Threats, last 24 hours
Protection
Attack activity, last 30 days
Top countries, 7 days
Most targeted, 7 days
Collector
Latest high-risk attackers See all threats
30D3W2W1W3D1DNow
Block an address
Blocked
Protected list These addresses are never blocked, by hand or automatically.
GuardDuty findings, last 30 days AWS's own threat detection on our servers and account
| Loading... |
Activity log Every block, unblock and setting change, and who made it
| Loading... |
Automatic blocking
Block Critical and High risk attackers automatically
Automatic blocks happen within 5 minutes of an attack, in Cloudflare and AWS. Addresses on the protected list are never blocked. Gregg and Nick get an email each time.
Health
Checking...
How risk is labeled
| Risk | What it means | What happens |
|---|---|---|
| Critical | Tried to break in: SQL injection, known exploits, reading server files or AWS secrets, or a serious GuardDuty finding. | Blocked automatically |
| High | Known malicious address, flooding our APIs, scanning for many missing pages, or probing for secret files like .env. | Blocked automatically |
| Medium | Possible scanning, bad bots, or many requests Cloudflare had to block. | Shown here, block by hand |
| Low | Turned away by a firewall rule (for example a blocked country) with no sign of an attack. | Recorded only |
IP locations by DB-IP. Map data © OpenStreetMap contributors.