Cyber, spectrum, and routing

The Open Observatory of Network Interference is a global volunteer measurement network that tests for blocked websites, throttled services, deep-packet-inspection events, and middlebox interference. The list below ranks countries by their 30-day anomaly rate (the share of probes that returned an anomalous response). Click into any country for the full per-app and per-category breakdown.

• TKMTurkmenistan
  100.0%

  249 probes
• DJIDjibouti
  66.7%

  121 probes
• CHNChina
  61.1%

  1,110,052 probes
• IRNIran
  37.9%

  179,888 probes
• RUSRussia
  32.1%

  7,649,191 probes
• MMRMyanmar
  31.1%

  158,186 probes
• CAFCentral African Republic
  24.0%

  215 probes
• GABGabon
  17.6%

  12,489 probes
• AREUnited Arab Emirates
  14.8%

  102,155 probes
• YEMYemen
  14.4%

  54,957 probes
• BIHBosnia and Herzegovina
  13.9%

  2,126 probes
• BLRBelarus
  13.3%

  320,644 probes
• AZEAzerbaijan
  13.0%

  23,510 probes
• SAUSaudi Arabia
  12.8%

  106,419 probes
• CUBCuba
  12.4%

  16,142 probes

BGP leaks happen when an autonomous system announces routes it should not have advertised; hijacks are claims of address space owned by another network. Both result in traffic redirection on the underlying internet. SENTINEL surfaces leaks and hijacks tracked by Cloudflare Radar.

The MISP galaxy taxonomy catalogues named threat actors (APT groups, financially motivated criminal groups, hacktivist collectives) by attributed sponsor country. Click into any country to see its full per-actor table on the dossier page.

• CHNChina204 groups
• RUSRussia77 groups
• IRNIran59 groups
• PRKNorth Korea25 groups
• PSEPalestine9 groups
• TURTurkey7 groups
• UKRUkraine6 groups
• VNMVietnam6 groups
• INDIndia5 groups
• USAUnited States5 groups
• ISRIsrael5 groups
• PAKPakistan4 groups
• BLRBelarus4 groups
• BRABrazil3 groups
• LBNLebanon3 groups
• NGANigeria3 groups
• IDNIndonesia3 groups
• KORSouth Korea2 groups
• TUNTunisia2 groups
• AREUnited Arab Emirates2 groups

GPS jamming is rendered live as a hex-bin heatmap on the globe; spoofing surfaces as discrete events on the patterns rail. Both feeds are too high-resolution to enumerate here usefully, but the categorical state across the major flashpoints is steady: persistent interference around Russia, Iran, the Eastern Mediterranean, and Israel, with intermittent step-changes around active strike windows.

The spoof classifier looks for the spurious-position signature where multiple aircraft simultaneously report a fix at the same impossible coordinate. Receiver-handoff false positives in mid-Atlantic and mid-Pacific coverage gaps are filtered.

The cyber tab on the live globe carries the four data feeds above with full per-country drill-down, BGP timeseries graphs, OONI 30-day anomaly trends, and a threat-actor table. The country panel on each country page (axonia.us/<iso>) summarises the same data per-country.