Intelligence

The fuller analytical surface — every chart and league table behind the home page, in one place.

Back to home
When attackers are most active right now
Where attacks are coming from right now
What attackers are trying to do this week
AI Agent traffic — 24-hour share & 90-day trend methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Brute-force activity — this week vs. last week
59,050 unique attackers
in the last 7 days (vs. 66,714 the week before)
-11.5%
week-over-week change
ASN & ISP league table — top 50 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 30,813 45 medium
2 AS4134 No.31,Jin-rong Street 26,125 25 medium
3 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,944 57 high
4 AS16509 Amazon.com, Inc. 13,715 49 medium
5 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 9,010 51 high
6 AS13335 CLOUDFLARENET, US 8,364 87 critical
7 AS14618 Amazon.com, Inc. 6,349 63 high
8 AS14061 DigitalOcean, LLC 5,714 17 low
9 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 5,517 48 medium
10 AS6823 TR-3C1B-TELEKOM, TR 4,165 100 critical
11 AS42910 PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR 3,726 100 critical
12 AS62425 Mailbox Internet Hizmetleri Ltd. Sti. 3,575 100 critical
13 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 3,222 41 medium
14 AS14789 CLOUDFLARENET-A, US 2,951 96 critical
15 AS6205 HIZLINET-TEKNOLOJI, TR 2,868 100 critical
16 AS9829 National Internet Backbone 2,788 38 medium
17 AS4766 Korea Telecom 2,784 47 medium
18 AS8151 UNINET, MX 2,738 53 high
19 AS42216 Netviser Bilisim Teknolojileri San. Ve Tic. Ltd. Sti. 2,638 100 critical
20 AS394474 WHITELABELCOLO393, US 2,579 98 critical
21 AS9541 CYBERNET-AP Cyber Internet Services Pvt Ltd., PK 2,408 50 high
22 AS48678 TR-PENTECH-AS, TR 2,331 100 critical
23 AS45090 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Lim 2,330 47 medium
24 AS7922 COMCAST-7922, US 2,309 51 high
25 AS3462 HINET Data Communication Business Group, TW 2,262 49 medium
26 AS62240 Clouvider Limited 2,106 39 medium
27 AS57026 JSC ER-Telecom Holding 2,056 99 critical
28 AS28573 Claro NXT Telecomunicacoes Ltda, BR 1,970 62 high
29 AS7713 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 1,924 48 medium
30 AS9808 Guangdong Mobile Communication Co.Ltd. 1,912 30 medium
31 AS26548 PUREVOLTAGE-INC, US 1,886 71 critical
32 AS135377 UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED, HK 1,872 69 high
33 AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue, CN 1,855 46 medium
34 AS34254 HORNET-AS, PL 1,834 100 critical
35 AS63949 LINODE-AP 1,775 46 medium
36 AS263740 Corporacion Laceibanetsociety, HN 1,685 98 critical
37 AS17622 CNCGROUP-GZ China Unicom Guangzhou network, CN 1,577 59 high
38 AS16276 OVH, FR 1,564 43 medium
39 AS3257 GTT-BACKBONE GTT, US 1,526 77 critical
40 AS12389 ROSTELECOM-AS, RU 1,472 42 medium
41 AS47894 VERITEKNIK, TR 1,439 100 critical
42 AS11878 TZULO, US 1,400 68 high
43 AS24940 HETZNER-AS, DE 1,386 39 medium
44 AS42926 RADORE, TR 1,358 99 critical
45 AS206092 SECFIREWALLAS, GB 1,314 14 low
46 AS399647 RUMBLE, CA 1,280 100 critical
