Mastodon Intelligence — Charts, Trends & League Tables — ipinsights.io

Intelligence

The fuller analytical surface — every chart and league table behind the home page, in one place.

Back to home
When attackers are most active right now
Where attacks are coming from right now
What attackers are trying to do this week
AI Agent traffic — 24-hour share & 90-day trend methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Brute-force activity — this week vs. last week
91,940 unique attackers
in the last 7 days (vs. 63,797 the week before)
+44.1%
week-over-week change
ASN & ISP league table — top 50 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 24,655 32 medium
2 AS4134 No.31,Jin-rong Street 21,915 20 low
3 AS200373 DREI-K-TECH-GMBH, DE 15,931 90 critical
4 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,704 46 medium
5 AS16509 Amazon.com, Inc. 10,777 33 medium
6 AS13335 CLOUDFLARENET, US 7,771 66 high
7 AS26548 PUREVOLTAGE-INC, US 7,251 87 critical
8 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 7,243 38 medium
9 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 6,947 49 medium
10 AS47329 WDM-AS, PL 6,883 100 critical
11 AS43420 ELTRONIK-AS, PL 5,668 100 critical
12 AS14618 Amazon.com, Inc. 5,415 48 medium
13 AS41931 EURONET-AS, PL 5,356 100 critical
14 AS50467 BESKID-MEDIA-AS, PL 5,253 100 critical
15 AS50188 KOLNET Sp. z o.o. 5,205 100 critical
16 AS198401 GECKONET-AS, PL 5,194 100 critical
17 AS33923 ART-COM, PL 4,929 100 critical
18 AS135905 VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN 4,828 96 critical
19 AS6823 TR-3C1B-TELEKOM, TR 4,225 100 critical
20 AS14061 DigitalOcean, LLC 3,880 8 low
21 AS42910 PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR 3,726 100 critical
22 AS197697 DERKOM Sp. J. 3,607 100 critical
23 AS62425 Mailbox Internet Hizmetleri Ltd. Sti. 3,575 100 critical
24 AS59651 ASBLG, IL 3,421 95 critical
25 AS46475 LIMESTONENETWORKS, US 3,416 92 critical
26 AS43444 Fast Servers (Pty) Ltd 3,195 87 critical
27 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 3,083 37 medium
28 AS149089 CLOUDFLY-VN CLOUDFLY CORPORATION, VN 3,072 100 critical
29 AS202281 C3 NET Sp. z o.o. Sp. k. 2,970 100 critical
30 AS14789 CLOUDFLARENET-A, US 2,963 78 critical
31 AS6205 HIZLINET-TEKNOLOJI, TR 2,867 100 critical
32 AS213954 UNASSIGNED 2,762 93 critical
33 AS42216 Netviser Bilisim Teknolojileri San. Ve Tic. Ltd. Sti. 2,731 100 critical
34 AS35830 Fast Servers (Pty) Ltd 2,722 96 critical
35 AS9829 National Internet Backbone 2,590 34 medium
36 AS57789 HomeNet Technologies Sp. z o.o. 2,581 100 critical
37 AS394474 WHITELABELCOLO393, US 2,564 97 critical
38 AS4766 Korea Telecom 2,542 38 medium
39 AS60191 NOWATEL-AS, PL 2,457 100 critical
40 AS7922 COMCAST-7922, US 2,412 48 medium
41 AS45090 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Lim 2,395 44 medium
42 AS48678 TR-PENTECH-AS, TR 2,346 100 critical
43 AS50705 Przedsiebiorstwo Telekomunikacyjne telgam Spolka Akcyjna 2,309 100 critical
44 AS200750 Klikom.net Sp.z o.o. 2,304 100 critical
45 AS41297 ABAKS 2,303 100 critical
