Skip to content
COOEY

◄ GEO INTEL

THREAT FEEDS

LIVE

External threat-intelligence feeds — global attack origins, active command-and-control infrastructure, and fresh breach disclosures. Read live from the estate intel pipeline.

Attack-source ranks
10
countries by L7 share
C2 servers online
1
1 tracked
Recent breaches
10
fresh disclosures
Geo IOC map
▸
geolocated indicators
ATTACK ORIGINS · L7 cf radar · app-layer
01United States 23.9%
02Indonesia 6.0%
03China 5.5%
04Singapore 4.9%
05Germany 4.6%
06Netherlands 4.1%
07India 3.5%
08France 3.1%
09Brazil 2.8%
10Vietnam 2.1%
layer-7 (application) attack-traffic share
ATTACK ORIGINS · L3 cf radar · network-layer
01Brazil 14.9%
02United States 11.7%
03Chile 7.4%
04Argentina 5.6%
05Russian Federation 4.8%
06Mexico 4.3%
07Bangladesh 3.9%
08Ukraine 3.4%
09France 3.4%
10Poland 2.7%
layer-3/4 (network) attack-traffic share
C2 · BY COUNTRY
US1
active Feodo/botnet command-and-control servers, by hosting country
FEODO C2 TRACKER
1 online · 1 tracked
ACTIVE COMMAND-AND-CONTROL SERVERS
IPPORTSTATUSASCCLAST ONLINE
50.16.16.211 443 ONLINE AMAZON-AES US 2026-03-12
RECENT BREACH DISCLOSURES
early-warning side channel
Alcon
alcon.com
218K
breached 2026-08-01 · 218,395 accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon...
Brinks Home
brinkshome.com
732K
breached 2026-07-13 · 732,162 accounts
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company,...
Exact Sciences
exactsciences.com
10M
breached 2026-07-15 · 10,869,543 accounts
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from...
Fluke
fluke.com
821K
breached 2026-07-01 · 821,100 accounts
In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published more...
Goose Creek
goosecreek.com
6M
breached 2026-06-09 · 6,574,121 accounts
In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security...
Houston City College
hccs.edu
831K
breached 2026-06-16 · 831,642 accounts
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and...
Inter-Con Security
icsecurity.com
276K
breached 2026-06-18 · 276,114 accounts
In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company,...
Paidwork
paidwork.com
23M
breached 2026-03-29 · 23,272,765 accounts
In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the...
SplitVPN
splitvpn.io
865K
breached 2026-07-21 · 865,336 accounts
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique...
Suno
suno.com
55M
breached 2025-11-25 · 55,282,226 accounts
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses....