Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Packet Attack Packet Attack

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Flash Map

A little flash movie showing a sample of traffic submitted to dshield within the last 5 minutes. Click here for the 'static' old worldmap.

(see bottom of this page for details on how to use this map on your site).


The width of the line represents the number of packets sent between the two countries:

1 pixel: < 10
2 pixel: < 100
3 pixel: < 1000
4 pixel: < 10000

Note that at this time, there is no 'direction' indicated. The arcs are just connecting source and destination. Any motion is created by your viewer. Assume that countries from which a lot of lines originate are the country of the destination submitting the reports.

The color indicates the packet type based on the following classification:

Blue: Not categorized.
Red: Well known services (Ports 80,53,25,22 ...).
Yellow: Windows related traffic (Port 135,137,139... ).
Green: P2P Traffic/Afterglow (Port 6881,6346,4672... ).
Black: known backdoors (Port 9898,5554,4444...).
The default background map is a scaled down version of NASA's "Earth at Night" image. For more details see: It works here in particular well as the amount of light is somewhat correlated with Internet connectivity in given areas.

Geolocation data is provided by HostIP.

How to use this map

You can use this map on your site by including these tags: