Networks and reported attempts
Sources and interpretation
2025-10-09–2026-10-08; domes fixed 2026-10-08 · SANS ISC / DShield · CAIDA · Natural Earth
Dome base area is proportional to report count. The estimated source-IP country is not the attack target, attacker location or number of successful intrusions. Country histories were not obtained, so domes stay fixed while the global daily series follows 365 days, 9 October 2025–8 October 2026. Country and daily aggregates have different collection windows and do not sum to the same value. CAIDA BGP-inferred AS adjacencies are aggregated by the registered countries of operating organisations. Orange line width represents AS-link count, not traffic volume, cable geography or source–victim attack pairs. These links are not individually matched to DShield reports.
The annual series is global; dome sizes remain fixed. Source IP geography is neither victim geography nor perpetrator identity. Orange lines aggregate CAIDA AS adjacencies by organisation registration country; they are neither attack flows nor physical cable routes.
SANS Technology Institute, Internet Storm Center, https://isc.sans.edu; CAIDA AS Relationships / AS Organizations (2026-10); Natural Earth. Visualization by SORAH.
Data, processing and reuse · Primary source