Observatory
The network, in public figures.
Loading the latest figures.
Nodes
How many nodes, and how close to a first report.
A collective report needs several independent nodes to see the same attacker. Until enough nodes are eligible, nothing is reported. New nodes count after a waiting period.
Outcomes
What the network confirmed, reported and got taken down.
Over the last 30 days, two days behind on purpose.
Activity
What the network sees.
Attacking addresses per day. The figures are rounded and published with a delay of a few days, so no single node can be picked out.
Last 30 days
Most targeted services, tags and malware families.
Shares of what the network saw. A name only appears once enough sightings back it.
Privacy rules
Why these numbers are safe to publish.
The file holds totals for the whole network and nothing about any one node. These are the thresholds it is built with right now.
The figures are not available yet.
Either the network has not published its first figures, or the file cannot be reached from your browser right now. Nothing is broken on your side. Try again in a moment, or read how the network works while you wait.