Mastodon Intelligence — Charts, Trends & League Tables — ipinsights.io

Intelligence

The fuller analytical surface — every chart and league table behind the home page, in one place.

Back to home
When attackers are most active right now
Where attacks are coming from right now
What attackers are trying to do this week
AI Agent traffic — 24-hour share & 90-day trend methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Brute-force activity — this week vs. last week
59,349 unique attackers
in the last 7 days (vs. 36,847 the week before)
+61.1%
week-over-week change
ASN & ISP league table — top 50 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS200373 DREI-K-TECH-GMBH, DE 28,788 97 critical
2 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 19,304 23 low
3 AS4134 No.31,Jin-rong Street 17,166 14 low
4 AS396982 GOOGLE-CLOUD-PLATFORM, US 14,666 39 medium
5 AS16509 Amazon.com, Inc. 10,226 27 medium
6 AS41676 JMDI ORG-JJM1-RIPE, PL 8,899 100 critical
7 AS44692 DOMTEL-PL-AS, PL 8,621 100 critical
8 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 8,332 49 medium
9 AS26548 PUREVOLTAGE-INC, US 7,413 86 critical
10 AS47329 WDM-AS, PL 6,649 96 critical
11 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 5,808 30 medium
12 AS43420 ELTRONIK-AS, PL 5,677 100 critical
13 AS14061 DigitalOcean, LLC 5,672 9 low
14 AS41931 EURONET-AS, PL 5,357 67 high
15 AS50467 BESKID-MEDIA-AS, PL 5,273 67 high
16 AS50188 KOLNET, PL 5,207 67 high
17 AS198401 GECKONET-AS, PL 5,198 100 critical
18 AS13335 CLOUDFLARENET, US 4,982 35 medium
19 AS33923 ART-COM, PL 4,934 100 critical
20 AS14618 Amazon.com, Inc. 3,857 33 medium
21 AS135905 VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN 3,799 72 critical
22 AS48956 HYPERNET-AS, PL 3,697 100 critical
23 AS197697 DERKOM Sp. J. 3,609 100 critical
24 AS199585 TELNET Ropczyce Sp. z o.o. 3,584 100 critical
25 AS210246 ADAM ROJEK 3,548 100 critical
26 AS46475 LIMESTONENETWORKS, US 3,504 90 critical
27 AS59651 ASBLG, IL 3,500 92 critical
28 AS34254 HORNET-AS, PL 3,347 97 critical
29 AS43444 Fast Servers (Pty) Ltd 3,239 86 critical
30 AS6823 TR-3C1B-TELEKOM, TR 3,230 72 critical
31 AS59686 Gemini Internet Sp. z o.o. 3,072 100 critical
32 AS149089 CLOUDFLY-VN CLOUDFLY CORPORATION, VN 3,072 100 critical
33 AS213954 UNASSIGNED 2,882 91 critical
34 AS207156 LAITO Sp. Z O. O. 2,818 100 critical
35 AS4766 Korea Telecom 2,774 35 medium
36 AS35830 Fast Servers (Pty) Ltd 2,750 94 critical
37 AS197099 MULTINET24, PL 2,605 100 critical
38 AS57789 HomeNet Technologies Sp. z o.o. 2,583 100 critical
39 AS197838 Cheeloo J. Turczyn i Wspolnicy Sp. J. 2,560 100 critical
40 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 2,484 29 medium
41 AS9829 National Internet Backbone 2,457 31 medium
42 AS57844 SPDNet Telekomunikasyon Hizmetleri Bilgi Teknolojileri Taahhut Sanayi Ve Ticaret A.S. 2,409 100 critical
43 AS56582 NETFACTOR-ASN, TR 2,313 100 critical
44 AS50705 TELGAM-AS, PL 2,309 67 high
45 AS200750 KLINIKA_KOMPUTERA, PL 2,304 78 critical
46 AS41297 ABAKS 2,303 100 critical
