Site Watch
Live threat map
A public, delayed look at the scanners and bots Site Watch catches on fullstacks.us. IPs are masked. Data is at least ten minutes old. No user agents and no full request paths.
Last 24 hours
-
Last 7 days
-
Sources blocked now
-
Where probes come from
Country hits over the last 7 days (delayed). Darker amber means more probes. Tap a country for its name and count.
Watching. First probes will appear here.
By trap type
What scanners tried over the last 7 days.
Watching. First probes will appear here.
By country
Top source countries over the last 7 days.
Watching. First probes will appear here.
Last 24 hours
Five-minute buckets, delayed by at least ten minutes.
Watching. First probes will appear here.
Recent probes
Masked sources only. Refreshes about every 60 seconds.
Watching. First probes will appear here.
What Site Watch is
Site Watch is defensive monitoring for your public site. It plants safe decoy paths that real customers never hit, watches for scanners that do, and can flag repeat offenders. This page shows anonymized rollups only so you can see the noise without opening a log file.
We never show full IPs, user agents, or exact URLs here. Numbers lag by at least ten minutes on purpose.
IP geolocation data by DB-IP (DB-IP Lite, CC BY 4.0).