High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 44 | 151 | 1 | 1461.68 |
sensitive_file 151
|
| 40 | 99 | 1 | 871.20 |
sensitive_file 99
|
| 34 | 33 | 1 | 246.84 |
sensitive_file 33
|
| 36 | 10 | 1 | 79.20 |
sensitive_file 10
|
| 16 | 7 | 1 | 24.64 |
sensitive_file 7
|
| 30 | 2 | 1 | 13.20 |
sensitive_file 2
|
| 24 | 1 | 1 | 5.28 |
sensitive_file 1
|
| 22 | 1 | 1 | 4.84 |
sensitive_file 1
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 78 | 1 | 1856.40 |
cmdi 78
|
| 30 | 3 | 1 | 76.50 |
cmdi 3
|
| 22 | 3 | 1 | 56.10 |
cmdi 3
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 41 | 1 | 298.48 |
trav 41
|
| 34 | 28 | 1 | 247.52 |
trav 28
|
| 26 | 33 | 1 | 223.08 |
trav 33
|
| 30 | 16 | 1 | 124.80 |
trav 16
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 22 | 31 | 1 | 122.76 |
scan_velocity 31
|
| 20 | 8 | 1 | 28.80 |
scan_velocity 8
|
| 18 | 6 | 1 | 19.44 |
scan_velocity 6
|
| 16 | 6 | 1 | 17.28 |
scan_velocity 6
|
| 12 | 7 | 1 | 15.12 |
scan_velocity 7
|
| 14 | 6 | 1 | 15.12 |
scan_velocity 6
|
| 10 | 3 | 1 | 5.40 |
scan_velocity 3
|
| 0 | 33 | 1 | 0.00 |
scan_velocity 33
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 24 | 8 | 1 | 153.60 |
hdrinj 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 32 | 8 | 1 | 115.20 |
fwprobe 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 24 | 1 | 23.04 |
proto 24
|
| 24 | 11 | 1 | 21.12 |
proto 11
|
| 3 | 12 | 1 | 2.88 |
proto 12
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 7 | 1 | 38.50 |
cred 7
|
| 6 | 1 | 1 | 3.30 |
cred 1
|
| 0 | 6 | 1 | 0.00 |
cred 6
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 39 | 1 | 4.68 |
ua 39
|
| 8 | 27 | 1 | 4.32 |
ua 27
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 3 | 8 | 1 | 1.44 |
method 8
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.