46 AS28573 CLARO S.A. 2,245 54 high
47 AS8151 UNINET, MX 2,233 36 medium
48 AS9541 CYBERNET-AP Cyber Internet Services Pvt Ltd., PK 2,176 41 medium
49 AS3462 HINET Data Communication Business Group, TW 2,169 38 medium
50 AS57026 JSC ER-Telecom Holding 2,057 99 critical
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) Network Attack 95,654 Critical
2 Poland (PL) Network Attack 80,776 Critical
3 China (CN) Network Attack 68,068 Critical
4 Türkiye (TR) Network Attack 40,794 Critical
5 Brazil (BR) Network Attack 32,443 Critical
6 Vietnam (VN) Network Attack 19,639 Critical
7 Russia (RU) Network Attack 17,270 Critical
8 Germany (DE) Network Attack 15,833 Critical
9 India (IN) Network Attack 11,068 Critical
10 United Kingdom (GB) malicious 10,829 Critical
11 The Netherlands (NL) Network Attack 9,099 Critical
12 France (FR) Network Attack 9,042 Critical
13 Belgium (BE) Network Attack 7,647 Critical
14 Ukraine (UA) Network Attack 7,111 Critical
15 Hong Kong (HK) malicious 6,985 Critical
16 Singapore (SG) malicious 6,391 Critical
17 Indonesia (ID) Network Attack 5,497 Critical
18 Argentina (AR) Network Attack 5,422 Critical
19 Bangladesh (BD) Network Attack 5,375 Critical
20 Pakistan (PK) Network Attack 5,176 Critical
21 Japan (JP) malicious 5,153 Critical
22 South Korea (KR) malicious 5,129 Critical
23 Canada (CA) Network Attack 4,642 Critical
24 Mexico (MX) Network Attack 4,613 High
25 Seychelles (SC) Network Attack 3,970 High
26 Taiwan (TW) Network Attack 3,380 High
27 Spain (ES) Network Attack 3,321 High
28 Italy (IT) Network Attack 3,166 High
29 Thailand (TH) Network Attack 2,985 High
30 Sweden (SE) malicious 2,542 High
31 Israel (IL) Network Attack 2,398 High
32 Iran (IR) Network Attack 2,230 High
33 Colombia (CO) Network Attack 2,171 High
34 South Africa (ZA) Network Attack 2,007 High
35 Malaysia (MY) malicious 1,935 High
36 Australia (AU) Network Attack 1,888 High
37 Ireland (IE) Network Attack 1,795 High
38 Switzerland (CH) Network Attack 1,716 High
39 Bulgaria (BG) malicious 1,586 High
40 Uzbekistan (UZ) malicious 1,571 High
41 Philippines (PH) Network Attack 1,476 High
42 Chile (CL) Network Attack 1,474 High
43 United Arab Emirates (AE) Network Attack 1,472 High
44 Saudi Arabia (SA) Network Attack 1,168 High
45 Romania (RO) malicious 1,116 High
46 Finland (FI) malicious 1,061 High
47 Morocco (MA) Network Attack 956 High
48 Ecuador (EC) Network Attack 930 High
49 Portugal (PT) malicious 927 High
50 Egypt (EG) Network Attack 914 High
51 Venezuela (VE) Network Attack 853 High
52 Republic of Lithuania (LT) malicious 727 High
53 Kenya (KE) Network Attack 718 High
54 Croatia (HR) Network Attack 648 High
55 Czechia (CZ) Network Attack 614 High
56 Kazakhstan (KZ) Network Attack 593 Medium
57 Uruguay (UY) Network Attack 580 Medium
58 Iraq (IQ) malicious 566 Medium
59 Republic of Moldova (MD) malicious 562 Medium
60 Austria (AT) malicious 541 Medium
61 Norway (NO) Network Attack 516 Medium
62 Peru (PE) Network Attack 507 Medium
63 Nigeria (NG) Network Attack 480 Medium
64 Algeria (DZ) Network Attack 437 Medium
