--unknown
Contextual Risk
Context-aware score.
Behavioral baseline and contextual score for this IP address.
Access Mode
Visitor mode shows a reduced view for performance (recent activity window and gated deep analysis). Log in or create an account to unlock full-history analysis, advanced tools, training, and richer context.
sqli, cmdi, trav, sfp).
Totals and breakdowns are derived from rollups and explainability tables only.
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 666748 | 1 | 333374.00 |
{'count': 666748, 'label': 'bot'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 20 | 12138 | 1 | 43696.80 |
{'count': 12138, 'label': 'scan_velocity'}
|
| 18 | 4980 | 1 | 16135.20 |
{'count': 4980, 'label': 'scan_velocity'}
|
| 22 | 3622 | 1 | 14343.12 |
{'count': 3622, 'label': 'scan_velocity'}
|
| 10 | 5522 | 1 | 9939.60 |
{'count': 5522, 'label': 'scan_velocity'}
|
| 14 | 3334 | 1 | 8401.68 |
{'count': 3334, 'label': 'scan_velocity'}
|
| 16 | 2326 | 1 | 6698.88 |
{'count': 2326, 'label': 'scan_velocity'}
|
| 12 | 2006 | 1 | 4332.96 |
{'count': 2006, 'label': 'scan_velocity'}
|
| 0 | 17287 | 1 | 0.00 |
{'count': 17287, 'label': 'scan_velocity'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 6875 | 1 | 37812.50 |
{'count': 6875, 'label': 'cred'}
|
| 8 | 6874 | 1 | 30245.60 |
{'count': 6874, 'label': 'cred'}
|
| 0 | 6875 | 1 | 0.00 |
{'count': 6875, 'label': 'cred'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 6875 | 1 | 1237.50 |
{'count': 6875, 'label': 'ref'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 22 | 1 | 1 | 18.70 |
{'count': 1, 'label': 'cmdi'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 14 | 4 | 1 | 3.36 |
{'count': 4, 'label': 'request_size'}
|
Daily activity with stacked HTTP response classes plus a total-hits trend line from the traffic rollup.
Activity Access
VisitorVisitor mode is limited to the most recent 30 days for performance. Log in or create an account to unlock the full activity history and deeper analysis.
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.
Live geolocation and map tiles auto-load for this IP.
The full Log Explorer is members-only because this deep drill-down is computationally expensive. Create an account to unlock ungated analyst tooling, training, and richer contextual workflows.
