High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 40 | 2657 | 1 | 23381.60 |
sensitive_file 2657
|
| 24 | 333 | 1 | 1758.24 |
sensitive_file 333
|
| 36 | 55 | 1 | 435.60 |
sensitive_file 55
|
| 16 | 122 | 1 | 429.44 |
sensitive_file 122
|
| 34 | 8 | 1 | 59.84 |
sensitive_file 8
|
| 30 | 8 | 1 | 52.80 |
sensitive_file 8
|
| 22 | 3 | 1 | 14.52 |
sensitive_file 3
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 397 | 1 | 9448.60 |
cmdi 397
|
| 30 | 334 | 1 | 8517.00 |
cmdi 334
|
| 22 | 310 | 1 | 5797.00 |
cmdi 310
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 34 | 359 | 1 | 3173.56 |
trav 359
|
| 30 | 10 | 1 | 78.00 |
trav 10
|
| 28 | 8 | 1 | 58.24 |
trav 8
|
| 26 | 8 | 1 | 54.08 |
trav 8
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 22 | 129 | 1 | 510.84 |
scan_velocity 129
|
| 32 | 81 | 1 | 466.56 |
scan_velocity 81
|
| 24 | 79 | 1 | 341.28 |
scan_velocity 79
|
| 20 | 50 | 1 | 180.00 |
scan_velocity 50
|
| 28 | 32 | 1 | 161.28 |
scan_velocity 32
|
| 10 | 82 | 1 | 147.60 |
scan_velocity 82
|
| 30 | 25 | 1 | 135.00 |
scan_velocity 25
|
| 18 | 38 | 1 | 123.12 |
scan_velocity 38
|
| 26 | 26 | 1 | 121.68 |
scan_velocity 26
|
| 12 | 53 | 1 | 114.48 |
scan_velocity 53
|
| 16 | 37 | 1 | 106.56 |
scan_velocity 37
|
| 14 | 40 | 1 | 100.80 |
scan_velocity 40
|
| 36 | 15 | 1 | 97.20 |
scan_velocity 15
|
| 34 | 6 | 1 | 36.72 |
scan_velocity 6
|
| 0 | 327 | 1 | 0.00 |
scan_velocity 327
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 4849 | 1 | 775.84 |
ua 4849
|
| 10 | 294 | 1 | 58.80 |
ua 294
|
| 6 | 196 | 1 | 23.52 |
ua 196
|
| 12 | 34 | 1 | 8.16 |
ua 34
|
| 14 | 1 | 1 | 0.28 |
ua 1
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 96 | 1 | 528.00 |
cred 96
|
| 12 | 24 | 1 | 158.40 |
cred 24
|
| 8 | 3 | 1 | 13.20 |
cred 3
|
| 0 | 69 | 1 | 0.00 |
cred 69
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 28 | 4 | 1 | 50.40 |
fwprobe 4
|
| 30 | 3 | 1 | 40.50 |
fwprobe 3
|
| 22 | 4 | 1 | 39.60 |
fwprobe 4
|
| 32 | 2 | 1 | 28.80 |
fwprobe 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 8 | 319 | 1 | 153.12 |
method 319
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 34 | 1 | 17.00 |
bot 34
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.
