Norway (NO) Threat Intelligence

NO

Norway has 6,260 malicious IP addresses with 235,775 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Blix Solutions AS (726 IPs), Glesys AB (524 IPs), Microsoft Corporation (518 IPs). Data collected since 2025-10-13, last activity 2026-10-13.

Threat Assessment: Norway exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Blix Solutions AS and Glesys AB.

Total Reports
235,775
Unique IPs
6,260
First Seen
2025-10-13
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 31,771
Suspicious Activity 17,284
High Threat 9,702
Malware Distribution 3,552
Severe Abuse 1,398

Top Attacking Networks

AS50304 Blix Solutions AS
726 IPs
AS42708 Glesys AB
524 IPs
AS8075 Microsoft Corporation
518 IPs

Most Reported IPs in Norway

185.12.59.118 1,436 reports
193.90.12.122 1,413 reports
85.19.195.12 1,344 reports
79.161.110.92 1,026 reports
185.181.61.203 907 reports

Access this data via API

Get Norway threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/NO

View full API documentation

See how we classify and verify threats →

Check any IP from Norway

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS50304 Intelligence AS42708 Intelligence AS8075 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...