92.118.39.236
low
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 24 | 134 | 1 | 707.52 |
sensitive_file 134
|
| 40 | 37 | 1 | 325.60 |
sensitive_file 37
|
| 34 | 26 | 1 | 194.48 |
sensitive_file 26
|
| 36 | 4 | 1 | 31.68 |
sensitive_file 4
|
| 16 | 2 | 1 | 7.04 |
sensitive_file 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 18 | 1 | 428.40 |
cmdi 18
|
| 22 | 14 | 1 | 261.80 |
cmdi 14
|
| 30 | 8 | 1 | 204.00 |
cmdi 8
|
| 25 | 4 | 1 | 85.00 |
cmdi 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 26 | 1 | 189.28 |
trav 26
|
| 26 | 26 | 1 | 175.76 |
trav 26
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 6 | 1 | 75.60 |
fwprobe 6
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 212 | 1 | 42.40 |
ua 212
|
| 6 | 79 | 1 | 9.48 |
ua 79
|
| 8 | 42 | 1 | 6.72 |
ua 42
|
| 12 | 4 | 1 | 0.96 |
ua 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 5 | 1 | 9.00 |
scan_velocity 5
|
| 20 | 2 | 1 | 7.20 |
scan_velocity 2
|
| 18 | 2 | 1 | 6.48 |
scan_velocity 2
|
| 16 | 2 | 1 | 5.76 |
scan_velocity 2
|
| 14 | 2 | 1 | 5.04 |
scan_velocity 2
|
| 12 | 1 | 1 | 2.16 |
scan_velocity 1
|
| 0 | 10 | 1 | 0.00 |
scan_velocity 10
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 4 | 1 | 22.00 |
cred 4
|
| 0 | 2 | 1 | 0.00 |
cred 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 2 | 1 | 1.00 |
bot 2
|
| 8 | 1 | 1 | 0.40 |
bot 1
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.