cybermap.lol
Sources · licenses · attribution

Where every dot comes from.

Every source is listed with its license or terms and what it provides. Attacker IP addresses are reduced to a /24 before they are stored and are never shown. IP geolocation uses the DB-IP Country Lite database (CC BY 4.0). A source marked disabled is wired but switched off.
SourceProvidesLicenseAttributionLast successItems
California Attorney General · breach noticesincident candidatesPublic record (California Department of Justice)Data breach notifications submitted to the California Attorney General3h ago50
Cloudflare Radarattack aggregatesCC BY-NC 4.0Attack traffic aggregates from Cloudflare Radar14m ago379
abuse.ch Feodo TrackerIOC streamCC0 (Feodo Tracker page), abuse.ch terms of useBotnet C2 data from abuse.ch Feodo Tracker8m ago1
Have I Been Pwnedincident candidatesCC BY 4.0Breach data from Have I Been Pwned (haveibeenpwned.com), CC BY 4.02h ago8
Editorialdisabledincident candidatesn/aEntered by the cybermap.lol editors, with sources on the entrynever–
Security news (RSS + Claude)incident candidatesHeadlines and links only; summaries are oursCandidate incidents extracted from public security reporting; every entry links its article4m ago0
AI Security Startups Map (Prompt Security)IOC streamCC BY 4.0Vendor data from the AI Security Startups Map by Prompt Security (CC BY 4.0)21h ago453
ransomware.liveincident candidatesRansomware.live terms, attribution requiredRansomware claims via ransomware.live51m ago100
SEC EDGAR · 8-K Item 1.05incident candidatesPublic domain (US federal filings)Material cybersecurity incident disclosures from SEC EDGAR Form 8-K, Item 1.053h ago0
abuse.ch ThreatFoxIOC streamabuse.ch terms of useIOC data from abuse.ch ThreatFox; geolocation by DB-IP (CC BY 4.0)14m ago288
abuse.ch URLhausIOC streamabuse.ch terms of useMalware URL data from abuse.ch URLhaus; geolocation by DB-IP (CC BY 4.0)just now333