See the invisible internet.
Recent observations, known exploited vulnerabilities, and recorded history.
All sectors includes unclassified general cyber observations. Individual sectors require verified target-sector evidence.
Latest recorded activity
Observation history
Global source map
Reading HackRadar responsibly
Network observations are suspicious-source IPs from SANS Internet Storm Center / DShield. They are not confirmed breaches. CISA advisories are known exploited vulnerabilities from CISA KEV, not individual incidents. Their catalog addition dates are not attack timestamps.
Sector filters only show incidents explicitly classified by trusted sources; we will not guess targets from IPs, countries, or product names. An empty sector does not mean that sector is safe. Historical trends are counts of records visible in our snapshots, not global attack volume. No data is invented to fill gaps.