High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 1402 | 1 | 1121.60 |
proto 1402
|
| 3 | 790 | 1 | 189.60 |
proto 790
|
| 12 | 1 | 1 | 0.96 |
proto 1
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 1402 | 1 | 504.72 |
method 1402
|
| 10 | 23 | 1 | 13.80 |
method 23
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 1284 | 1 | 205.44 |
ua 1284
|
| 6 | 827 | 1 | 99.24 |
ua 827
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 27 | 1 | 148.50 |
cred 27
|
| 12 | 3 | 1 | 19.80 |
cred 3
|
| 0 | 20 | 1 | 0.00 |
cred 20
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 30 | 2 | 1 | 51.00 |
cmdi 2
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
167.94.138.187
low
167.94.138.197
low
167.94.138.193
low
167.94.138.179
low
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
