DuckIntel / Security Tools
Live global cyber threat map powered by abuse.ch data. See real-time attack origins, MITRE ATT&CK techniques, and Cyber Kill Chain analysis. Free, no login required.
The Live Cyber Threat Dashboard visualizes real-time global threat activity using data from the abuse.ch threat intelligence feeds — URLhaus malware distribution URLs and Feodo Tracker command-and-control servers. A live world map shows attack origins as animated threat indicators flying between source and destination countries, giving an immediate visual sense of where threats are originating and where they are targeting.
The dashboard maps current threats to MITRE ATT&CK techniques, NIST CSF functions, and Cyber Kill Chain phases, showing you what types of attacker activity are most active right now. The attack type distribution panel breaks down threats by category: malware distribution, botnet C2, credential theft, exploit delivery, and more. The geographic breakdown shows the top source and destination countries for current threat activity.
For SOC analysts who keep a large monitor available in the security operations center, the dashboard provides a live ambient awareness display of the global threat landscape. Refresh the data on demand to see the latest feeds. The dashboard requires no configuration and no API keys — it pulls directly from the public abuse.ch feeds.
Related tools
Threat Intelligence FeedCVE LookupMITRE ATT&CK NavigatorIOC Bulk Scanner
Part of DuckIntel.io — 59 free browser-based security tools for SOC analysts. No login. No tracking. 100% client-side.