47 AS45090 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Lim 2,266 38 medium
48 AS212477 RoyaleHosting BV 2,124 94 critical
49 AS50767 FIBERLINK-AS, PL 2,059 100 critical
50 AS57026 JSC ER-Telecom Holding 2,052 99 critical
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 Poland (PL) Network Attack 119,663 Critical
2 United States (US) Network Attack 96,949 Critical
3 China (CN) Network Attack 55,337 Critical
4 Türkiye (TR) Network Attack 31,532 Critical
5 Brazil (BR) Network Attack 21,528 Critical
6 Russia (RU) Network Attack 18,448 Critical
7 Vietnam (VN) Network Attack 17,547 Critical
8 Germany (DE) Network Attack 16,939 Critical
9 United Kingdom (GB) malicious 10,674 Critical
10 The Netherlands (NL) Network Attack 9,971 Critical
11 France (FR) Network Attack 9,661 Critical
12 India (IN) malicious 9,650 Critical
13 Belgium (BE) Network Attack 8,567 Critical
14 Hong Kong (HK) Network Attack 8,371 Critical
15 Ukraine (UA) Network Attack 7,142 Critical
16 Japan (JP) Network Attack 6,919 Critical
17 Singapore (SG) malicious 6,011 Critical
18 Bangladesh (BD) Network Attack 5,766 Critical
19 Argentina (AR) Network Attack 5,306 Critical
20 Canada (CA) Network Attack 4,858 Critical
21 Pakistan (PK) Network Attack 4,766 Critical
22 South Korea (KR) malicious 4,741 Critical
23 Indonesia (ID) Network Attack 4,663 Critical
24 Seychelles (SC) Network Attack 4,035 High
25 Italy (IT) Network Attack 3,380 High
26 Mexico (MX) Network Attack 3,279 High
27 Taiwan (TW) Network Attack 3,081 High
28 Spain (ES) Network Attack 2,990 High
29 Finland (FI) Network Attack 2,797 High
30 Thailand (TH) Network Attack 2,406 High
31 Israel (IL) Network Attack 2,269 High
32 Sweden (SE) malicious 1,949 High
33 Saudi Arabia (SA) Network Attack 1,936 High
34 Iran (IR) Network Attack 1,769 High
35 Switzerland (CH) Network Attack 1,656 High
36 Malaysia (MY) malicious 1,625 High
37 United Arab Emirates (AE) Network Attack 1,592 High
38 Colombia (CO) Network Attack 1,535 High
39 Australia (AU) Network Attack 1,471 High
40 South Africa (ZA) Network Attack 1,452 High
41 Philippines (PH) Network Attack 1,390 High
42 Bulgaria (BG) malicious 1,345 High
43 Romania (RO) malicious 1,313 High
44 Chile (CL) Network Attack 1,299 High
45 Uzbekistan (UZ) malicious 1,258 High
46 Ireland (IE) Network Attack 1,229 High
47 North Korea (KP) Network Attack 1,024 High
48 Republic of Lithuania (LT) malicious 872 High
49 Portugal (PT) malicious 836 High
50 Morocco (MA) Network Attack 802 High
51 Venezuela (VE) Network Attack 768 High
52 Egypt (EG) Network Attack 760 High
53 Czechia (CZ) Network Attack 700 High
54 Qatar (QA) Network Attack 693 High
55 Norway (NO) Network Attack 648 High
56 Ecuador (EC) Network Attack 629 Medium
57 Cyprus (CY) Network Attack 604 Medium
58 Austria (AT) malicious 544 Medium
59 Kazakhstan (KZ) Network Attack 520 Medium
60 Kenya (KE) Network Attack 518 Medium
61 Iraq (IQ) Network Attack 482 Medium
62 Republic of Moldova (MD) malicious 470 Medium
63 Tunisia (TN) Network Attack 447 Medium
64 Nigeria (NG) Network Attack 422 Medium
65 Estonia (EE) Network Attack 405 Medium
