
Leveraging Matrix Intelligence: A Guide to Internet Intelligence Search
Executive Summary
This comprehensive guide demonstrates how to leverage Matrix Intelligence’s Internet Intelligence Platform (IIP) for advanced cybersecurity reconnaissance and exposure monitoring. Matrix Intelligence conducts monthly scans across hundreds of internet ports globally, providing organizations with critical threat intelligence data.
Key Platform Capabilities:
-
Advanced Search Functionality: Three query types (Include, Wildcard, and Exclude) enable precise filtering of millions of scan results
-
Geographic Intelligence: Country-level filtering and map-based selection tools allow for targeted regional analysis
-
Scalable Analysis: From focused searches identifying specific services (demonstrated with 300,000+ Global Protect VPN endpoints) to comprehensive regional assessments of 630,000+ assets
-
Flexible Export Options: Support for up to 100,000 results per export in CSV or JSON formats for integration with existing security workflows
- Automated Reporting: Built-in analytics transform raw scan data into actionable intelligence reports with service distributions, port statistics and more
Accessing the Platform
To begin exploring our comprehensive internet intelligence database, navigate to
https://app.matrixintelligence.swiss/iip.
Upon access, you’ll be presented with the main dashboard interface, your gateway to our extensive repository of internet-wide scan data.

Understanding Query Capabilities
The Matrix Intelligence platform offers sophisticated search functionality designed to help security professionals efficiently navigate and extract actionable intelligence from our vast dataset. This guide demonstrates the core features and practical applications of our search system.
Initiating a Search
To begin constructing a query, click within the search bar. This action triggers the display of our comprehensive filter interface, presenting all available query types and filtering parameters.
Query Type Architecture
Our platform supports three fundamental query types, each serving specific intelligence gathering needs:
-
Include Queries: Define mandatory criteria that results must contain. Ideal for targeting specific services, versions, or configurations.
-
Wildcard Queries: Employ pattern matching for flexible searches. Perfect for discovering variations or related services across different implementations.
- Exclude Queries: Eliminate unwanted results from your dataset. Essential for filtering out noise and focusing on relevant intelligence.

Practical Search Example: Identifying Global Protect VPN Endpoints
Let’s walk through a real-world scenario to demonstrate the platform’s capabilities.
Step 1: Query Construction
Begin by entering your search terms in the main search bar. For this example, we’re identifying Global Protect VPN login interfaces across the internet.

Step 2: Filter Selection
Once your query terms are entered, utilize the Filter Type search functionality to locate and select appropriate filters. In this demonstration, we’re applying filters specific to Global Protect VPN login pages.

Step 3: Adding Filters
Click the “Add” button to append your selected filter to the active query. Multiple filters can be combined to create highly targeted searches.

Step 4: Executing the Search
With your query parameters configured, click the “Search” button to execute your intelligence gathering operation.

Analyzing Results
In our example query, the platform identified over 300,000 Global Protect VPN endpoints globally. This scale of discovery demonstrates the comprehensive nature of our internet-wide scanning capabilities and the value of precise filtering in managing large-scale intelligence data.
Advanced Filtering: Geographic Intelligence
Beyond basic search parameters, Matrix Intelligence provides sophisticated geographic filtering capabilities, enabling precise location-based intelligence gathering.

Filtering by Country
To narrow results to a specific geographic region, utilize our integrated geographic distribution aggregations. For instance, to isolate results within the United Kingdom:
1. Locate the Geographic Distribution panel in your results interface
2. Select “United Kingdom” from the aggregation list
3. The filter automatically appends to your active query
The platform instantly updates your results to reflect the geographic constraint

Pro Tip: For manual country filtering, utilize the ip.country
filter parameter to specify any nation using standard country codes.
Precision Geolocation: Map-Based Filtering
Matrix Intelligence extends beyond country-level filtering with our advanced map-based selection tools. This feature enables analysts to define custom geographic boundaries for highly targeted intelligence gathering.
Accessing the Map Interface
Navigate to the map view by selecting the “Map” tab located adjacent to the results panel in the upper-left corner of your interface.