65 Denmark (DK) Network Attack 430 Medium
66 Hungary (HU) malicious 413 Medium
67 Cyprus (CY) Network Attack 403 Medium
68 Greece (GR) Network Attack 395 Medium
69 Tunisia (TN) Network Attack 395 Medium
70 Azerbaijan (AZ) Network Attack 384 Medium
71 Slovenia (SI) Network Attack 371 Medium
72 Estonia (EE) Network Attack 360 Medium
73 Latvia (LV) malicious 357 Medium
74 Georgia (GE) Network Attack 347 Medium
75 Nepal (NP) Network Attack 340 Medium
76 Mauritius (MU) Network Attack 339 Medium
77 Armenia (AM) Network Attack 333 Medium
78 Bolivia (BO) Network Attack 329 Medium
79 Dominican Republic (DO) Network Attack 320 Medium
80 Myanmar (MM) Network Attack 297 Medium
81 Turkmenistan (TM) malicious 285 Medium
82 Cambodia (KH) Network Attack 274 Medium
83 New Zealand (NZ) Network Attack 253 Medium
84 Serbia (RS) Network Attack 247 Medium
85 Qatar (QA) Network Attack 244 Medium
86 Senegal (SN) Network Attack 232 Medium
87 Albania (AL) Network Attack 231 Medium
88 Sri Lanka (LK) Network Attack 227 Medium
89 Belarus (BY) Network Attack 224 Medium
90 Paraguay (PY) Network Attack 220 Medium
91 Panama (PA) malicious 219 Medium
92 Jordan (JO) Network Attack 204 Medium
93 Tanzania (TZ) Network Attack 203 Medium
94 Costa Rica (CR) Network Attack 193 Medium
95 Palestine (PS) Network Attack 192 Medium
96 British Virgin Islands (VG) malicious 187 Medium
97 Ethiopia (ET) Network Attack 174 Medium
98 Oman (OM) Network Attack 174 Medium
99 Slovakia (SK) malicious 160 Medium
100 Kuwait (KW) Network Attack 150 Medium
101 Bahrain (BH) Network Attack 148 Medium
102 Ivory Coast (CI) Network Attack 142 Medium
103 North Macedonia (MK) Network Attack 139 Medium
104 Ghana (GH) malicious 134 Medium
105 Iceland (IS) malicious 131 Medium
106 Mongolia (MN) Network Attack 130 Medium
107 Luxembourg (LU) malicious 129 Medium
108 Puerto Rico (PR) Network Attack 108 Medium
109 Guatemala (GT) Network Attack 107 Low
110 Burkina Faso (BF) Network Attack 106 Low
111 Honduras (HN) Network Attack 106 Low
112 Bosnia and Herzegovina (BA) malicious 100 Low
113 Lebanon (LB) Network Attack 100 Low
114 Uganda (UG) malicious 89 Low
115 Trinidad and Tobago (TT) Network Attack 88 Low
116 Botswana (BW) malicious 83 Low
117 Angola (AO) Network Attack 81 Low
118 Mozambique (MZ) Network Attack 79 Low
119 Kyrgyzstan (KG) Network Attack 78 Low
120 Togo (TG) Network Attack 74 Low
121 Macao (MO) Network Attack 73 Low
122 Syria (SY) Network Attack 73 Low
123 Cameroon (CM) malicious 71 Low
124 Jamaica (JM) Network Attack 71 Low
125 Malta (MT) Network Attack 65 Low
126 Belize (BZ) Network Attack 62 Low
127 Kosovo (XK) Network Attack 62 Low
128 Congo Republic (CG) Network Attack 59 Low
129 Laos (LA) Network Attack 58 Low
130 El Salvador (SV) Network Attack 56 Low
131 Zimbabwe (ZW) Network Attack 56 Low
132 Libya (LY) malicious 54 Low
133 Zambia (ZM) Network Attack 49 Low
134 Mali (ML) Network Attack 48 Low
135 Liberia (LR) Network Attack 43 Low
136 Maldives (MV) Network Attack 43 Low
137 Réunion (RE) Network Attack 42 Low
138 Rwanda (RW) Network Attack 42 Low