66 Serbia (RS) Network Attack 395 Medium
67 Hungary (HU) Network Attack 368 Medium
68 Peru (PE) Network Attack 345 Medium
69 Algeria (DZ) Network Attack 339 Medium
70 Mauritius (MU) Network Attack 338 Medium
71 Latvia (LV) malicious 315 Medium
72 Azerbaijan (AZ) Network Attack 311 Medium
73 Uruguay (UY) Network Attack 309 Medium
74 Myanmar (MM) Network Attack 303 Medium
75 Georgia (GE) Network Attack 286 Medium
76 Nepal (NP) Network Attack 282 Medium
77 Turkmenistan (TM) malicious 282 Medium
78 Armenia (AM) Network Attack 281 Medium
79 Bolivia (BO) Network Attack 263 Medium
80 Greece (GR) Network Attack 263 Medium
81 Denmark (DK) Network Attack 259 Medium
82 Dominican Republic (DO) Network Attack 240 Medium
83 New Zealand (NZ) Network Attack 230 Medium
84 Sri Lanka (LK) Network Attack 229 Medium
85 Cambodia (KH) malicious 222 Medium
86 Belarus (BY) Network Attack 213 Medium
87 Panama (PA) malicious 213 Medium
88 British Virgin Islands (VG) malicious 213 Medium
89 Paraguay (PY) Network Attack 205 Medium
90 Slovenia (SI) malicious 202 Medium
91 Albania (AL) Network Attack 182 Medium
92 Palestine (PS) Network Attack 179 Medium
93 Costa Rica (CR) Network Attack 164 Medium
94 Croatia (HR) Network Attack 155 Medium
95 Oman (OM) Network Attack 154 Medium
96 Luxembourg (LU) malicious 153 Medium
97 Bosnia and Herzegovina (BA) Network Attack 152 Medium
98 Kuwait (KW) Network Attack 148 Medium
99 Jordan (JO) Network Attack 146 Medium
100 Ethiopia (ET) malicious 141 Medium
101 Bahrain (BH) Network Attack 134 Medium
102 Ghana (GH) malicious 133 Medium
103 Slovakia (SK) Network Attack 131 Medium
104 Iceland (IS) malicious 129 Medium
105 Mongolia (MN) malicious 129 Medium
106 Senegal (SN) Network Attack 124 Medium
107 Puerto Rico (PR) Network Attack 121 Medium
108 Belize (BZ) Network Attack 115 Medium
109 Ivory Coast (CI) Network Attack 113 Medium
110 Tanzania (TZ) Network Attack 107 Low
111 Guatemala (GT) Network Attack 99 Low
112 Lebanon (LB) Network Attack 97 Low
113 Honduras (HN) Network Attack 90 Low
114 Uganda (UG) malicious 80 Low
115 Kyrgyzstan (KG) Network Attack 78 Low
116 Macao (MO) Network Attack 75 Low
117 Burkina Faso (BF) Network Attack 74 Low
118 Cameroon (CM) malicious 73 Low
119 Mozambique (MZ) Network Attack 70 Low
120 North Macedonia (MK) Network Attack 69 Low
121 Botswana (BW) malicious 67 Low
122 Togo (TG) Network Attack 67 Low
123 Syria (SY) Network Attack 64 Low
124 Laos (LA) Network Attack 60 Low
125 Angola (AO) Network Attack 59 Low
126 Trinidad and Tobago (TT) Network Attack 59 Low
127 Libya (LY) Network Attack 58 Low
128 Liberia (LR) Network Attack 54 Low
129 Kosovo (XK) Network Attack 53 Low
130 Jamaica (JM) Network Attack 52 Low
131 Malta (MT) Network Attack 51 Low
132 El Salvador (SV) Network Attack 51 Low
133 Zimbabwe (ZW) Network Attack 45 Low
134 Congo Republic (CG) Network Attack 44 Low
135 Tajikistan (TJ) malicious 43 Low
136 Réunion (RE) Network Attack 37 Low
137 Mali (ML) Network Attack 36 Low
138 Nicaragua (NI) Network Attack 35 Low
139 Zambia (ZM) malicious 34 Low
140 Benin (BJ) malicious 33 Low
