Skip to content
COOEY
AGE UNKNOWN

◄ GEO INTEL

THREAT FEEDS

LIVE

External threat-intelligence feeds — global attack origins, active command-and-control infrastructure, and fresh breach disclosures. Read live from the estate intel pipeline.

Attack-source ranks
10
countries by L7 share
C2 servers online
1
1 tracked
Recent breaches
9
fresh disclosures
Geo IOC map
▸
geolocated indicators
ATTACK ORIGINS · L7 cf radar · app-layer
01United States 24.9%
02Singapore 5.6%
03China 5.5%
04Germany 4.9%
05Indonesia 4.0%
06India 3.5%
07Brazil 3.3%
08Netherlands 3.1%
09France 2.9%
10Korea, South 2.8%
layer-7 (application) attack-traffic share
ATTACK ORIGINS · L3 cf radar · network-layer
01Brazil 13.8%
02United States 11.7%
03Russian Federation 4.9%
04Sweden 4.3%
05Hong Kong 3.8%
06Chile 3.6%
07Singapore 3.5%
08Argentina 3.4%
09India 2.7%
10France 2.5%
layer-3/4 (network) attack-traffic share
C2 · BY COUNTRY
US1
active Feodo/botnet command-and-control servers, by hosting country
FEODO C2 TRACKER
1 online · 1 tracked
ACTIVE COMMAND-AND-CONTROL SERVERS
IPPORTSTATUSASCCLAST ONLINE
50.16.16.211 443 ONLINE AMAZON-AES US 2026-03-12
RECENT BREACH DISCLOSURES
early-warning side channel
Angel One
angelone.in
6M
breached 2023-04-01 · 6,765,054 accounts
In July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023. The leaked data included 7.9M user...
Burger King Russia
burgerkingrus.ru
3M
breached 2024-08-25 · 3,155,792 accounts
In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed...
Crunchbase
crunchbase.com
559K
breached 2026-01-22 · 559,908 accounts
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the company...
CyrusOne
cyrusone.com
373K
breached 2026-08-05 · 373,460 accounts
In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt. The group subsequently published data allegedly obtained from...
Double Counter
doublecounter.gg
274K
breached 2026-10-04 · 274,922 accounts
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure...
LimeLeads
limeleads.com
17M
breached 2019-08-01 · 17,838,396 accounts
In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of...
Medela
medela.com
423K
breached 2026-09-07 · 423,947 accounts
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later...
Neogen
neogen.com
435K
breached 2026-08-29 · 435,963 accounts
In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had...
Sharecare
sharecare.com
318K
breached 2026-08-12 · 318,185 accounts
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was...