196.251.81.89
low
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 40 | 167 | 1 | 1469.60 |
sensitive_file 167
|
| 24 | 39 | 1 | 205.92 |
sensitive_file 39
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 22 | 1 | 10.56 |
method 22
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 27 | 1 | 4.32 |
ua 27
|
| 12 | 2 | 1 | 0.48 |
ua 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 1 | 1 | 0.50 |
bot 1
|
| 8 | 1 | 1 | 0.40 |
bot 1
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
196.251.81.89
low
196.251.81.136
low
196.251.81.69
low
196.251.81.227
low
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.