A private, community-driven cybersecurity initiative for Guatemala.
Where the malicious activity reported by open sources comes from, and the attacks against the cert.gt sensor network in Guatemala.
The live map of attacks against sensors in Guatemala will go online once the community sensor network is connected. Join with a sensor →
IP address geolocation by DB-IP.
What am I looking at?
Each circle is a country, and its size shows how many internet addresses located there were recently reported for malicious activity: scanning, intrusion attempts or servers that control malware. Each line is one of those real reports arriving at the cert.gt database in Guatemala; they are replayed one by one to show where the activity comes from.
The lines are not attacks against Guatemala: they show intelligence collection. An address's country is where the machine is located, which is often someone else's compromised device or a rented server, not necessarily where the attacker is.