52.167.144.214
med
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 226593 | 1 | 113296.50 |
bot 226593
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 42 | 1 | 231.00 |
cred 42
|
| 8 | 36 | 1 | 158.40 |
cred 36
|
| 0 | 39 | 1 | 0.00 |
cred 39
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 181 | 1 | 325.80 |
scan_velocity 181
|
| 0 | 173 | 1 | 0.00 |
scan_velocity 173
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 654 | 1 | 78.48 |
ua 654
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 14 | 24 | 1 | 20.16 |
request_size 24
|
| 12 | 11 | 1 | 7.92 |
request_size 11
|
| 0 | 187 | 1 | 0.00 |
request_size 187
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
52.167.144.214
med
52.167.144.199
low
52.167.144.192
low
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
74.7.227.0/24
/24
Risk
1
40.77.167.0/24
/24
Risk
0
157.55.39.0/24
/24
Risk
0
74.7.242.0/24
/24
Risk
0
74.7.243.0/24
/24
Risk
0
74.7.244.0/24
/24
Risk
0
20.169.78.0/24
/24
Risk
0
74.7.230.0/24
/24
Risk
0
74.7.241.0/24
/24
Risk
0