Mastodon Free IP Threat Intelligence Lookup — ipinsights.io

Know who's knocking before you open the door.

Instant IP threat intelligence from 73 honeypots and 22+ threat feeds.

Your public IP is 18.97.14.83. Press Lookup for an instant threat-intelligence report — geolocation, ISP, blacklist presence, Tor / proxy / hosting flags, and a threat score.

Live threat intelligence — what the platform is currently watching

The numbers below are not marketing copy. They are the live counters from a network of 73 honeypots, tarpits and deception devices, cross-referenced against major blocklists and threat-intelligence feeds.

6,227
Attackers, last 4 hours
730,009
Malicious IPs listed
220
Countries observed
2026-09-15 12:03Z
Last refresh (UTC)

Recent malicious IPs

Live · connecting

Brand-new attackers picked up by the sensor estate in the last 60 minutes, in priority order. Country, category and threat score for each address; the page updates visibly without a reload.

Recent malicious IPs observed by the sensor network, refreshed live every 60 seconds.
IP Country Category Threat First seen Last seen
118.194.250.30 Thailand Network Attack 100
98.153.78.43 United States Network Attack 100
152.32.206.107 United States Network Attack 100
91.140.24.80 Greece Network Attack 100
54.91.68.56 United States Network Attack 100
54.89.227.94 United States Network Attack 100
45.234.19.130 Brazil Network Attack 100
47.238.116.250 Hong Kong Network Attack 100
212.47.143.38 Azerbaijan Network Attack 100
122.97.212.128 China malicious 100
103.75.11.62 New Zealand Network Attack 100
88.150.138.125 United Kingdom Network Attack 100
123.56.111.236 China malicious 100
115.206.210.84 China Network Attack 100
153.0.250.74 China Network Attack 100
140.206.194.121 China Network Attack 100
117.13.170.66 China Network Attack 100
153.117.32.138 Pakistan Network Attack 100
152.59.44.221 India Network Attack 100
3.236.252.100 United States Network Attack 100
When attackers are most active right now
AI Agent Traffic (Last 24 Hours) methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Where attacks are coming from right now
What attackers are trying to do this week
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

