Live, refreshed every 5 minutes

Threat trends

Growing threats and attack trends

Bots and attackers probe websites around the clock. This page shows what they tried against the sites and apps protected by the Pay by Jag firewall, where it came from and what is growing. It never shows which site was targeted, who sent it or how our defenses are set up.

Flagged today
237
233 stopped so far today
Last 7 days
243
New compared with the week before
Last 30 days
243
requests flagged
Stopped in 30 days
238
refused, challenged or slowed down
Separate sources
40
seen in 30 days
Countries
0
sent flagged traffic
Networks
0
providers and hosts

Data through Oct 6, 7:00 AM UTC. The numbers run one hour behind on purpose.

This week

The headlines

Volume

Flagged requests per day, last 30 days

Spikes are usually one scanner sweeping the whole internet at once. Point at a day for its numbers. Today counts only the hours so far.

Sep 7. Flagged: 0. Stopped: 0. Sep 8. Flagged: 0. Stopped: 0. Sep 9. Flagged: 0. Stopped: 0. Sep 10. Flagged: 0. Stopped: 0. Sep 11. Flagged: 0. Stopped: 0. Sep 12. Flagged: 0. Stopped: 0. Sep 13. Flagged: 0. Stopped: 0. Sep 14. Flagged: 0. Stopped: 0. Sep 15. Flagged: 0. Stopped: 0. Sep 16. Flagged: 0. Stopped: 0. Sep 17. Flagged: 0. Stopped: 0. Sep 18. Flagged: 0. Stopped: 0. Sep 19. Flagged: 0. Stopped: 0. Sep 20. Flagged: 0. Stopped: 0. Sep 21. Flagged: 0. Stopped: 0. Sep 22. Flagged: 0. Stopped: 0. Sep 23. Flagged: 0. Stopped: 0. Sep 24. Flagged: 0. Stopped: 0. Sep 25. Flagged: 0. Stopped: 0. Sep 26. Flagged: 0. Stopped: 0. Sep 27. Flagged: 0. Stopped: 0. Sep 28. Flagged: 0. Stopped: 0. Sep 29. Flagged: 0. Stopped: 0. Sep 30. Flagged: 0. Stopped: 0. Oct 1. Flagged: 0. Stopped: 0. Oct 2. Flagged: 0. Stopped: 0. Oct 3. Flagged: 0. Stopped: 0. Oct 4. Flagged: 0. Stopped: 0. Oct 5. Flagged: 6. Stopped: 5. Oct 6. Flagged: 237. Stopped: 233.
Show the daily numbers
Day Flagged Stopped
Oct 6 237 233
Oct 5 6 5
Oct 4 0 0
Oct 3 0 0
Oct 2 0 0
Oct 1 0 0
Sep 30 0 0
Sep 29 0 0
Sep 28 0 0
Sep 27 0 0
Sep 26 0 0
Sep 25 0 0
Sep 24 0 0
Sep 23 0 0
Sep 22 0 0
Sep 21 0 0
Sep 20 0 0
Sep 19 0 0
Sep 18 0 0
Sep 17 0 0
Sep 16 0 0
Sep 15 0 0
Sep 14 0 0
Sep 13 0 0
Sep 12 0 0
Sep 11 0 0
Sep 10 0 0
Sep 9 0 0
Sep 8 0 0
Sep 7 0 0

Tactics

What attackers are trying

Every flagged request is sorted into a plain-language attack type. The line shows each one over the last 30 days. A type is listed once at least 3 separate sources were seen.

Other suspicious requests

New

243this week

Requests that matched a protection rule but fit none of the groups above.

100% of this week

Around the world

Where attacks come from

Flagged traffic grouped by where each address is registered. A country is named only after 3 or more separate sources were seen there.

Top countries this week

Flagged requests in the last 7 days and the change from the week before.

  1. No country passed the privacy threshold this week.

Hot spots

Networks and targets behind the traffic

Networks and path patterns are named only after 3 or more separate sources were seen.

Networks sending the most attack traffic

Every internet address belongs to a network, usually an internet provider or a hosting company. Attacks almost always come from servers their customers rent, so this list shows where abuse comes from and where reports to a network's abuse desk would do the most good. Last 30 days.

  1. No network passed the privacy threshold this month.

What they knock on

The most probed paths of the last 30 days, grouped into widely known attack patterns. The pages of the sites we protect never appear here.

  1. No pattern passed the privacy threshold this month.

Coverage

What the firewall covers

One central firewall watches every site and app enrolled with Pay by Jag. Some sites run new rules in watch-only mode first, which is why the flagged and stopped counts differ.

Apps enrolled
4
Websites enrolled
23
Active protection rules
332
  • Address and range rules152
  • Country and network rules29
  • Request pattern rules141
  • Built-in attack checks10

Privacy

How we keep this anonymous

No addresses, no sitesIndividual IP addresses, browser details, the pages that were targeted and the sites they belong to never appear here.
One hour behindNumbers are delayed an hour, so nobody can use this page to check whether a probe they just sent was noticed.
Safety in numbersA country, network, path pattern or attack type is named only after 3 or more separate sources were seen.
Good bots left outSearch engines and link previews that prove who they are are not counted.
Flagged and stoppedFlagged means a protection rule matched. Stopped counts only requests that were actually refused, challenged or slowed down.

Questions about how we protect your data?

Our team answers security questions through support tickets. Card details are handled by Stripe and never stored on our servers.