Live threat map

This is what hits one small server, every day.

The server that hosts this website is a small machine in Montreal. Nobody would pick it as a target. This map shows every automated attempt to break into it, over the last 24 hours or the last 30 days. Your computers, accounts and inboxes face the same thing, day and night.

Live · last 24 hours

SSH login attempt Web probe Our server, Montreal

Attempts per hour

24 hours agoNow

Top sources by country

–

Attempts to break in, last 24 hours

–

SSH login attempts

–

Web probes

–

Countries

–

Addresses blocked

Replaying recent attempts

How to read this

Real attempts, against a real server.

SSH login attempts are automated tools guessing usernames to get into the server's administrator access.
Web probes are requests for WordPress logins, password files and admin pages that don't exist here, looking for a weakness.
Countries show where each connection came from. That's usually a hijacked computer or a rented server, not the attacker's home.
Addresses blocked counts the times an address that kept trying was shut out automatically.

The server only accepts key-based logins, so guessed passwords can't work. We publish countries and counts only, never addresses. The arcs replay the most recent attempts at the time they happened.

A single server is easy to lock down. A team's laptops, inboxes and logins are not. That's why Managed EDR and Managed ITDR watch them around the clock.

IP geolocation by DB-IP, licensed CC BY 4.0. Map outlines from Natural Earth.

Find out what's actually protecting your machines tonight.

Thirty minutes. We'll look at how your computers are covered today, what would happen if one were compromised after hours, and where the gaps are. A plain answer either way.

Book a security call →

Or email sales@rrcyber.ca