High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 562 | 1 | 112.40 |
ua 562
|
| 8 | 534 | 1 | 85.44 |
ua 534
|
| 6 | 77 | 1 | 9.24 |
ua 77
|
| 12 | 10 | 1 | 2.40 |
ua 10
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 30 | 4 | 1 | 102.00 |
cmdi 4
|
| 28 | 1 | 1 | 23.80 |
cmdi 1
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 36 | 2 | 1 | 15.84 |
sensitive_file 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 42 | 1 | 15.12 |
method 42
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 32 | 1 | 1 | 8.32 |
trav 1
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Top risky peers inside this subnet (latest snapshot). Sorted by risk score, then hits.
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.