20.221.204.54
high
First sighted: May 17, 2023, 3 a.m. · Last sighted: Jan. 26, 2026, 2 a.m.
Daily activity (hits per day) and basic HTTP rollup counters for this city.
Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 8 | 64462 | 1 | 25784.80 | Oct. 16, 2023, 12:30 a.m. | Dec. 17, 2025, 11:59 p.m. |
bot 64462
|
| 10 | 8770 | 1 | 4385.00 | July 14, 2023, 9 a.m. | Jan. 25, 2026, 6:19 p.m. |
bot 8770
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 40 | 1905 | 1 | 16764.00 | July 15, 2023, 5:31 p.m. | Aug. 24, 2025, 12:45 a.m. |
sensitive_file 1905
|
| 24 | 24 | 1 | 126.72 | Sept. 3, 2023, 11:34 p.m. | May 30, 2025, 7:06 a.m. |
sensitive_file 24
|
| 16 | 20 | 1 | 70.40 | Sept. 3, 2023, 11:34 p.m. | Jan. 28, 2024, 1:14 a.m. |
sensitive_file 20
|
| 34 | 9 | 1 | 67.32 | July 7, 2023, 11:45 p.m. | May 31, 2025, 7:16 p.m. |
sensitive_file 9
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 10 | 242 | 1 | 1331.00 | July 10, 2023, 1:42 a.m. | Jan. 23, 2026, 7:57 a.m. |
cred 242
|
| 12 | 18 | 1 | 118.80 | Sept. 18, 2023, 10:27 p.m. | July 31, 2025, 12:14 p.m. |
cred 18
|
| 8 | 12 | 1 | 52.80 | Nov. 11, 2023, 11:31 a.m. | March 25, 2025, 2:21 a.m. |
cred 12
|
| 14 | 1 | 1 | 7.70 | Sept. 26, 2023, 2:03 p.m. | Sept. 26, 2023, 2:03 p.m. |
cred 1
|
| 0 | 185 | 1 | 0.00 | July 10, 2023, 1:42 a.m. | Jan. 23, 2026, 7:57 a.m. |
cred 185
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 28 | 52 | 1 | 655.20 | July 10, 2023, 1:42 a.m. | May 14, 2024, 8:36 p.m. |
fwprobe 52
|
| 22 | 34 | 1 | 336.60 | May 14, 2024, 7:50 a.m. | May 16, 2025, 2:59 p.m. |
fwprobe 34
|
| 20 | 2 | 1 | 18.00 | May 9, 2024, 3:27 a.m. | May 9, 2024, 3:28 a.m. |
fwprobe 2
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 8 | 2819 | 1 | 451.04 | July 6, 2023, 2:51 p.m. | Jan. 10, 2026, 1:48 a.m. |
ua 2819
|
| 6 | 3180 | 1 | 381.60 | May 17, 2023, 11:56 p.m. | Dec. 21, 2025, 9:03 p.m. |
ua 3180
|
| 12 | 259 | 1 | 62.16 | Nov. 2, 2023, 1:39 a.m. | Aug. 28, 2025, 9:01 a.m. |
ua 259
|
| 14 | 171 | 1 | 47.88 | Jan. 9, 2025, 5:15 a.m. | Jan. 9, 2026, 7:21 p.m. |
ua 171
|
| 10 | 62 | 1 | 12.40 | July 13, 2023, 8:54 p.m. | Aug. 20, 2025, 1:22 p.m. |
ua 62
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 10 | 97 | 1 | 174.60 | Aug. 26, 2023, 5:13 p.m. | July 20, 2025, 2:43 p.m. |
scan_velocity 97
|
| 18 | 50 | 1 | 162.00 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:04 p.m. |
scan_velocity 50
|
| 26 | 18 | 1 | 84.24 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:07 p.m. |
scan_velocity 18
|
| 16 | 22 | 1 | 63.36 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:04 p.m. |
scan_velocity 22
|
| 20 | 16 | 1 | 57.60 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:04 p.m. |
scan_velocity 16
|
| 14 | 22 | 1 | 55.44 | Sept. 3, 2023, 11:35 p.m. | Feb. 18, 2025, 9:03 p.m. |
scan_velocity 22
|
| 12 | 24 | 1 | 51.84 | Sept. 3, 2023, 11:34 p.m. | April 16, 2025, 7:55 p.m. |
scan_velocity 24
|
| 24 | 12 | 1 | 51.84 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:07 p.m. |
scan_velocity 12
|
| 22 | 8 | 1 | 31.68 | Sept. 26, 2023, 2:03 p.m. | Feb. 18, 2025, 9:04 p.m. |
scan_velocity 8
|
| 36 | 3 | 1 | 19.44 | Sept. 26, 2023, 2:04 p.m. | Sept. 26, 2023, 2:04 p.m. |
scan_velocity 3
|
| 34 | 3 | 1 | 18.36 | Sept. 26, 2023, 2:04 p.m. | Sept. 26, 2023, 2:04 p.m. |
scan_velocity 3
|
| 32 | 3 | 1 | 17.28 | Sept. 26, 2023, 2:03 p.m. | Sept. 26, 2023, 2:03 p.m. |
scan_velocity 3
|
| 30 | 3 | 1 | 16.20 | Sept. 26, 2023, 2:03 p.m. | Sept. 26, 2023, 2:03 p.m. |
scan_velocity 3
|
| 28 | 3 | 1 | 15.12 | Sept. 26, 2023, 2:03 p.m. | Sept. 26, 2023, 2:03 p.m. |
scan_velocity 3
|
| 0 | 171 | 1 | 0.00 | Aug. 26, 2023, 5:13 p.m. | July 20, 2025, 2:43 p.m. |
scan_velocity 171
