IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure

Global Threat Infrastructure

Nation-state C2 activity · Real-time IOC geo-distribution

17,282High-conf IPs
60Countries
40Attack paths
29,197Actor IOCs
26,171Persistent IPs
23APT Groups
Actors
Russia
China
North Korea
Iran
C2 Density
Critical
High
Medium
Low
Scroll to zoom · Drag to pan
Nation-State ActorsIOC · groups · routes
🇷🇺Russia14,382
8 APT groups15 attack routes
Top targets
→🇺🇸United States1130
→🇨🇳China814
→🇭🇰Hong Kong485
TurlaSandwormGamaredonAPT28+2
🇰🇵North Korea9,956
4 APT groups14 attack routes
Top targets
→🇺🇸United States938
→🇨🇳China702
→🇭🇰Hong Kong343
KimsukyLazarus GroupAPT37APT38
🇨🇳China3,400
6 APT groups10 attack routes
Top targets
→🇺🇸United States631
→🇭🇰Hong Kong250
→🇩🇪Germany220
APT10Salt TyphoonVolt TyphoonAPT3+2
🇺🇦UA1,275
1 APT groups1 attack routes
Top targets
→🇭🇰Hong Kong39
FIN7
🇮🇷Iran184
3 APT groups0 attack routes
Top targets
MuddyWaterAPT34APT35
🇸🇩SD0
1 APT groups0 attack routes
Top targets
Anonymous Sudan
Attack Routesorigin → C2 infra
🇷🇺RU→🇺🇸United States1130
🇰🇵KP→🇺🇸United States938
🇷🇺RU→🇨🇳China814
🇰🇵KP→🇨🇳China702
🇨🇳CN→🇺🇸United States631
🇷🇺RU→🇭🇰Hong Kong485
🇰🇵KP→🇭🇰Hong Kong343
🇷🇺RU→🇩🇪Germany329
🇰🇵KP→🇩🇪Germany325
🇷🇺RU→🇳🇱The Netherlands321
🇰🇵KP→🇳🇱The Netherlands305
🇨🇳CN→🇭🇰Hong Kong250
🇨🇳CN→🇩🇪Germany220
🇨🇳CN→🇳🇱The Netherlands213
🇷🇺RU→🇸🇬Singapore188
🇷🇺RU→🇫🇷France150
🇰🇵KP→🇸🇬Singapore147
🇰🇵KP→🇫🇷France146
🇨🇳CN→🇸🇬Singapore114
🇷🇺RU→🇬🇧United Kingdom108
Shared Infrastructuremulti-actor C2
🇺🇸
United States
RUKPCN
2699
🇨🇳
China
RUKP
1516
🇭🇰
Hong Kong
RUKPCNUA
1117
🇳🇱
The Netherlands
RUKPCN
937
🇩🇪
Germany
RUKPCN
874
🇸🇬
Singapore
RUKPCN
449
🇫🇷
France
RUKPCN
392
🇯🇵
Japan
RUKPCN
246