103.18.188.129
high
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 40 | 4326 | 1 | 38068.80 |
sensitive_file 4326
|
| 16 | 504 | 1 | 1774.08 |
sensitive_file 504
|
| 36 | 104 | 1 | 823.68 |
sensitive_file 104
|
| 24 | 145 | 1 | 765.60 |
sensitive_file 145
|
| 30 | 44 | 1 | 290.40 |
sensitive_file 44
|
| 44 | 8 | 1 | 77.44 |
sensitive_file 8
|
| 22 | 12 | 1 | 58.08 |
sensitive_file 12
|
| 42 | 4 | 1 | 36.96 |
sensitive_file 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 34 | 953 | 1 | 8424.52 |
trav 953
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 150 | 1 | 825.00 |
cred 150
|
| 12 | 4 | 1 | 26.40 |
cred 4
|
| 0 | 96 | 1 | 0.00 |
cred 96
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 36 | 67 | 1 | 434.16 |
scan_velocity 67
|
| 32 | 30 | 1 | 172.80 |
scan_velocity 30
|
| 10 | 8 | 1 | 14.40 |
scan_velocity 8
|
| 30 | 2 | 1 | 10.80 |
scan_velocity 2
|
| 28 | 2 | 1 | 10.08 |
scan_velocity 2
|
| 26 | 2 | 1 | 9.36 |
scan_velocity 2
|
| 24 | 2 | 1 | 8.64 |
scan_velocity 2
|
| 22 | 2 | 1 | 7.92 |
scan_velocity 2
|
| 20 | 2 | 1 | 7.20 |
scan_velocity 2
|
| 18 | 2 | 1 | 6.48 |
scan_velocity 2
|
| 16 | 2 | 1 | 5.76 |
scan_velocity 2
|
| 14 | 2 | 1 | 5.04 |
scan_velocity 2
|
| 12 | 2 | 1 | 4.32 |
scan_velocity 2
|
| 0 | 48 | 1 | 0.00 |
scan_velocity 48
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 18 | 1 | 2.16 |
ua 18
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.