Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure

Global Threat Infrastructure

Nation-state C2 activity · Real-time IOC geo-distribution

19,859High-conf IPs
60Countries
40Attack paths
42,693Actor IOCs
28,391Persistent IPs
26APT Groups
Actors
Russia
China
North Korea
Iran
C2 Density
Critical
High
Medium
Low
Nation-State ActorsIOC · groups · routes
🇷🇺Russia19,754
10 APT groups13 attack routes
Top targets
→🇺🇸United States1139
→🇨🇳China825
→🇭🇰Hong Kong489
TurlaSandwormGamaredonAPT28+2
🇰🇵North Korea15,150
4 APT groups16 attack routes
Top targets
→🇺🇸United States1184
→🇨🇳China800
→🇩🇪Germany437
KimsukyLazarus GroupAPT37APT38
🇨🇳China5,369
6 APT groups11 attack routes
Top targets
→🇺🇸United States886
→🇩🇪Germany345
→🇭🇰Hong Kong337
APT10APT41Salt TyphoonVolt Typhoon+2
🇺🇦UA1,285
1 APT groups0 attack routes
Top targets
FIN7
🇮🇷Iran1,135
4 APT groups0 attack routes
Top targets
MuddyWaterAPT34APT35APT33
🇸🇩SD0
1 APT groups0 attack routes
Top targets
Anonymous Sudan
Attack Routesorigin → C2 infra
🇰🇵KP→🇺🇸United States1184
🇷🇺RU→🇺🇸United States1139
🇨🇳CN→🇺🇸United States886
🇷🇺RU→🇨🇳China825
🇰🇵KP→🇨🇳China800
🇷🇺RU→🇭🇰Hong Kong489
🇰🇵KP→🇩🇪Germany437
🇰🇵KP→🇭🇰Hong Kong437
🇰🇵KP→🇳🇱The Netherlands395
🇷🇺RU→🇩🇪Germany345
🇨🇳CN→🇩🇪Germany345
🇨🇳CN→🇭🇰Hong Kong337
🇷🇺RU→🇳🇱The Netherlands330
🇨🇳CN→🇳🇱The Netherlands314
🇰🇵KP→🇸🇬Singapore190
🇷🇺RU→🇸🇬Singapore187
🇨🇳CN→🇸🇬Singapore179
🇰🇵KP→🇫🇷France178
🇷🇺RU→🇫🇷France162
🇨🇳CN→🇫🇷France131
Shared Infrastructuremulti-actor C2
🇺🇸
United States
KPRUCN
3209
🇨🇳
China
RUKP
1625
🇭🇰
Hong Kong
RUKPCN
1263
🇳🇱
The Netherlands
KPRUCN
1144
🇩🇪
Germany
KPRUCN
1127
🇸🇬
Singapore
KPRUCN
556
🇫🇷
France
KPRUCN
471
🇯🇵
Japan
KPRUCN
311