Nimbus Threat Monitor No-cost, near-real-time cyber threat detection for ISPs and hosting providers worldwide.

Join thousands of networks around the world.

Partner with Team Cymru to improve your network security and contribute to the global effort to secure the Internet as a whole. Nimbus Threat Monitor works by correlating your network flows with our world-class IP Reputation threat intelligence. When you share your network traffic metadata with us, we pool it with data from thousands of networks worldwide and mine it to identify cyber threat activity. In turn, we give you near-real-time threat detection at no cost to you.

Nimbus Data Sheet

“The Nimbus tool is unique and essential to our CSIRT, because it gives us a detailed view of malicious activity (botnets, controllers) on our backbone.”
– Francisco Badaró, Telecommunications and Training Manager, ITS Brasil

Delivering the power of Pure Signal™ threat intelligence to ISPs and hosting providers…

World-class IP Reputation Feed

Automatic correlation of your network flows with Team Cymru IP Reputation data.

Near-Real-Time Cyber Threat Summary

Quickly identify the most critical compromises of your assets and those of your clients.

Incident Responders Report

Get a daily report of your incident response priorities.

"Team Cymru's community tools help us protect our customers. A Team Cymru partnership is a must-have relationship for all ISPs and hosting providers."
– Dritan Vershta, CEO, STARNET, Albania

Identify cyber threats in near real time.

  • Near-real-time cyber threat detection, powered by the world’s most comprehensive IP Reputation data
  • 7,000,000 + indicators updated hourly
  • Customized filtering to isolate malicious activity by type, address ranges and more
    • 18 alert filters
    • 31 network statistics filters
  • Fully customizable Kibana® dashboard – 10 default dashboards
  • Support for netflow v5/v7/v9, IPFIX, sflow, jflow and NetStream