141 Maldives (MV) Network Attack 33 Low
142 Montenegro (ME) malicious 32 Low
143 Yemen (YE) Network Attack 31 Low
144 Afghanistan (AF) malicious 29 Low
145 Rwanda (RW) Network Attack 29 Low
146 Cabo Verde (CV) Network Attack 24 Low
147 Gabon (GA) Network Attack 24 Low
148 Barbados (BB) Network Attack 22 Low
149 Monaco (MC) malicious 22 Low
150 Guadeloupe (GP) Network Attack 21 Low
151 Martinique (MQ) Network Attack 21 Low
152 Namibia (NA) Network Attack 21 Low
153 Madagascar (MG) Network Attack 20 Low
154 Malawi (MW) malicious 20 Low
155 Timor-Leste (TL) Network Attack 20 Low
156 Curaçao (CW) Network Attack 19 Low
157 New Caledonia (NC) Network Attack 18 Low
158 Bhutan (BT) Network Attack 17 Low
159 Congo (DRC) (CD) malicious 17 Low
160 French Guiana (GF) Network Attack 17 Low
161 Guam (GU) Network Attack 17 Low
162 Gambia (GM) Network Attack 16 Low
163 Liechtenstein (LI) tor_exit 15 Low
164 Brunei (BN) Network Attack 14 Low
165 Andorra (AD) malicious 13 Low
166 Guyana (GY) Network Attack 13 Low
167 Mauritania (MR) malicious 13 Low
168 French Polynesia (PF) Network Attack 13 Low
169 Bahamas (BS) Network Attack 12 Low
170 Fiji (FJ) Network Attack 12 Low
171 Sint Maarten (SX) Network Attack 11 Low
172 Cuba (CU) Network Attack 10 Low
173 Lesotho (LS) Network Attack 10 Low
174 Somalia (SO) malicious 10 Low
175 Djibouti (DJ) Network Attack 9 Low
176 Eritrea (ER) malicious 9 Low
177 Isle of Man (IM) malicious 9 Low
178 Sudan (SD) malicious 9 Low
179 Haiti (HT) Network Attack 8 Low
180 Eswatini (SZ) Network Attack 7 Low
181 Burundi (BI) malicious 6 Low
182 Cayman Islands (KY) Network Attack 6 Low
183 Suriname (SR) Network Attack 6 Low
184 Aruba (AW) Network Attack 5 Low
185 Niger (NE) Network Attack 5 Low
186 Papua New Guinea (PG) Network Attack 5 Low
187 U.S. Virgin Islands (VI) Network Attack 5 Low
188 Vanuatu (VU) Network Attack 5 Low
189 Dominica (DM) malicious 4 Low
190 Grenada (GD) Network Attack 4 Low
191 Jersey (JE) Network Attack 4 Low
192 Antigua and Barbuda (AG) Network Attack 3 Low
193 Anguilla (AI) Network Attack 3 Low
194 Faroe Islands (FO) malicious 3 Low
195 Guernsey (GG) Network Attack 3 Low
196 Saint Lucia (LC) Network Attack 3 Low
197 Chad (TD) malicious 3 Low
198 Bermuda (BM) Network Attack 2 Low
199 Bonaire, Sint Eustatius and Saba (BQ) Network Attack 2 Low
200 Kiribati (KI) Network Attack 2 Low
201 Comoros (KM) malicious 2 Low
202 Saint Martin (MF) Network Attack 2 Low
203 Saint Pierre and Miquelon (PM) Network Attack 2 Low
204 Sierra Leone (SL) Network Attack 2 Low
205 San Marino (SM) Network Attack 2 Low
206 South Sudan (SS) Network Attack 2 Low
207 Mayotte (YT) HTTP Probe 2 Low
208 Åland Islands (AX) malicious 1 Low
209 Greenland (GL) Network Attack 1 Low
210 Guinea (GN) Network Attack 1 Low
211 Equatorial Guinea (GQ) Network Attack 1 Low
212 Saint Kitts and Nevis (KN) malicious 1 Low
213 Marshall Islands (MH) Network Attack 1 Low
214 Solomon Islands (SB) Network Attack 1 Low
215 Turks and Caicos Islands (TC) Network Attack 1 Low
216 Saint Vincent and the Grenadines (VC) Network Attack 1 Low
217 Samoa (WS) Network Attack 1 Low