live · public feed
Open-source threat telemetry.
A small slice of what our fusion cell sees every minute. Refreshes every 15 seconds. Sign in for the full SOC dashboard with investigation tools and the SENTINEL AI co-analyst.
live · global threat map
80 incoming source target
sevtitleactoriocgeostatus
highFileless Malware activity detectedKimsuky171.29.222.252TJcontained
mediumXSS activity detectedEquation Group129.156.104.178DZcontained
mediumRootkit activity detectedSilent Ransom2.108.118.229RUcontained
criticalAPT activity detectedCl0phxxp://update-23.com/payload.binPLresolved
lowZero-Day activity detectedTurla173.181.59.91COresolved
mediumMFA Bypass activity detectedSilent Ransommalicious-cdn-535.xyzRUopen
lowCredential Theft activity detectedLockBit130.6.119.64DEresolved
mediumMFA Bypass activity detectedWizard Spider34.179.32.92TWcontained
mediumData Exfiltration activity detectedSandwormdarknode-975.xyzKRresolved
mediumWiper activity detectedEquation Grouphxxp://secure-63.com/payload.binRUcontained
highFileless Malware activity detectedWizard Spiderevil-relay-849.xyzHRinvestigating
mediumAPT activity detectedMuddyWaterphish-portal-329.xyzIDopen
criticalTrojan activity detectedUnknownevil-relay-971.xyzCNresolved
lowLateral Movement activity detectedEquation Grouphxxp://login-76.com/payload.binRUinvestigating
lowPhishing activity detectedCl0p3f5e460e4a274f52b2fe496fb535c828c61e7134f0217588a992319cd754826aAEopen
mediumSupply Chain activity detectedContihxxp://update-10.com/payload.binSAinvestigating
mediumTrojan activity detectedAPT41hxxp://login-17.com/payload.binRUcontained
lowAPT activity detectedContihxxp://login-36.com/payload.binSYcontained
mediumFileless Malware activity detectedLockBithxxp://update-79.com/payload.binGBopen
criticalTrojan activity detectedAPT33 / Elfin253.54.228.129MXresolved