The Cyberwar is Live

More often a map of cyber-attacks streaking across the globe, like missile strikes, makes an appearance on the news each time there’s a large cyber-attack. Once the realm of science-fiction or conspiracy-theory, today the cyberwar is real and live on the Internet at

Screenshot from 2015-05-07 00:19:30Every second, Norse collects and analyzes live threat intelligence from darknets in hundreds of locations in over 40 countries. The attacks shown are based on a small subset of live flows against the Norse honeypot infrastructure, representing actual worldwide cyber attacks by bad actors. At a glance, one can see whichcountries are aggressors or targets at the moment, using which type of attacks (services-ports).

Hovering over the Attack Origins, Attack Targets, or Attack Types will highlight just the attacks emanating from that country or over that service-port respectively. Hovering over any bubble on the map, will highlight only the attacks from that location and type. Press s to toggle table sizes.

Norse exposes its threat intelligence via high-performance, machine-readable APIs in a variety of forms. Norse also provides products and solutions that assist organizations in protecting and mitigating cyber attacks.

For more information, please contact: