txcyber.net — threat map / texas
Attacks launched from Texas.
Each flash is a Texas-located IP address caught attacking honeypots and firewalls in the SANS Internet Storm Center sensor network: SSH and Telnet password guessing, web exploit probes, scans for exposed databases and remote desktops.
tracking
active now—
contacts0
hottestsan antonio
feedsans isc · 2026-11-11
track --region TX --threshold 2ACTIVE
tail -f /var/log/tx-threat 0 lines
timecitysource ipoperatorattacksensors
Data: SANS ISC DShield daily sources file (updated 2026-11-11 04:04:14 UTC), Texas IP addresses reported by 2 or more sensors, shown when their activity window covers the current time of day. Updated daily.
Source: SANS Technology Institute, Internet Storm Center · IP Geolocation by DB-IP · Map: US Census Bureau, Natural Earth.
Attack sources are often compromised or rented machines, and locations are approximate (city level). Some entries are research scanners. Not a blocklist.
Source: SANS Technology Institute, Internet Storm Center · IP Geolocation by DB-IP · Map: US Census Bureau, Natural Earth.
Attack sources are often compromised or rented machines, and locations are approximate (city level). Some entries are research scanners. Not a blocklist.