BLOG · CYBER
Live cyber threat maps
Three maps that draw the attacks being seen right now. All of them belong to other companies; we host none of them and embed none of them - the links take you to their own sites.
Three maps
Check Point
ThreatCloud Live Cyber Threat Map
Draws the attacks its sensors are seeing as arcs, with the day's counts beside it: the most attacked countries, the biggest sources, a breakdown by industry and by kind of malware.
It is Check Point's own telemetry, from their network and their customers' devices. The most readable of the three, and the most useful because of those country and industry lists.
Open the map
Radware
Live Threat Map
Leans towards denial-of-service and web attacks: the kind of attack, the target country, and a running list of recent events side by side.
Data from Radware's own cloud protection service. The best of the three for the DDoS side, and not a general picture of the internet.
Open the map
Fortinet
FortiGuard Threat Map
Shows what Fortinet's firewalls are reporting, on the map and in the scrolling list under it, coloured by how serious the event is.
What Fortinet's own devices see. The scrolling list is handy for catching the name of an attack and looking it up afterwards.
Open the map
How to read these maps
None of these shows the internet: each draws what its own company's sensors saw. The country is where an IP address is registered, which is often not where anyone is sitting (VPN, a rented server). Good for scale and for the shape of a day, not for a fact about one attack.
The three are here together because they show different things: Check Point's country and industry lists are the most readable, Radware is the best at denial-of-service, and Fortinet's scrolling list is useful for catching the name of an attack and looking it up afterwards.