High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 24 | 6 | 1 | 25.92 |
scan_velocity 6
|
| 22 | 6 | 1 | 23.76 |
scan_velocity 6
|
| 20 | 5 | 1 | 18.00 |
scan_velocity 5
|
| 18 | 5 | 1 | 16.20 |
scan_velocity 5
|
| 16 | 5 | 1 | 14.40 |
scan_velocity 5
|
| 14 | 4 | 1 | 10.08 |
scan_velocity 4
|
| 12 | 4 | 1 | 8.64 |
scan_velocity 4
|
| 10 | 2 | 1 | 3.60 |
scan_velocity 2
|
| 0 | 16 | 1 | 0.00 |
scan_velocity 16
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 8 | 1 | 52.80 |
cred 8
|
| 6 | 8 | 1 | 26.40 |
cred 8
|
| 8 | 5 | 1 | 22.00 |
cred 5
|
| 0 | 8 | 1 | 0.00 |
cred 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 381 | 1 | 60.96 |
ua 381
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
20.171.207.0/24
/24
Risk
66
13.74.119.0/24
/24
Risk
62
40.77.167.0/24
/24
Risk
6
52.167.144.0/24
/24
Risk
6
51.8.102.0/24
/24
Risk
3
40.76.163.0/24
/24
Risk
7
51.8.155.0/24
/24
Risk
1
23.98.186.0/24
/24
Risk
1
57.154.175.0/24
/24
Risk
2
40.77.188.0/24
/24
Risk
1
172.178.141.0/24
/24
Risk
1
40.84.221.0/24
/24
Risk
1
172.178.140.0/24
/24
Risk
1
52.225.75.0/24
/24
Risk
1
13.83.167.0/24
/24
Risk
1
40.77.189.0/24
/24
Risk
1
40.77.190.0/24
/24
Risk
1
40.77.202.0/24
/24
Risk
1
52.156.77.0/24
/24
Risk
1
23.98.179.0/24
/24
Risk
0
