Real visitors: distinct browser (IP + user agent) that also loaded page assets or called the API, which is what a person does. Browser hits includes things that only claim to be a browser. Your own IP is excluded and counted under You. Days before Oct 20 can't always tell which site on a shared server a request was for, so they show as "unattributed".
These are the rules, not active problems. A green dot means the rule checked out fine on the last check; a red one means it has found something (also listed under Open problems on the Overview). If a rule fires: Critical/Serious email you right away and again when fixed; Warning only appears in the 7 AM daily summary. Untick a rule to stop it entirely.