18.225.56.185
low
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 2412 | 1 | 1206.00 |
bot 2412
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 39 | 1 | 70.20 |
scan_velocity 39
|
| 20 | 2 | 1 | 7.20 |
scan_velocity 2
|
| 18 | 2 | 1 | 6.48 |
scan_velocity 2
|
| 16 | 2 | 1 | 5.76 |
scan_velocity 2
|
| 14 | 2 | 1 | 5.04 |
scan_velocity 2
|
| 12 | 2 | 1 | 4.32 |
scan_velocity 2
|
| 0 | 36 | 1 | 0.00 |
scan_velocity 36
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 2 | 1 | 0.24 |
ua 2
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
18.225.56.185
low
18.225.56.116
low
18.225.56.198
low
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
216.73.216.0/24
/24
Risk
100
18.221.228.0/24
/24
Risk
12
13.58.156.0/24
/24
Risk
22
3.148.200.0/24
/24
Risk
11
3.133.141.0/24
/24
Risk
5
18.119.0.0/24
/24
Risk
8
3.21.190.0/24
/24
Risk
6
3.15.26.0/24
/24
Risk
10
3.149.230.0/24
/24
Risk
11
3.147.46.0/24
/24
Risk
4
3.15.7.0/24
/24
Risk
8
3.15.10.0/24
/24
Risk
10
18.117.101.0/24
/24
Risk
8
3.128.28.0/24
/24
Risk
2
3.138.188.0/24
/24
Risk
20
3.14.249.0/24
/24
Risk
9
52.14.150.0/24
/24
Risk
4
3.20.233.0/24
/24
Risk
7
3.143.7.0/24
/24
Risk
9
3.16.112.0/24
/24
Risk
9