ShellCodeX
Tools • Events • News • Insights
 SEO Checker
ShellCodeX Threat Intelligence

Threat Radar

A live world map of cyber threat activity — geolocated botnet infrastructure, malware hosting and ransomware claims, aggregated from open intelligence feeds.

Last 30 days
1,523
Geolocated events
298
Botnet C2
409
Malware hosts
818
Ransomware claims
84
Countries affected

Live threat activity by location

Botnet C2 Malware host Ransomware
Loading threat map…

Top Countries

84 affected
1 United States 430 2 China 275 3 Germany 75 4 Netherlands 62 5 Hong Kong 50 6 United Kingdom 44 7 Singapore 42 8 France 37 9 Brazil 34 10 Canada 33 11 India 30 12 Italy 23 13 Australia 22 14 Switzerland 18 15 Pakistan 17 16 Russia 17 17 Turkey 17 18 Philippines 14 19 Argentina 14 20 Indonesia 13 21 Poland 13 22 Sweden 13 23 Japan 13 24 Spain 11 25 Mexico 11 26 South Africa 10 27 South Korea 10 28 Taiwan 10 29 Belgium 9 30 Vietnam 8 31 Peru 8 32 Finland 7 33 Malaysia 7 34 Chile 7 35 Israel 6 36 Thailand 6 37 Austria 6 38 Czechia 5 39 Saudi Arabia 5 40 Colombia 5 41 Romania 5 42 Ireland 5 43 Portugal 5 44 Iceland 4 45 Panama 4 46 Nigeria 4 47 Albania 3 48 United Arab Emirates 3 49 Mauritius 3 50 Hungary 3 51 Greece 3 52 Slovenia 2 53 Iran 2 54 Latvia 2 55 Bulgaria 2 56 Kenya 2 57 Luxembourg 2 58 Slovakia 2 59 New Zealand 2 60 Morocco 2

Attack Types

Last 30 days
Botnet C2 298
Command-and-control servers steering infected machines.
Malware Hosting 409
Servers actively distributing malware payloads.
Ransomware 818
Victim organisations named on ransomware leak sites.

Top Malware

Last 30 days
1 Malware Download 95
2 32-bit 95
3 mirai 66
4 Mozi 63
5 PureRAT 45
6 censys 36
7 AsyncRAT 35
8 Cobalt Strike 33

Malicious Networks

Hosting ASNs
Network data appears after the next sync.

Recent Indicators

Latest sightings
IndicatorTypeMalwareCountrySeen
222.139.38.162 Malware host 32-bit 🇨🇳 China 15 Aug, 23:52 175.146.231.101 Malware host 32-bit 🇨🇳 China 15 Aug, 23:50 149.88.66.234 Botnet C2 Cobalt Strike 🇭🇰 Hong Kong 15 Aug, 23:46 61.53.124.137 Malware host Mozi 🇨🇳 China 15 Aug, 23:46 110.186.231.247 Malware host 32-bit 🇨🇳 China 15 Aug, 23:31 222.127.53.189 Malware host 32-bit 🇵🇭 Philippines 15 Aug, 23:25 119.116.88.117 Malware host 32-bit 🇨🇳 China 15 Aug, 23:23 125.40.122.70 Malware host 32-bit 🇨🇳 China 15 Aug, 23:20 66.228.41.52 Botnet C2 Remus 🇺🇸 United States 15 Aug, 23:00 182.124.119.64 Malware host 32-bit 🇨🇳 China 15 Aug, 22:44 221.14.40.110 Malware host 32-bit 🇨🇳 China 15 Aug, 22:39 196.189.68.239 Malware host 32-bit 🇪🇹 Ethiopia 15 Aug, 22:32 110.37.61.166 Malware host 32-bit 🇵🇰 Pakistan 15 Aug, 22:29 123.10.155.173 Malware host 32-bit 🇨🇳 China 15 Aug, 22:23 39.90.150.62 Malware host Mozi 🇨🇳 China 15 Aug, 22:22

Aggregated from open threat intelligence: Feodo Tracker & URLhaus (abuse.ch) and ransomware.live. Every point carries a real country from its source; unverified claims may be included.