High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 40 | 182 | 1 | 1601.60 |
sensitive_file 182
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 403 | 1 | 201.50 |
bot 403
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 13 | 1 | 71.50 |
cred 13
|
| 12 | 6 | 1 | 39.60 |
cred 6
|
| 8 | 7 | 1 | 30.80 |
cred 7
|
| 0 | 13 | 1 | 0.00 |
cred 13
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 403 | 1 | 96.72 |
ua 403
|
| 10 | 106 | 1 | 21.20 |
ua 106
|
| 8 | 46 | 1 | 7.36 |
ua 46
|
| 6 | 8 | 1 | 0.96 |
ua 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 15 | 1 | 27.00 |
scan_velocity 15
|
| 12 | 9 | 1 | 19.44 |
scan_velocity 9
|
| 24 | 3 | 1 | 12.96 |
scan_velocity 3
|
| 22 | 2 | 1 | 7.92 |
scan_velocity 2
|
| 14 | 3 | 1 | 7.56 |
scan_velocity 3
|
| 0 | 22 | 1 | 0.00 |
scan_velocity 22
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 4 | 1 | 2.40 |
method 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 7 | 1 | 1.26 |
ref 7
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.