We watch. We never touch back.
Passive SigInt is fouo.io's ongoing signals-collection program: decoy infrastructure and passive network sensors deployed across our own hosting footprint, quietly logging every scan, probe, and exploit attempt that reaches them. Nothing here is active reconnaissance against anyone else's systems — it is pure, one-directional observation of what comes to us.
How it works
A set of decoy services and sensors sit alongside our production infrastructure, indistinguishable from real systems to anything probing them. Every connection attempt, scan, and exploit try against those decoys is logged and cross-referenced against public indicator-of-compromise feeds to separate background internet noise from active campaigns.
The result is published in the open, in real time, at threatreport.fouo.io — no login, no paywall. It is the same discipline we apply to everything else at fouo.io: collect the minimum needed to be useful, and put it where people can actually see it.
Threat Timeline
A deduplicated, continuously-updated public timeline of confirmed breaches and disclosures, aggregated from public trackers and infosec reporting.
Open TimelineLive Scanning Activity
Real-time connection and exploit-attempt data from our own sensors, cross-referenced against rolling C2/botnet IOC watchlists.
Open Scanning FeedUkraine
A themed slice of the same sensor data, following activity relevant to the ongoing conflict as it is observed at our decoys.
Open Ukraine ViewInterested in the underlying sensor network or a private deployment for your own infrastructure?
Contact Us