A processing system including at least one processor may obtain a request that identifies a region associated with a wireless communication network, identify sub-areas within the region, obtain performance indicator data for the sub-areas for a plurality of time periods from mobile devices within each sub-area, and apply an adaptive thresholding to the performance indicator data for each sub-area to determine one or more thresholds associated with the performance indicator data. The processing system may further identify a risk level, from among a plurality of risk levels, for each sub-area for at least one time periods based upon the one or more thresholds and the performance indicator data for each sub-area, where the one or more thresholds define one or more risk levels of the plurality of risk levels, and provide reporting data indicating the risk level for each sub-area for the at least one time period.