Countries hosting currently-active blacklisted IPs. Sort by clicking a column header; filter by category, risk level or country.
# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) Network Attack 95,643 Critical
2 Poland (PL) Network Attack 80,776 Critical
3 China (CN) Network Attack 68,065 Critical
4 Türkiye (TR) Network Attack 40,794 Critical
5 Brazil (BR) Network Attack 32,440 Critical
6 Vietnam (VN) Network Attack 19,639 Critical
7 Russia (RU) Network Attack 17,270 Critical
8 Germany (DE) Network Attack 15,833 Critical
9 India (IN) Network Attack 11,067 Critical
10 United Kingdom (GB) malicious 10,829 Critical
11 The Netherlands (NL) Network Attack 9,098 Critical
12 France (FR) Network Attack 9,042 Critical
13 Belgium (BE) Network Attack 7,646 Critical
14 Ukraine (UA) Network Attack 7,110 Critical
15 Hong Kong (HK) malicious 6,984 Critical
16 Singapore (SG) malicious 6,391 Critical
17 Indonesia (ID) Network Attack 5,497 Critical
18 Argentina (AR) Network Attack 5,421 Critical
19 Bangladesh (BD) Network Attack 5,375 Critical
20 Pakistan (PK) Network Attack 5,176 Critical
21 Japan (JP) malicious 5,152 Critical
22 South Korea (KR) malicious 5,129 Critical
23 Canada (CA) Network Attack 4,641 Critical
24 Mexico (MX) Network Attack 4,613 High
25 Seychelles (SC) Network Attack 3,970 High
26 Taiwan (TW) Network Attack 3,380 High
27 Spain (ES) Network Attack 3,321 High
28 Italy (IT) Network Attack 3,166 High
29 Thailand (TH) Network Attack 2,983 High
30 Sweden (SE) malicious 2,542 High
31 Israel (IL) Network Attack 2,398 High
32 Iran (IR) Network Attack 2,230 High
33 Colombia (CO) Network Attack 2,171 High
34 South Africa (ZA) Network Attack 2,007 High
35 Malaysia (MY) malicious 1,935 High
36 Australia (AU) Network Attack 1,888 High
37 Ireland (IE) Network Attack 1,795 High
38 Switzerland (CH) Network Attack 1,716 High
39 Bulgaria (BG) malicious 1,586 High
40 Uzbekistan (UZ) malicious 1,571 High
41 Philippines (PH) Network Attack 1,476 High
42 Chile (CL) Network Attack 1,474 High
43 United Arab Emirates (AE) Network Attack 1,473 High
44 Saudi Arabia (SA) Network Attack 1,168 High
45 Romania (RO) malicious 1,116 High
46 Finland (FI) malicious 1,061 High
47 Morocco (MA) Network Attack 956 High
48 Ecuador (EC) Network Attack 930 High
49 Portugal (PT) malicious 927 High
50 Egypt (EG) Network Attack 914 High
51 Venezuela (VE) Network Attack 853 High
52 Republic of Lithuania (LT) malicious 727 High
53 Kenya (KE) Network Attack 718 High
54 Croatia (HR) Network Attack 648 High
55 Czechia (CZ) Network Attack 614 High
56 Kazakhstan (KZ) Network Attack 593 Medium
57 Uruguay (UY) Network Attack 580 Medium
58 Iraq (IQ) malicious 566 Medium
59 Republic of Moldova (MD) malicious 562 Medium
60 Austria (AT) malicious 541 Medium
61 Norway (NO) Network Attack 516 Medium
62 Peru (PE) Network Attack 507 Medium
63 Nigeria (NG) Network Attack 480 Medium
64 Algeria (DZ) Network Attack 437 Medium
65 Denmark (DK) Network Attack 430 Medium
66 Hungary (HU) malicious 413 Medium
67 Cyprus (CY) Network Attack 403 Medium
68 Tunisia (TN) Network Attack 395 Medium
69 Greece (GR) Network Attack 394 Medium
70 Azerbaijan (AZ) Network Attack 383 Medium
71 Slovenia (SI) Network Attack 371 Medium
72 Estonia (EE) Network Attack 360 Medium
73 Latvia (LV) malicious 357 Medium
74 Georgia (GE) Network Attack 347 Medium
75 Nepal (NP) Network Attack 340 Medium
76 Mauritius (MU) Network Attack 339 Medium
77 Armenia (AM) Network Attack 333 Medium
78 Bolivia (BO) Network Attack 329 Medium
79 Dominican Republic (DO) Network Attack 320 Medium
80 Myanmar (MM) Network Attack 297 Medium
81 Turkmenistan (TM) malicious 285 Medium
82 Cambodia (KH) Network Attack 274 Medium
83 New Zealand (NZ) Network Attack 253 Medium
84 Serbia (RS) Network Attack 247 Medium
85 Qatar (QA) Network Attack 244 Medium
86 Senegal (SN) Network Attack 232 Medium
87 Albania (AL) Network Attack 231 Medium
88 Sri Lanka (LK) Network Attack 227 Medium
89 Belarus (BY) Network Attack 224 Medium
90 Paraguay (PY) Network Attack 220 Medium
91 Panama (PA) malicious 219 Medium
92 Jordan (JO) Network Attack 204 Medium
93 Tanzania (TZ) Network Attack 203 Medium
94 Costa Rica (CR) Network Attack 193 Medium
95 Palestine (PS) Network Attack 192 Medium
96 British Virgin Islands (VG) malicious 187 Medium
97 Ethiopia (ET) Network Attack 174 Medium
98 Oman (OM) Network Attack 174 Medium
99 Slovakia (SK) malicious 160 Medium
100 Kuwait (KW) Network Attack 150 Medium
101 Bahrain (BH) Network Attack 148 Medium
102 Ivory Coast (CI) Network Attack 142 Medium
