PUBLIC CYBER ACTIVITY OBSERVATORY / 002

See the invisible internet.

Recent observations, known exploited vulnerabilities, and recorded history.

Data retrieval: checking…

Network source entries

—

SANS snapshot

CISA advisory entries

—

Latest catalog selection

Mapped source IPs

—

Approximate geography

Historical snapshots

—

Actual saved collections

SECTOR FILTERS · SELECT A SECTOR

All sectors includes unclassified general cyber observations. Individual sectors require verified target-sector evidence.

GEOGRAPHIC SOURCE RADARS · OBSERVED IP LOCATIONS

Global source observations. Geography is an approximate IP location, not an attack target or verified attacker origin.

Latest recorded activity

Source-backed records · no estimated severity scores

Loading public data…

Observation history

Saved snapshots · NOT attack counts

No archived collections yet.

Global source map

Approximate IP location · secondary view

Dots show reported source infrastructure, not attackers or destinations. Map points are not assigned a critical-infrastructure sector.

Reading HackRadar responsibly

Network observations are suspicious-source IPs from SANS Internet Storm Center / DShield. They are not confirmed breaches. CISA advisories are known exploited vulnerabilities from CISA KEV, not individual incidents. Their catalog addition dates are not attack timestamps.

Regional radars filter geographically located source IPs in the limited global feed, not verified attacks against those countries. An empty regional radar is not evidence of safety. Sector filters only show incidents explicitly classified by trusted sources; we will not guess targets from IPs, countries, or product names. An empty sector does not mean that sector is safe. Historical trends are counts of records visible in our snapshots, not global attack volume. No data is invented to fill gaps.