Checking sources
PUBLIC CYBER ACTIVITY OBSERVATORY / 002

See the invisible internet.

Recent observations, known exploited vulnerabilities, and recorded history.

Data retrieval: checking…
Network source entries
—
SANS snapshot
CISA advisory entries
—
Latest catalog selection
Mapped source IPs
—
Approximate geography
Historical snapshots
—
Actual saved collections
SECTOR FILTERS · SELECT A SECTOR

All sectors includes unclassified general cyber observations. Individual sectors require verified target-sector evidence.

Latest recorded activity

Source-backed records · no estimated severity scores
Loading public data…

Observation history

Saved snapshots · NOT attack counts
No archived collections yet.

Global source map

Approximate IP location · secondary view
Dots show reported source infrastructure, not attackers or destinations. Map points are not assigned a critical-infrastructure sector.

Reading HackRadar responsibly

Network observations are suspicious-source IPs from SANS Internet Storm Center / DShield. They are not confirmed breaches. CISA advisories are known exploited vulnerabilities from CISA KEV, not individual incidents. Their catalog addition dates are not attack timestamps.

Sector filters only show incidents explicitly classified by trusted sources; we will not guess targets from IPs, countries, or product names. An empty sector does not mean that sector is safe. Historical trends are counts of records visible in our snapshots, not global attack volume. No data is invented to fill gaps.