103 North Macedonia (MK) Network Attack 139 Medium
104 Ghana (GH) malicious 134 Medium
105 Iceland (IS) malicious 131 Medium
106 Mongolia (MN) Network Attack 130 Medium
107 Luxembourg (LU) malicious 129 Medium
108 Puerto Rico (PR) Network Attack 108 Medium
109 Guatemala (GT) Network Attack 107 Low
110 Burkina Faso (BF) Network Attack 106 Low
111 Honduras (HN) Network Attack 106 Low
112 Bosnia and Herzegovina (BA) malicious 100 Low
113 Lebanon (LB) Network Attack 100 Low
114 Uganda (UG) malicious 89 Low
115 Trinidad and Tobago (TT) Network Attack 88 Low
116 Botswana (BW) malicious 83 Low
117 Angola (AO) Network Attack 81 Low
118 Mozambique (MZ) Network Attack 79 Low
119 Kyrgyzstan (KG) Network Attack 78 Low
120 Togo (TG) Network Attack 74 Low
121 Macao (MO) Network Attack 73 Low
122 Syria (SY) Network Attack 73 Low
123 Cameroon (CM) malicious 71 Low
124 Jamaica (JM) Network Attack 71 Low
125 Malta (MT) Network Attack 65 Low
126 Belize (BZ) Network Attack 62 Low
127 Kosovo (XK) Network Attack 62 Low
128 Congo Republic (CG) Network Attack 59 Low
129 Laos (LA) Network Attack 58 Low
130 El Salvador (SV) Network Attack 56 Low
131 Zimbabwe (ZW) Network Attack 56 Low
132 Libya (LY) malicious 54 Low
133 Zambia (ZM) Network Attack 49 Low
134 Mali (ML) Network Attack 48 Low
135 Liberia (LR) Network Attack 43 Low
136 Maldives (MV) Network Attack 43 Low
137 Réunion (RE) Network Attack 42 Low
138 Rwanda (RW) Network Attack 42 Low
139 Gabon (GA) Network Attack 38 Low
140 Namibia (NA) Network Attack 37 Low
141 Tajikistan (TJ) Network Attack 37 Low
142 Barbados (BB) Network Attack 36 Low
143 Benin (BJ) malicious 33 Low
144 Guadeloupe (GP) Network Attack 30 Low
145 Afghanistan (AF) malicious 28 Low
146 Monaco (MC) malicious 26 Low
147 Montenegro (ME) malicious 26 Low
148 Madagascar (MG) Network Attack 26 Low
149 Nicaragua (NI) malicious 26 Low
150 Guam (GU) Network Attack 24 Low
151 Martinique (MQ) Network Attack 24 Low
152 Fiji (FJ) Network Attack 23 Low
153 Yemen (YE) Network Attack 23 Low
154 Congo (DRC) (CD) Network Attack 22 Low
155 New Caledonia (NC) Network Attack 21 Low
156 Timor-Leste (TL) Network Attack 19 Low
157 Liechtenstein (LI) tor_exit 18 Low
158 Andorra (AD) malicious 17 Low
159 Curaçao (CW) Network Attack 17 Low
160 French Guiana (GF) Network Attack 17 Low
161 Haiti (HT) Network Attack 17 Low
162 Bhutan (BT) Network Attack 16 Low
163 Djibouti (DJ) Network Attack 16 Low
164 Malawi (MW) malicious 16 Low
165 Bahamas (BS) Network Attack 15 Low
166 Cabo Verde (CV) Network Attack 14 Low
167 Gambia (GM) Network Attack 14 Low
168 Guyana (GY) Network Attack 14 Low
169 Suriname (SR) Network Attack 14 Low
170 Sint Maarten (SX) Network Attack 14 Low
171 Cayman Islands (KY) Network Attack 13 Low
172 French Polynesia (PF) Network Attack 13 Low
173 Brunei (BN) malicious 11 Low
174 Lesotho (LS) Network Attack 11 Low
175 Mauritania (MR) malicious 11 Low
176 Somalia (SO) malicious 11 Low
177 Eritrea (ER) malicious 9 Low
178 Cuba (CU) malicious 8 Low
179 Sudan (SD) malicious 8 Low
180 Grenada (GD) Network Attack 7 Low
181 Isle of Man (IM) malicious 7 Low
182 Antigua and Barbuda (AG) Network Attack 6 Low
183 Burundi (BI) malicious 6 Low
184 Niger (NE) Network Attack 6 Low
185 Eswatini (SZ) malicious 5 Low
186 U.S. Virgin Islands (VI) malicious 5 Low
187 Vanuatu (VU) Network Attack 5 Low
188 American Samoa (AS) Network Attack 4 Low
189 Jersey (JE) Network Attack 4 Low
190 Papua New Guinea (PG) Network Attack 4 Low
191 Dominica (DM) malicious 3 Low
192 Faroe Islands (FO) malicious 3 Low
193 Guernsey (GG) Network Attack 3 Low
194 Comoros (KM) Network Attack 3 Low
195 Sierra Leone (SL) Network Attack 3 Low
196 Aruba (AW) Network Attack 2 Low
197 Åland Islands (AX) malicious 2 Low
198 Bermuda (BM) Network Attack 2 Low
199 Bonaire, Sint Eustatius and Saba (BQ) malicious 2 Low
200 Guinea (GN) Network Attack 2 Low
201 Equatorial Guinea (GQ) Network Attack 2 Low
202 Kiribati (KI) Network Attack 2 Low
203 Saint Kitts and Nevis (KN) Network Attack 2 Low
204 Saint Lucia (LC) Network Attack 2 Low
205 Saint Pierre and Miquelon (PM) Network Attack 2 Low
206 Solomon Islands (SB) Network Attack 2 Low
207 South Sudan (SS) Network Attack 2 Low
208 Chad (TD) malicious 2 Low
209 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
210 Samoa (WS) malicious 2 Low
211 Mayotte (YT) Network Attack 2 Low
212 Anguilla (AI) Network Attack 1 Low
213 Gibraltar (GI) Network Attack 1 Low
214 Greenland (GL) Network Attack 1 Low
215 San Marino (SM) Network Attack 1 Low
No countries match the current filters.
How we measure threats