Defining Geographic Boundaries
Once in map view, initiate geographic selection by clicking the selection tool icon (located below the layers icon in the upper-right corner):
The platform offers two distinct selection methodologies:
-
Circular Selection: Ideal for radius-based filtering around specific points of interest
- Rectangular Selection: Provides flexible boundary definition for irregular geographic regions
For this demonstration, we’ll utilize the rectangular selection tool for its versatility in defining custom search perimeters.
Applying Geographic Filters
After defining your geographic boundary:

Click “Add to Search” to incorporate the geographic constraint into your active query. The system automatically translates your visual selection into precise coordinate-based filters

Data Export and Analysis
Having successfully refined your search results through our advanced filtering capabilities, Matrix Intelligence provides comprehensive export functionality to facilitate offline analysis and integration with your existing security workflows.
Initiating Data Export
To export your curated intelligence data, locate and click the Export button within the results interface. This action launches our export configuration modal, providing granular control over your data extraction:

Export Configuration Options
The export interface offers several customization parameters to ensure you receive data in the most useful format for your specific requirements:
Output Format Selection
Choose from multiple industry-standard formats:
-
CSV: Ideal for spreadsheet analysis and data manipulation
-
JSON: Perfect for programmatic processing and API integration
Export Parameters
-
Result Size: Configure the volume of exported data (supporting up to 100,000 results per export operation)
- Field Selection: Customize your export by selecting specific data fields relevant to your analysis
Executing the Export
Once you’ve configured your export parameters:
-
Review your selected fields to ensure all necessary intelligence data is included
-
Click “Export Data” to initiate the extraction process
- The platform processes your request and delivers the file within seconds
Post-Export Analysis
Upon successful download, your exported intelligence data is ready for integration with your preferred analysis tools:

Expanding Analysis: Working with Larger Datasets
As your intelligence requirements evolve, you may need to broaden your analysis scope to capture more comprehensive insights. Matrix Intelligence facilitates seamless transition between focused and wide-aperture intelligence gathering.
Removing Filters for Broader Analysis
To expand your search parameters and analyze larger result sets:
-
Locate the active filters displayed in your query interface
-
Click the “X” button adjacent to any filter you wish to remove
- The platform dynamically updates results as filters are removed
In this example, removing service-specific filters while maintaining geographic constraints reveals the full scope of digital infrastructure within our selected region:

The expanded query now encompasses over 630,000 results, providing a comprehensive view of all internet-facing assets within the defined geographic boundary.
Advanced Analytics: Report Generation
Matrix Intelligence transforms raw scan data into actionable intelligence through our integrated reporting capabilities. These automated analytics provide immediate insights into exposure patterns, service distributions and so forth.
Accessing the Report Interface
Navigate to comprehensive analytics by selecting the “Report” tab, positioned adjacent to the “Map” tab in the upper-left corner of your interface.
Understanding the Intelligence Report
The platform generates a multi-dimensional analysis of your selected dataset, delivering:

Conclusion
Throughout this guide, we’ve demonstrated the core capabilities of the Matrix Intelligence Internet Intelligence Platform through practical, hands-on examples. From our initial search identifying over 300,000 Global Protect VPN endpoints worldwide to refined geographic filtering pinpointing specific regional assets, the platform proves its value in transforming raw internet scan data into targeted intelligence.
The intuitive query interface—supporting Include, Wildcard, and Exclude filters—combined with visual geographic selection tools, enables security professionals to quickly narrow millions of data points to precisely what matters for their organization. The seamless progression from global searches to country-specific filtering (as shown with the UK example) and custom map-based boundaries demonstrates how easily teams can adapt their intelligence gathering to specific operational requirements.
Our export functionality, supporting up to 100,000 results in CSV or JSON formats, ensures that the intelligence you gather integrates smoothly with your existing security workflows. Meanwhile, the integrated reporting feature transforms complex datasets—like our 630,000+ result regional analysis—into clear, visual insights that drive informed security decisions.
Matrix Intelligence makes enterprise-grade internet reconnaissance accessible through an interface that balances sophisticated capabilities with ease of use. Whether you’re conducting targeted vulnerability assessments or comprehensive regional exposure analysis, the platform provides the tools to efficiently navigate and extract value from our extensive internet intelligence database.
Start exploring the power of systematic internet intelligence today at https://app.matrixintelligence.swiss/iip.
