112.133.211.220
low
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 25 | 1 | 137.50 |
cred 25
|
| 8 | 4 | 1 | 17.60 |
cred 4
|
| 0 | 18 | 1 | 0.00 |
cred 18
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 22 | 18 | 1 | 87.12 |
sensitive_file 18
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 16 | 12 | 1 | 34.56 |
scan_velocity 12
|
| 14 | 2 | 1 | 5.04 |
scan_velocity 2
|
| 12 | 2 | 1 | 4.32 |
scan_velocity 2
|
| 10 | 2 | 1 | 3.60 |
scan_velocity 2
|
| 0 | 8 | 1 | 0.00 |
scan_velocity 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 4 | 1 | 0.72 |
ref 4
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 1 | 1 | 0.12 |
ua 1
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
220.158.159.0/24
/24
Risk
0
45.115.89.0/24
/24
Risk
0
103.199.180.0/24
/24
Risk
0
220.158.158.0/24
/24
Risk
0