Every score on the platform is rooted in a public methodology: 73 honeypots and tarpits across multiple regions, cross-referenced with 22+ open-source feeds and refreshed every four hours. We publish the signals, the cadence and the caveats so you can replicate our maths.

Read the methodology

Brute-force activity — this week vs. last week
91,956 unique attackers
in the last 7 days (vs. 63,776 the week before)
+44.2%
week-over-week change
ASN & ISP league table — top 20 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 24,655 32 medium
2 AS4134 No.31,Jin-rong Street 21,915 20 low
3 AS200373 DREI-K-TECH-GMBH, DE 15,931 90 critical
4 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,704 46 medium
5 AS16509 Amazon.com, Inc. 10,777 33 medium
6 AS13335 CLOUDFLARENET, US 7,771 66 high
7 AS26548 PUREVOLTAGE-INC, US 7,251 87 critical
8 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 7,243 38 medium
9 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 6,947 49 medium
10 AS47329 WDM-AS, PL 6,883 100 critical
11 AS43420 ELTRONIK-AS, PL 5,668 100 critical
12 AS14618 Amazon.com, Inc. 5,415 48 medium
13 AS41931 EURONET-AS, PL 5,356 100 critical
14 AS50467 BESKID-MEDIA-AS, PL 5,253 100 critical
15 AS50188 KOLNET Sp. z o.o. 5,205 100 critical
16 AS198401 GECKONET-AS, PL 5,194 100 critical
17 AS33923 ART-COM, PL 4,929 100 critical
18 AS135905 VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN 4,828 96 critical
19 AS6823 TR-3C1B-TELEKOM, TR 4,225 100 critical
20 AS14061 DigitalOcean, LLC 3,880 8 low
Weekly digest — by email

A short Monday-morning email summarising the headline movements: brute-force trend, the ASN league table, the noisiest categories, and the IPs propagating fastest across the sensor estate. Opt in, unsubscribe with one click.

Embeddable badge

Drop this badge into your blog or status page — it always shows the live count:

Powered by ipinsights.io — 117,660 IPs blocked this week