Live threat map

This is a live map of IPs that fail2ban has flagged or banned on a small personal VPS — mostly SSH brute-force scans, bot-net login attempts, and nginx bot probes. Everything you see is real, hitting a real box, right now.

Your dot is already on the map. When you load this page, the server geolocates your IP and plots you as a live viewer so you can see where you're connecting from — and anyone else currently watching.

Live viewer (you & others) Attacker — fail2ban found activity Attacker — actively banned Perma-banned (manual block)

Low activity right now? Real servers don't always have a steady stream of attacks — the counters tick up in real time as new events roll in.

Live Feed
Perma Banned