May 16, 2025, 2:15 p.m. | Aug. 1, 2025, 1:51 p.m. | — |
| 14 | 8 | 1 | 20.16 | July 30, 2025, 12:30 a.m. | July 30, 2025, 1:13 p.m. | — |
| 12 | 8 | 1 | 17.28 | July 30, 2025, 12:30 a.m. | July 30, 2025, 6:39 p.m. | — |
| 16 | 6 | 1 | 17.28 | July 30, 2025, 1:59 a.m. | July 30, 2025, 1:13 p.m. | — |
| 18 | 4 | 1 | 12.96 | July 30, 2025, 1:13 p.m. | July 30, 2025, 1:14 p.m. | — |
| 24 | 2 | 1 | 8.64 | July 30, 2025, 1:14 p.m. | July 30, 2025, 1:14 p.m. | — |
| 22 | 2 | 1 | 7.92 | July 30, 2025, 1:14 p.m. | July 30, 2025, 1:14 p.m. | — |
| 20 | 2 | 1 | 7.20 | July 30, 2025, 1:14 p.m. | July 30, 2025, 1:14 p.m. | — |
| 0 | 130 | 1 | 0.00 | May 16, 2025, 2:15 p.m. | Aug. 1, 2025, 1:51 p.m. | — |
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.
Live geolocation and map tiles auto-load for this IP.
Open the Log Explorer to review individual access events, annotator decisions, labels, and supporting details (UA / referer / rule ids) in a paginated, filterable view.