IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure

Global Threat Infrastructure

Nation-state C2 activity · Real-time IOC geo-distribution

12,818High-conf IPs
60Countries
40Attack paths
22,546Actor IOCs
20,294Persistent IPs
23APT Groups
Actors
Russia
China
North Korea
Iran
C2 Density
Critical
High
Medium
Low
Scroll to zoom · Drag to pan
Nation-State ActorsIOC · groups · routes
🇷🇺Russia12,022
8 APT groups18 attack routes
Top targets
→🇺🇸United States788
→🇨🇳China736
→🇭🇰Hong Kong376
TurlaSandwormGamaredonAPT28+2
🇰🇵North Korea8,642
4 APT groups15 attack routes
Top targets
→🇺🇸United States628
→🇨🇳China511
→🇭🇰Hong Kong229
KimsukyAPT37APT38Lazarus Group
🇨🇳China1,648
6 APT groups6 attack routes
Top targets
→🇺🇸United States245
→🇭🇰Hong Kong78
→🇩🇪Germany72
APT10Salt TyphoonVolt TyphoonAPT41+2
🇮🇷Iran184
3 APT groups0 attack routes
Top targets
MuddyWaterAPT34APT35
🇺🇦UA50
1 APT groups1 attack routes
Top targets
→🇭🇰Hong Kong39
FIN7
🇸🇩SD0
1 APT groups0 attack routes
Top targets
Anonymous Sudan
Attack Routesorigin → C2 infra
🇷🇺RU→🇺🇸United States788
🇷🇺RU→🇨🇳China736
🇰🇵KP→🇺🇸United States628
🇰🇵KP→🇨🇳China511
🇷🇺RU→🇭🇰Hong Kong376
🇨🇳CN→🇺🇸United States245
🇷🇺RU→🇩🇪Germany240
🇰🇵KP→🇭🇰Hong Kong229
🇰🇵KP→🇩🇪Germany225
🇰🇵KP→🇳🇱The Netherlands220
🇷🇺RU→🇳🇱The Netherlands205
🇷🇺RU→🇸🇬Singapore152
🇰🇵KP→🇸🇬Singapore110
🇷🇺RU→🇫🇷France106
🇰🇵KP→🇫🇷France106
🇷🇺RU→🇬🇧United Kingdom90
🇨🇳CN→🇭🇰Hong Kong78
🇷🇺RU→🇯🇵Japan76
🇷🇺RU→🇨🇦Canada76
🇨🇳CN→🇩🇪Germany72
Shared Infrastructuremulti-actor C2
🇺🇸
United States
RUKPCN
1661
🇨🇳
China
RUKP
1247
🇭🇰
Hong Kong
RUKPCNUA
722
🇳🇱
The Netherlands
KPRUCN
599
🇩🇪
Germany
RUKPCN
537
🇸🇬
Singapore
RUKPCN
303
🇫🇷
France
RUKPCN
245
🇬🇧
United Kingdom
RUKP
149