live · public feed
Open-source threat telemetry.
A small slice of what our fusion cell sees every minute. Refreshes every 15 seconds. Sign in for the full SOC dashboard with investigation tools and the SENTINEL AI co-analyst.
live · global threat map
80 incoming source target
sevtitleactoriocgeostatus
mediumMFA Bypass activity detectedMuddyWaterevil-relay-373.xyzNGresolved
criticalRansomware activity detectedSandwormhxxp://login-99.com/payload.binFIinvestigating
lowRansomware activity detectedSilent Ransom164.188.59.33PEresolved
criticalCredential Theft activity detectedContidarknode-912.xyzISresolved
mediumPhishing activity detectedAPT28 / Fancy Bearhxxp://update-66.com/payload.binNGresolved
criticalCryptominer activity detectedContiphish-portal-816.xyzCNopen
highData Exfiltration activity detectedCl0phxxp://login-56.com/payload.binARopen
highCredential Theft activity detectedCl0p81.100.72.175DEresolved
highRootkit activity detectedCl0phxxp://update-70.com/payload.binMYcontained
mediumInsider Threat activity detectedTA505aebbdcdc73f69fb142b4df018835ac5e2187de4dd28105bc419e895161a57ac5NOcontained
highSQL Injection activity detectedVolt Typhoon190.183.98.173USinvestigating
mediumRootkit activity detectedCobalt Group0d373bc216a61bf7871692cbfc7e9397edcc5d0ffc6cf8f778b1db3965565a82CHresolved
highRootkit activity detectedFIN749.196.3.151CNcontained
highCredential Theft activity detectedEquation Grouphxxp://login-97.com/payload.binLUresolved
highRansomware activity detectedTA505252.205.71.65ZWcontained
highMFA Bypass activity detectedScattered Spider138771f726c1e27cdd2557432640af2e78aa7d3817d454927ec51a1383135833AZresolved
lowTrojan activity detectedSandworm65.92.185.228CHresolved
lowCredential Theft activity detectedCl0pb95ef3ae93a20f2c34911c8d6e3153fb1a3b4bcbc14244d35c8ed66274d680f4RUopen
lowAPT activity detectedScattered Spider53.214.161.51CNcontained
highSQL Injection activity detectedAPT41phish-portal-645.xyzBDresolved