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 10 | 622 | 1 | 497.60 | April 15, 2024, 9:43 p.m. | Jan. 23, 2026, 7:55 a.m. |
proto 622
|
| 11 | 108 | 1 | 95.04 | Nov. 29, 2024, 12:56 a.m. | April 3, 2025, 11:30 a.m. |
proto 108
|
| 3 | 248 | 1 | 59.52 | April 15, 2024, 9:43 p.m. | May 31, 2025, 7:16 p.m. |
proto 248
|
| 22 | 2 | 1 | 3.52 | May 7, 2024, 10:17 a.m. | May 7, 2024, 10:17 a.m. |
proto 2
|
| 12 | 2 | 1 | 1.92 | May 31, 2025, 7:16 p.m. | May 31, 2025, 7:16 p.m. |
proto 2
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 28 | 9 | 1 | 214.20 | Feb. 8, 2025, 12:24 p.m. | April 17, 2025, 12:59 a.m. |
cmdi 9
|
| 22 | 8 | 1 | 149.60 | Feb. 8, 2025, 12:24 p.m. | Feb. 8, 2025, 12:52 p.m. |
cmdi 8
|
| 30 | 1 | 1 | 25.50 | Nov. 15, 2025, 12:53 p.m. | Nov. 15, 2025, 12:53 p.m. |
cmdi 1
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 6 | 618 | 1 | 222.48 | April 15, 2024, 9:43 p.m. | Jan. 10, 2026, 1:48 a.m. |
method 618
|
| 10 | 29 | 1 | 17.40 | Dec. 22, 2024, 5:55 a.m. | Jan. 9, 2026, 7:21 p.m. |
method 29
|
| 3 | 28 | 1 | 5.04 | May 7, 2024, 10:17 a.m. | Nov. 23, 2025, 5:44 a.m. |
method 28
|
| 8 | 5 | 1 | 2.40 | May 17, 2023, 11:56 p.m. | Aug. 1, 2023, 8:48 a.m. |
method 5
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 24 | 8 | 1 | 192.00 | Feb. 8, 2025, 12:24 p.m. | Feb. 8, 2025, 12:52 p.m. |
sqli 8
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 28 | 9 | 1 | 65.52 | July 7, 2023, 11:45 p.m. | May 31, 2025, 7:16 p.m. |
trav 9
|
| 26 | 9 | 1 | 60.84 | July 7, 2023, 11:45 p.m. | May 31, 2025, 7:16 p.m. |
trav 9
|
| 34 | 4 | 1 | 35.36 | July 15, 2023, 5:31 p.m. | Aug. 12, 2023, 4:22 a.m. |
trav 4
|
| 30 | 3 | 1 | 23.40 | May 31, 2025, 7:16 p.m. | May 31, 2025, 7:17 p.m. |
trav 3
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 12 | 183 | 1 | 131.76 | Sept. 8, 2023, 9:38 p.m. | Oct. 28, 2025, 7:39 a.m. |
request_size 183
|
| 14 | 19 | 1 | 15.96 | May 28, 2025, 3:47 p.m. | Dec. 17, 2025, 8:39 p.m. |
request_size 19
|
| 0 | 480 | 1 | 0.00 | Jan. 1, 2025, 1:21 a.m. | Nov. 2, 2025, 9:51 a.m. |
request_size 480
|
| Severity | Total | Labels | Weighted | First seen | Last seen | Top labels |
|---|---|---|---|---|---|---|
| 6 | 32 | 1 | 5.76 | July 27, 2023, 2:40 a.m. | April 8, 2025, 11:01 a.m. |
ref 32
|
Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.
Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).
Top risky peers inside this city (latest snapshot). Sorted by risk score, then hits.
20.221.204.54
high
40.116.71.57
high
57.141.4.2
med
57.141.4.18
med
57.141.4.21
med
57.141.4.28
med
57.141.4.27
med
57.141.4.1
med
57.141.4.6
med
23.146.184.101
med
40.116.73.210
med
40.116.73.220
med
57.141.4.17
med
57.141.4.20
med
57.141.4.14
med
57.141.4.15
med
57.141.4.11
med
57.141.4.5
med
57.141.4.12
med
57.141.4.9
med
57.141.4.13
med
57.141.4.30
med
57.141.4.23
med
57.141.4.29
med
57.141.4.16
med
57.141.4.7
med
57.141.4.19
med
57.141.4.8
med
57.141.4.22
med
57.141.4.4
med
57.141.4.24
med
57.141.4.3
med
57.141.4.10
med
57.141.4.25
med
57.141.4.26
med
149.130.215.43
med
40.116.73.213
med
40.116.73.215
med
40.116.73.214
med
40.116.73.221
med
40.116.73.219
med
40.116.73.217
med
40.116.73.212
med
40.116.73.218
med
40.116.73.223
med
185.180.143.11
med
40.77.202.58
med
40.116.73.222
med
57.141.4.37
med
57.141.4.38
med
57.141.4.58
med
57.141.4.34
med
57.141.4.55
med
57.141.4.42
med
57.141.4.43
med
20.102.245.172
med
23.146.184.34
med
185.180.143.141
med
57.141.4.47
low
57.141.4.40
low
57.141.4.53
low
40.77.202.18
low
57.141.4.61
low
57.141.4.60
low
57.141.4.39
low
57.141.4.64
low
57.141.4.59
low
40.77.139.3
low
40.77.139.0
low
57.141.4.46
low
57.141.4.44
low
57.141.4.35
low
57.141.4.56
low
57.141.4.65
low
57.141.4.31
low