Contextual Risk Score
--unknown
Computed instantly from Syndu's current trust-and-risk model.
Behavioral baseline and contextual score for this IP address.
Access Mode
Visitor mode shows a reduced view for performance and keeps raw log access behind the operator boundary. Log in or create an account to unlock full-history report analysis, product surfaces, training, and richer context.
sqli, cmdi, trav, sfp).
Totals and breakdowns are derived from rollups and explainability tables only.
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 6 | 1 | 43.68 |
{'count': 6, 'label': 'trav'}
|
| 26 | 6 | 1 | 40.56 |
{'count': 6, 'label': 'trav'}
|
| 30 | 2 | 1 | 15.60 |
{'count': 2, 'label': 'trav'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 34 | 6 | 1 | 44.88 |
{'count': 6, 'label': 'sensitive_file'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 1 | 1 | 23.80 |
{'count': 1, 'label': 'cmdi'}
|
| 22 | 1 | 1 | 18.70 |
{'count': 1, 'label': 'cmdi'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 22 | 4 | 1 | 15.84 |
{'count': 4, 'label': 'scan_velocity'}
|
| 20 | 2 | 1 | 7.20 |
{'count': 2, 'label': 'scan_velocity'}
|
| 18 | 2 | 1 | 6.48 |
{'count': 2, 'label': 'scan_velocity'}
|
| 0 | 4 | 1 | 0.00 |
{'count': 4, 'label': 'scan_velocity'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 2 | 1 | 1.92 |
{'count': 2, 'label': 'proto'}
|
| 3 | 1 | 1 | 0.24 |
{'count': 1, 'label': 'proto'}
|
| Severity | Hits | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 2 | 1 | 0.32 |
{'count': 2, 'label': 'ua'}
|
| 6 | 2 | 1 | 0.24 |
{'count': 2, 'label': 'ua'}
|
Daily activity with stacked HTTP response classes plus a total-hits trend line from the traffic rollup.
Activity Access
VisitorVisitor mode is limited to the most recent 30 days for performance. Log in or create an account to unlock the full activity history and deeper analysis.
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.
Live geolocation and map tiles auto-load for this IP.
The raw Log Explorer remains a real boundary in the system, but Syndu no longer serves annotated access logs outside the admin channel now that the platform carries commercial traffic. The reports and the contextual score still derive from that underlying evidence.