47 AS201814 MEVSPACE, PL 1,279 72 critical
48 AS52008 NesterTelecom LLC 1,272 100 critical
49 AS200373 DREI-K-TECH-GMBH, DE 1,242 38 medium
50 AS45899 VNPT-AS-VN VNPT Corp, VN 1,234 30 medium
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) Network Attack 86,787 Critical
2 China (CN) Network Attack 78,994 Critical
3 Türkiye (TR) Network Attack 34,909 Critical
4 Brazil (BR) Network Attack 26,353 Critical
5 Poland (PL) Network Attack 16,206 Critical
6 India (IN) Network Attack 13,917 Critical
7 Russia (RU) malicious 13,737 Critical
8 Germany (DE) malicious 12,106 Critical
9 United Kingdom (GB) malicious 9,971 Critical
10 Hong Kong (HK) malicious 7,909 Critical
11 The Netherlands (NL) malicious 7,903 Critical
12 Belgium (BE) Network Attack 7,628 Critical
13 Singapore (SG) malicious 7,540 Critical
14 France (FR) malicious 6,780 Critical
15 Indonesia (ID) Network Attack 6,062 Critical
16 South Korea (KR) Network Attack 5,955 Critical
17 Pakistan (PK) Network Attack 5,617 Critical
18 Japan (JP) malicious 5,572 Critical
19 Mexico (MX) Network Attack 5,311 Critical
20 Bangladesh (BD) Network Attack 5,005 Critical
21 Vietnam (VN) Network Attack 4,924 Critical
22 Canada (CA) Network Attack 4,269 Critical
23 Ukraine (UA) Network Attack 3,639 Critical
24 Taiwan (TW) Network Attack 3,566 High
25 Thailand (TH) Network Attack 3,449 High
26 Argentina (AR) Network Attack 3,426 High
27 Italy (IT) Network Attack 2,751 High
28 Sweden (SE) Network Attack 2,562 High
29 Australia (AU) Network Attack 2,433 High
30 Spain (ES) Network Attack 2,428 High
31 Ireland (IE) Network Attack 2,425 High
32 South Africa (ZA) Network Attack 2,254 High
33 Malaysia (MY) malicious 2,151 High
34 Iran (IR) malicious 2,059 High
35 Colombia (CO) Network Attack 2,021 High
36 Seychelles (SC) malicious 1,882 High
37 Switzerland (CH) Network Attack 1,799 High
38 Philippines (PH) Network Attack 1,693 High
39 Venezuela (VE) Network Attack 1,688 High
40 Saudi Arabia (SA) Network Attack 1,619 High
41 Bulgaria (BG) malicious 1,551 High
42 United Arab Emirates (AE) Network Attack 1,531 High
43 Egypt (EG) Network Attack 1,403 High
44 Finland (FI) malicious 1,226 High
45 Romania (RO) malicious 1,223 High
46 Uruguay (UY) Network Attack 1,220 High
47 Israel (IL) Network Attack 1,198 High
48 Morocco (MA) Network Attack 1,186 High
49 Portugal (PT) malicious 984 High
50 Uzbekistan (UZ) Network Attack 963 High
51 Chile (CL) Network Attack 915 High
52 Republic of Lithuania (LT) Network Attack 861 High
53 Iraq (IQ) Network Attack 856 High
54 Nigeria (NG) Network Attack 849 High
55 Ecuador (EC) Network Attack 806 High
56 Kenya (KE) Network Attack 753 Medium
57 Kazakhstan (KZ) Network Attack 716 Medium
58 Czechia (CZ) Network Attack 663 Medium
59 Croatia (HR) Network Attack 651 Medium
60 Republic of Moldova (MD) malicious 611 Medium
61 Algeria (DZ) Network Attack 598 Medium
62 Peru (PE) Network Attack 590 Medium
63 Austria (AT) malicious 583 Medium
64 Denmark (DK) Network Attack 558 Medium
65 Hungary (HU) Network Attack 535 Medium
66 Dominican Republic (DO) Network Attack 484 Medium
