IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure

Global Threat Infrastructure

Nation-state C2 activity · Real-time IOC geo-distribution

19,812High-conf IPs
60Countries
40Attack paths
42,526Actor IOCs
28,618Persistent IPs
26APT Groups
Actors
Russia
China
North Korea
Iran
C2 Density
Critical
High
Medium
Low
Scroll to zoom · Drag to pan
Nation-State ActorsIOC · groups · routes
🇷🇺Russia19,751
10 APT groups13 attack routes
Top targets
→🇺🇸United States1139
→🇨🇳China825
→🇭🇰Hong Kong489
TurlaSandwormGamaredonAPT28+2
🇰🇵North Korea15,072
4 APT groups16 attack routes
Top targets
→🇺🇸United States1184
→🇨🇳China800
→🇭🇰Hong Kong437
KimsukyLazarus GroupAPT37APT38
🇨🇳China5,343
6 APT groups11 attack routes
Top targets
→🇺🇸United States889
→🇩🇪Germany344
→🇭🇰Hong Kong342
APT10APT41Salt TyphoonVolt Typhoon+2
🇺🇦UA1,285
1 APT groups0 attack routes
Top targets
FIN7
🇮🇷Iran1,075
4 APT groups0 attack routes
Top targets
MuddyWaterAPT34APT35APT33
🇸🇩SD0
1 APT groups0 attack routes
Top targets
Anonymous Sudan
Attack Routesorigin → C2 infra
🇰🇵KP→🇺🇸United States1184
🇷🇺RU→🇺🇸United States1139
🇨🇳CN→🇺🇸United States889
🇷🇺RU→🇨🇳China825
🇰🇵KP→🇨🇳China800
🇷🇺RU→🇭🇰Hong Kong489
🇰🇵KP→🇭🇰Hong Kong437
🇰🇵KP→🇩🇪Germany433
🇰🇵KP→🇳🇱The Netherlands395
🇨🇳CN→🇩🇪Germany344
🇨🇳CN→🇭🇰Hong Kong342
🇷🇺RU→🇩🇪Germany337
🇷🇺RU→🇳🇱The Netherlands330
🇨🇳CN→🇳🇱The Netherlands306
🇰🇵KP→🇸🇬Singapore190
🇷🇺RU→🇸🇬Singapore187
🇰🇵KP→🇫🇷France178
🇨🇳CN→🇸🇬Singapore177
🇷🇺RU→🇫🇷France165
🇨🇳CN→🇫🇷France131
Shared Infrastructuremulti-actor C2
🇺🇸
United States
KPRUCN
3212
🇨🇳
China
RUKP
1625
🇭🇰
Hong Kong
RUKPCN
1268
🇳🇱
The Netherlands
KPRUCN
1136
🇩🇪
Germany
KPCNRU
1114
🇸🇬
Singapore
KPRUCN
554
🇫🇷
France
KPRUCN
474
🇯🇵
Japan
KPRUCN
311