Show HN: HashPlane Attack Map
map.hashplane.com
map.hashplane.com
Uncaught TypeError: Failed to execute 'setTimeout' on 'Window': 1 argument required, but only 0 present.
at Object.init ((index):405)
at (index):531
In Chrome and Edge on Windows.The data is sourced from the HashPlane threat intel network.
The data to the websocket is almost real time but its sampled so its not a complete threat feed. If you want to use the data please drop me a note.
CN (110.249.212.46) attacks AU (172.X.X.X) (Port PING)
... (x20)
CN (110.249.212.46) attacks AU (172.X.X.X) (Port PING)
I've seen unwanted contact from that IP 7600 times, its hit pretty much all of our nodes and appears to be scanning for some commonly known ports. Its probably a bot or someone attempting to gather intelligence for attacks.
Since its from China in the Hebei Province my guess right now its from the Alibaba datacenter there or possibly China's APT1 unit. Either way its doing bad stuff and you'd want to block it on your edge (if you have one) or load that IP onto a blocklist with your WAF.
Edit: I just updated the map data stream so it dedupes, it should make it a little prettier :)