91.92.249.4
low
High-level context about this subnet: size, density, traffic, risk, and geographic footprint.
sqli, cmdi, trav, sfp, bot).
Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.
Heatmap of annotator × severity for this subnet. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 24 | 276 | 1 | 1457.28 |
sensitive_file 276
|
| 40 | 54 | 1 | 475.20 |
sensitive_file 54
|
| 34 | 44 | 1 | 329.12 |
sensitive_file 44
|
| 30 | 7 | 1 | 46.20 |
sensitive_file 7
|
| 22 | 5 | 1 | 24.20 |
sensitive_file 5
|
| 36 | 2 | 1 | 15.84 |
sensitive_file 2
|
| 16 | 2 | 1 | 7.04 |
sensitive_file 2
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 26 | 44 | 1 | 297.44 |
trav 44
|
| 34 | 9 | 1 | 79.56 |
trav 9
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 30 | 7 | 1 | 94.50 |
fwprobe 7
|
| 28 | 6 | 1 | 75.60 |
fwprobe 6
|
| 22 | 6 | 1 | 59.40 |
fwprobe 6
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 8 | 1 | 44.00 |
cred 8
|
| 8 | 6 | 1 | 26.40 |
cred 6
|
| 6 | 4 | 1 | 13.20 |
cred 4
|
| 12 | 2 | 1 | 13.20 |
cred 2
|
| 0 | 12 | 1 | 0.00 |
cred 12
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 10 | 297 | 1 | 59.40 |
ua 297
|
| 8 | 95 | 1 | 15.20 |
ua 95
|
| 6 | 97 | 1 | 11.64 |
ua 97
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 12 | 11 | 1 | 23.76 |
scan_velocity 11
|
| 14 | 2 | 1 | 5.04 |
scan_velocity 2
|
| 0 | 12 | 1 | 0.00 |
scan_velocity 12
|
| Severity | Total | Labels | Weighted | Top labels |
|---|---|---|---|---|
| 6 | 7 | 1 | 1.26 |
ref 7
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.
Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).
Compares other subnet snapshots matching this report’s ASN/org identity. “Same window” keeps the comparison within the latest snapshot window.