139 Gabon (GA) Network Attack 38 Low
140 Namibia (NA) Network Attack 37 Low
141 Tajikistan (TJ) Network Attack 37 Low
142 Barbados (BB) Network Attack 36 Low
143 Benin (BJ) malicious 33 Low
144 Guadeloupe (GP) Network Attack 30 Low
145 Afghanistan (AF) malicious 28 Low
146 Monaco (MC) malicious 26 Low
147 Montenegro (ME) malicious 26 Low
148 Madagascar (MG) Network Attack 26 Low
149 Nicaragua (NI) malicious 26 Low
150 Guam (GU) Network Attack 24 Low
151 Martinique (MQ) Network Attack 24 Low
152 Fiji (FJ) Network Attack 23 Low
153 Yemen (YE) Network Attack 23 Low
154 Congo (DRC) (CD) Network Attack 22 Low
155 New Caledonia (NC) Network Attack 21 Low
156 Timor-Leste (TL) Network Attack 19 Low
157 Liechtenstein (LI) tor_exit 18 Low
158 Andorra (AD) malicious 17 Low
159 Curaçao (CW) Network Attack 17 Low
160 French Guiana (GF) Network Attack 17 Low
161 Haiti (HT) Network Attack 17 Low
162 Bhutan (BT) Network Attack 16 Low
163 Djibouti (DJ) Network Attack 16 Low
164 Malawi (MW) malicious 16 Low
165 Bahamas (BS) Network Attack 15 Low
166 Cabo Verde (CV) Network Attack 14 Low
167 Gambia (GM) Network Attack 14 Low
168 Guyana (GY) Network Attack 14 Low
169 Suriname (SR) Network Attack 14 Low
170 Sint Maarten (SX) Network Attack 14 Low
171 Cayman Islands (KY) Network Attack 13 Low
172 French Polynesia (PF) Network Attack 13 Low
173 Brunei (BN) malicious 11 Low
174 Lesotho (LS) Network Attack 11 Low
175 Mauritania (MR) malicious 11 Low
176 Somalia (SO) malicious 11 Low
177 Eritrea (ER) malicious 9 Low
178 Cuba (CU) malicious 8 Low
179 Sudan (SD) malicious 8 Low
180 Grenada (GD) Network Attack 7 Low
181 Isle of Man (IM) malicious 7 Low
182 Antigua and Barbuda (AG) Network Attack 6 Low
183 Burundi (BI) malicious 6 Low
184 Niger (NE) Network Attack 6 Low
185 Eswatini (SZ) malicious 5 Low
186 U.S. Virgin Islands (VI) malicious 5 Low
187 Vanuatu (VU) Network Attack 5 Low
188 American Samoa (AS) Network Attack 4 Low
189 Jersey (JE) Network Attack 4 Low
190 Papua New Guinea (PG) Network Attack 4 Low
191 Dominica (DM) malicious 3 Low
192 Faroe Islands (FO) malicious 3 Low
193 Guernsey (GG) Network Attack 3 Low
194 Comoros (KM) Network Attack 3 Low
195 Sierra Leone (SL) Network Attack 3 Low
196 Aruba (AW) Network Attack 2 Low
197 Åland Islands (AX) malicious 2 Low
198 Bermuda (BM) Network Attack 2 Low
199 Bonaire, Sint Eustatius and Saba (BQ) malicious 2 Low
200 Guinea (GN) Network Attack 2 Low
201 Equatorial Guinea (GQ) Network Attack 2 Low
202 Kiribati (KI) Network Attack 2 Low
203 Saint Kitts and Nevis (KN) Network Attack 2 Low
204 Saint Lucia (LC) Network Attack 2 Low
205 Saint Pierre and Miquelon (PM) Network Attack 2 Low
206 Solomon Islands (SB) Network Attack 2 Low
207 South Sudan (SS) Network Attack 2 Low
208 Chad (TD) malicious 2 Low
209 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
210 Samoa (WS) malicious 2 Low
211 Mayotte (YT) Network Attack 2 Low
212 Anguilla (AI) Network Attack 1 Low
213 Gibraltar (GI) Network Attack 1 Low
214 Greenland (GL) Network Attack 1 Low
215 San Marino (SM) Network Attack 1 Low