67 Norway (NO) Network Attack 483 Medium
68 Tunisia (TN) Network Attack 478 Medium
69 Tanzania (TZ) Network Attack 464 Medium
70 Paraguay (PY) Network Attack 457 Medium
71 Greece (GR) Network Attack 456 Medium
72 Panama (PA) Network Attack 455 Medium
73 Azerbaijan (AZ) Network Attack 391 Medium
74 Senegal (SN) Network Attack 391 Medium
75 Palestine (PS) Network Attack 370 Medium
76 Mauritius (MU) Network Attack 364 Medium
77 Bolivia (BO) Network Attack 354 Medium
78 Slovenia (SI) Network Attack 344 Medium
79 Cambodia (KH) Network Attack 331 Medium
80 Ethiopia (ET) Network Attack 329 Medium
81 Nepal (NP) Network Attack 329 Medium
82 Georgia (GE) Network Attack 327 Medium
83 New Zealand (NZ) Network Attack 321 Medium
84 Armenia (AM) Network Attack 320 Medium
85 Latvia (LV) malicious 305 Medium
86 Costa Rica (CR) Network Attack 291 Medium
87 Syria (SY) Network Attack 287 Medium
88 Serbia (RS) Network Attack 282 Medium
89 Jordan (JO) Network Attack 268 Medium
90 Turkmenistan (TM) malicious 267 Medium
91 Honduras (HN) Network Attack 266 Medium
92 Belarus (BY) Network Attack 246 Medium
93 Sri Lanka (LK) Network Attack 243 Medium
94 Albania (AL) Network Attack 238 Medium
95 Oman (OM) Network Attack 231 Medium
96 Luxembourg (LU) Network Attack 230 Medium
97 North Macedonia (MK) Network Attack 230 Medium
98 Qatar (QA) Network Attack 211 Medium
99 Mongolia (MN) Network Attack 202 Medium
100 Cyprus (CY) Network Attack 189 Medium
101 British Virgin Islands (VG) malicious 182 Medium
102 Estonia (EE) malicious 178 Medium
103 Kuwait (KW) Network Attack 177 Medium
104 Myanmar (MM) Network Attack 170 Medium
105 Lebanon (LB) Network Attack 167 Medium
106 Slovakia (SK) malicious 162 Medium
107 Bahrain (BH) Network Attack 158 Medium
108 Angola (AO) Network Attack 156 Medium
109 Ghana (GH) malicious 155 Medium
110 Guatemala (GT) Network Attack 153 Low
111 Laos (LA) Network Attack 135 Low
112 Burkina Faso (BF) Network Attack 134 Low
113 Iceland (IS) tor_exit 134 Low
114 Jamaica (JM) Network Attack 134 Low
115 Belize (BZ) Network Attack 123 Low
116 Uganda (UG) malicious 119 Low
117 Ivory Coast (CI) Network Attack 118 Low
118 Trinidad and Tobago (TT) Network Attack 113 Low
119 Bosnia and Herzegovina (BA) malicious 111 Low
120 Botswana (BW) Network Attack 111 Low
121 Kyrgyzstan (KG) Network Attack 104 Low
122 Mozambique (MZ) Network Attack 103 Low
123 Nicaragua (NI) Network Attack 102 Low
124 Puerto Rico (PR) Network Attack 97 Low
125 Libya (LY) Network Attack 95 Low
126 Macao (MO) Network Attack 89 Low
127 Zambia (ZM) Network Attack 86 Low
128 Kosovo (XK) Network Attack 84 Low
129 Cameroon (CM) malicious 74 Low
130 Zimbabwe (ZW) Network Attack 73 Low
131 Congo Republic (CG) Network Attack 72 Low
132 Malta (MT) Network Attack 72 Low
133 Gabon (GA) Network Attack 67 Low
134 El Salvador (SV) Network Attack 67 Low
135 Rwanda (RW) Network Attack 57 Low
136 Guyana (GY) Network Attack 54 Low
137 Namibia (NA) Network Attack 52 Low
138 Togo (TG) Network Attack 50 Low
139 Tajikistan (TJ) Network Attack 50 Low
140 Mali (ML) Network Attack 44 Low
141 Benin (BJ) malicious 40 Low
