{% extends "dsoc_canvas/base.html" %} {% block title %}Threat Feed — DSOC{% endblock %} {% block content %}
Threat Feed
← Overview
Overview Flowspec Rules RTBH Scrubbing Centers Threat Feed Mitigations
{% set active_count = threats | selectattr('is_active') | list | length %} {% set high_conf = threats | selectattr('confidence_pct', 'ge', 80) | list | length %} {{ active_count }} Active {{ high_conf }} High Confidence (≥80%) {{ threats | length }} Total
{% for t in threats %} {% set conf = t.confidence_pct | float %} {% else %} {% endfor %}
Source Prefix Type Confidence % Feed Source First Seen Last Seen Pps Bps Active
{{ t.source_prefix or '—' }} {% set tt = t.threat_type | lower %} {% if 'volumetric' in tt or 'flood' in tt %} {{ t.threat_type }} {% elif 'amplif' in tt %} {{ t.threat_type }} {% elif 'spoof' in tt %} {{ t.threat_type }} {% elif 'scan' in tt or 'probe' in tt %} {{ t.threat_type }} {% else %} {{ t.threat_type }} {% endif %} {{ conf | round(1) }}% {{ t.feed_source or '—' }} {{ t.first_seen | ts }} {{ t.last_seen | ts }} {{ '{:,}'.format(t.pps | int) if t.pps else '—' }} {% if t.bps %} {% set bps = t.bps | float %} {% if bps >= 1000000000 %} {{ (bps / 1000000000) | round(2) }} Gbps {% elif bps >= 1000000 %} {{ (bps / 1000000) | round(1) }} Mbps {% else %} {{ bps | round(0) | int }} bps {% endif %} {% else %} — {% endif %} {% if t.is_active %} yes {% else %} no {% endif %}
No threats in feed. Check threat intel integrations.
{% include 'includes/iqe_query_widget.html' %}
{% endblock %}