Skip to content
Beyond™

Beyond™ Live Threat Map

Who is attacking Aotearoa, right now.

Attacks aimed at New Zealand, the botnets behind them and the flaws they use, live from Cloudflare, abuse.ch, CISA and our own scam checker. Every number has a source, and nothing on this map is made up.

  • Attacks aimed at New Zealand
  • The world's busiest attack routes
  • Botnet control servers

Pulses run along each route at a pace set by its share of the last 24 hours, so a busier route is busier here. One pulse is not one attack. Drag to look around.

Live. Updated 12:28 pm NZT
Where attacks on New Zealand come from
Share of web attacks aimed at New Zealand that Cloudflare stopped, last 24 hours.
  1. United States51%
  2. Singapore15%
  3. Netherlands11%
  4. Germany3.4%
  5. Brazil3.1%
  6. France2.7%
  7. China2.7%
  8. Russia1.8%

New Zealand's share of the world's web attacks

0.1%

The 57th most targeted country, last 24 hours (Cloudflare Radar).

Botnet control servers hosted in New Zealand

0

Of 5 tracked worldwide right now (Feodo Tracker).

Scam senders, links and domains Beyond blocks

-

Our checker's counts show here.

Internet route hijacks
Networks caught claiming internet addresses that are not theirs, to pull other people's traffic. 0 involved New Zealand in the last 30 days.

Indonesia took routes from Indonesia

Israel took routes from United States

Gibraltar took routes from Ukraine

Russia took routes from Russia

United States took routes from United States

Colombia took routes from Colombia

Brazil took routes from Brazil

United States took routes from United States

Where botnet control servers sit
The machines that tell infected computers what to do, by the country they are hosted in.
  1. United States3
  2. United Kingdom1
  3. Japan1
QakBot · 4Emotet · 1
Flaws being used in attacks
The newest flaws CISA has confirmed attackers are using.
  • CVE-2026-9665620/10/2026

    Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability

  • CVE-2026-9665520/10/2026

    Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

  • CVE-2026-9665420/10/2026

    Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

  • CVE-2026-9665220/10/2026

    Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

  • CVE-2026-11093620/10/2026

    Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability

  • CVE-2026-10693120/10/2026

    EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

When you partner with Beyond™

This map is not just for show. We act on it.

  • Scam senders, links and domains our checker catches go on a block list that syncs to our Cloudflare filtering every hour.
  • We log attacks and scans on the sites and apps we run, and they show up on this map.
  • When a flaw lands on the list above, we check it against what we have built for you and patch what it touches.
Partner with us See how the scanner works
Where every number comes from
Checked every five minutes. Last check 12:28 pm NZT, 23/10/2026.