142 Suriname (SR) Network Attack 40 Low
143 Afghanistan (AF) malicious 39 Low
144 Barbados (BB) Network Attack 39 Low
145 Maldives (MV) Network Attack 39 Low
146 Montenegro (ME) malicious 33 Low
147 New Caledonia (NC) Network Attack 33 Low
148 Réunion (RE) Network Attack 33 Low
149 Congo (DRC) (CD) Network Attack 32 Low
150 Madagascar (MG) Network Attack 32 Low
151 Gambia (GM) Network Attack 26 Low
152 Monaco (MC) malicious 26 Low
153 Yemen (YE) malicious 26 Low
154 Guam (GU) Network Attack 25 Low
155 Fiji (FJ) Network Attack 24 Low
156 Andorra (AD) Network Attack 23 Low
157 Martinique (MQ) Network Attack 23 Low
158 Somalia (SO) Network Attack 22 Low
159 Haiti (HT) Network Attack 21 Low
160 Bhutan (BT) Network Attack 19 Low
161 Guadeloupe (GP) malicious 18 Low
162 Liechtenstein (LI) tor_exit 18 Low
163 French Polynesia (PF) Network Attack 18 Low
164 Cabo Verde (CV) Network Attack 16 Low
165 Curaçao (CW) Network Attack 16 Low
166 Djibouti (DJ) Network Attack 16 Low
167 Mauritania (MR) Network Attack 15 Low
168 Malawi (MW) Network Attack 15 Low
169 Brunei (BN) malicious 13 Low
170 Isle of Man (IM) Network Attack 12 Low
171 Lesotho (LS) Network Attack 12 Low
172 Sint Maarten (SX) Network Attack 11 Low
173 Sudan (SD) Network Attack 10 Low
174 Cayman Islands (KY) Network Attack 9 Low
175 Mayotte (YT) Network Attack 9 Low
176 Bahamas (BS) Network Attack 8 Low
177 Grenada (GD) Network Attack 8 Low
178 Papua New Guinea (PG) Network Attack 8 Low
179 Guinea (GN) Network Attack 7 Low
180 Niger (NE) Network Attack 7 Low
181 Eswatini (SZ) malicious 7 Low
182 American Samoa (AS) Network Attack 6 Low
183 Burundi (BI) malicious 6 Low
184 Cuba (CU) Network Attack 6 Low
185 French Guiana (GF) Network Attack 6 Low
186 Liberia (LR) malicious 6 Low
187 Chad (TD) malicious 6 Low
188 Vanuatu (VU) Network Attack 6 Low
189 Guernsey (GG) Network Attack 5 Low
190 Equatorial Guinea (GQ) Network Attack 5 Low
191 Jersey (JE) Network Attack 5 Low
192 Solomon Islands (SB) Network Attack 5 Low
193 Antigua and Barbuda (AG) malicious 4 Low
194 Aruba (AW) Network Attack 4 Low
195 Dominica (DM) Network Attack 4 Low
196 Eritrea (ER) Network Attack 4 Low
197 Comoros (KM) Network Attack 4 Low
198 Bermuda (BM) Network Attack 3 Low
199 Sierra Leone (SL) Network Attack 3 Low
200 South Sudan (SS) Network Attack 3 Low
201 Timor-Leste (TL) Network Attack 3 Low
202 U.S. Virgin Islands (VI) malicious 3 Low
203 Samoa (WS) Network Attack 3 Low
204 Åland Islands (AX) malicious 2 Low
205 Bonaire, Sint Eustatius and Saba (BQ) malware 2 Low
206 Faroe Islands (FO) malicious 2 Low
207 Greenland (GL) Network Attack 2 Low
208 Saint Kitts and Nevis (KN) malicious 2 Low
209 Saint Lucia (LC) Network Attack 2 Low
210 Tonga (TO) Network Attack 2 Low
211 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
212 Anguilla (AI) Network Attack 1 Low
213 Central African Republic (CF) Network Attack 1 Low
214 Gibraltar (GI) Network Attack 1 Low
215 Kiribati (KI) Network Attack 1 Low
216 Northern Mariana Islands (MP) Network Attack 1 Low
217 São Tomé and Príncipe (ST) Network Attack 1 Low