LIVE · 0m

GLOBAL THREAT POSTURE

LIVE

Live global posture — geolocated threat events (outages, attacks, DDoS, ransomware, C2, scans) fused across sources, with a DEFCON level derived from the intel pipeline's own correlated escalations.

Threat events

critical-severity events

Correlations

500

fused escalations

COUNTRY OUTAGE CORROBORATION 0 corroborated by 2+ sources

DEGRADED

HK HK

ioda: 28 outage alerts across 2 ASNsdefcon: 14 outage alerts (14 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

GR GR

ioda: 2 outage alerts across 1 ASNsdefcon: 1 outage alerts (1 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

SG SG

ioda: 10 outage alerts across 1 ASNsdefcon: 5 outage alerts (5 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

UA UA

ioda: 24 outage alerts across 1 ASNsdefcon: 12 outage alerts (12 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

US US

ioda: 6 outage alerts across 1 ASNsdefcon: 3 outage alerts (3 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

NG NG

ioda: 18 outage alerts across 1 ASNsdefcon: 9 outage alerts (9 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

BR BR

ioda: 2 outage alerts across 1 ASNsdefcon: 1 outage alerts (1 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

EG EG

ioda: 8 outage alerts across 1 ASNsdefcon: 4 outage alerts (4 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

Iran IR

ioda: 16 outage alerts across 1 ASNsdefcon: 8 outage alerts (8 critical) (echoes ioda — not counted as independent)

1 source

DEGRADED

Libya LY

probes: 1/2 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Mauritania MR

probes: 1/1 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Mozambique MZ

probes: 1/1 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Pakistan PK

probes: 3/3 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Palestine PS

probes: 1/2 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Sudan SD

probes: 1/2 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Somalia SO

probes: 2/2 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

South Sudan SS

probes: 1/1 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Syria SY

probes: 2/4 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Chad TD

probes: 1/1 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Uzbekistan UZ

probes: 1/2 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Venezuela VE

probes: 4/4 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Yemen YE

probes: 2/2 endpoints unreachable (100%) — thin coverage

1 source

DEGRADED

Zimbabwe ZW

probes: 1/2 endpoints unreachable (50%) — thin coverage

1 source

DEGRADED

Mali ML

probes: 1/1 endpoints unreachable (100%) — thin coverage

1 source

3 of mm's 6 inputs exist upstream today · a single source is a claim, not a verdict · “shutdown” additionally requires our own reachability probe to agree

FEDRAMP NETWORK WITHDRAWALS · 24H 6 authorized networks seen

FEDRAMP

Amazon AS16509

195 windows 07:30Z

FEDRAMP

Akamai AS20940

26 windows 03:58Z

FEDRAMP

Google AS15169

11 windows 02:45Z

FEDRAMP

Cloudflare AS13335

9 windows 00:32Z

FEDRAMP

Fastly AS54113

4 windows 00:32Z

FEDRAMP

Microsoft AS8075

2 windows 00:44Z

TRANSIT

Cogent AS174

59 windows 06:44Z

TRANSIT

Lumen AS3356

5 windows 04:40Z

TRANSIT

NTT AS2914

4 windows 18:26Z

TRANSIT

Arelion AS1299

2 windows 23:20Z

TRANSIT

AT&T AS7018

1 window 00:32Z

a “window” is ≥20 withdrawals across the whole watchlist inside 60s · this counts how many windows each network appeared in, not prefixes it withdrew · largest window in 24h: 5,231 prefixes · authorization from the FedRAMP corpus

LIVE THREAT STREAM streaming · SSE

◈ Connected — awaiting pushed events from the intel stream…

Global DEFCON

HIGH

23 SEVERE (DEFCON-1) escalations active

Global events processed

43,812,581

prevailing recent level · live counter

GLOBAL POSTURE VECTOR signal fusion →

critical high med/low 391 geolocated of 1000 events

EVENT TYPES

iran probe change510

outage103

malicious scan72

ddos origin56

event51

probe change47

c2 server37

compromised host32

malware url32

attack27

reputation10

phishing8

honeypot8

banking c26

ransomware post1

TOP ORIGIN COUNTRIES

SG86

CN56

US45

BR35

KP31

NL27

IR17

HK17

CORRELATED ESCALATIONS

500 active

FUSED CORRELATIONS · DEFCON-RANKED all fusion →

DEFCON 1

Nation-State Network Activity · US

CRITICAL

DEFCON 1

Nation-State Network Activity · NL

CRITICAL

DEFCON 2

DDoS Origin + Active Threat Feed Signal · US

CRITICAL

DEFCON 2

DDoS Origin + Active Threat Feed Signal · CN

CRITICAL

DEFCON 2

DDoS Origin + Active Threat Feed Signal · SG

CRITICAL

DEFCON 3

Bulletproof Hosting Detected

HIGH