Attack map
The InfraFence attack map on the Overview - where the attacks on your servers come from, live, with the busiest addresses per country and country blocking in one step.
Last updated:
Attack origins, on the Overview, shows the countries the attacks on your servers came from, by the address of each attack. Every plan has it.
Reading the map
- Choose the range: 24h, 12h or 6h. Your choice is remembered in your browser.
- Each country is a dot sized by its number of attacks, and the country is lightly filled. New attacks appear as they arrive, with a short pulse.
- Next to the map: the total, and the top 5 countries, which carry the same data as the map in text. Show all lists every country.
- The map places the 5,000 busiest addresses. Attacks from addresses without a known country are counted apart.
Countries come from the DB-IP "IP to Country Lite" database (CC BY 4.0), credited under the map.
A country's details
Click a country to open its attack types and its busiest addresses: up to 20, the most attacks first, with the server each one attacked last. Events opens that server's events filtered by the address.
Block a country
Block country blocks it on every server of the organization (owners and admins, Pro and higher). The block appears in Activity, where you can undo it. See Country blocking for what the servers need.
In the confirmation, choose where: On every server, or Only on one of the servers the country attacked (owners and admins, Basic and higher). A block on one server applies right away and is listed on that server's Network tab, where you remove it: see Country blocking.