Mastodon Intelligence — Charts, Trends & League Tables — ipinsights.io

Intelligence

The fuller analytical surface — every chart and league table behind the home page, in one place.

Back to home
When attackers are most active right now
Where attacks are coming from right now
What attackers are trying to do this week
AI Agent traffic — 24-hour share & 90-day trend methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Brute-force activity — this week vs. last week
77,369 unique attackers
in the last 7 days (vs. 60,982 the week before)
+26.9%
week-over-week change
ASN & ISP league table — top 50 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 24,181 31 medium
2 AS200373 DREI-K-TECH-GMBH, DE 23,767 95 critical
3 AS4134 No.31,Jin-rong Street 21,593 20 low
4 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,567 45 medium
5 AS16509 Amazon.com, Inc. 10,784 33 medium
6 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 8,330 53 high
7 AS13335 CLOUDFLARENET, US 7,792 66 high
8 AS26548 PUREVOLTAGE-INC, US 7,288 87 critical
9 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 7,214 38 medium
10 AS47329 WDM-AS, PL 6,883 100 critical
11 AS43420 ELTRONIK-AS, PL 5,668 100 critical
12 AS41931 EURONET-AS, PL 5,356 100 critical
13 AS50467 BESKID-MEDIA-AS, PL 5,253 100 critical
14 AS50188 KOLNET Sp. z o.o. 5,205 100 critical
15 AS198401 GECKONET-AS, PL 5,194 100 critical
16 AS14618 Amazon.com, Inc. 4,983 44 medium
17 AS33923 ART-COM, PL 4,929 100 critical
18 AS135905 VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN 4,828 96 critical
19 AS6823 TR-3C1B-TELEKOM, TR 4,225 100 critical
20 AS42910 PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR 3,727 100 critical
21 AS197697 DERKOM Sp. J. 3,607 100 critical
22 AS62425 Mailbox Internet Hizmetleri Ltd. Sti. 3,575 100 critical
23 AS14061 DigitalOcean, LLC 3,440 7 low
24 AS46475 LIMESTONENETWORKS, US 3,436 92 critical
25 AS59651 ASBLG, IL 3,421 95 critical
26 AS43444 Fast Servers (Pty) Ltd 3,200 87 critical
27 AS149089 CLOUDFLY-VN CLOUDFLY CORPORATION, VN 3,072 100 critical
28 AS202281 C3 NET Sp. z o.o. Sp. k. 2,970 100 critical
29 AS14789 CLOUDFLARENET-A, US 2,964 78 critical
30 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 2,896 35 medium
31 AS6205 HIZLINET-TEKNOLOJI, TR 2,867 100 critical
32 AS213954 UNASSIGNED 2,785 93 critical
33 AS42216 Netviser Bilisim Teknolojileri San. Ve Tic. Ltd. Sti. 2,731 100 critical
34 AS35830 Fast Servers (Pty) Ltd 2,725 96 critical
35 AS4766 Korea Telecom 2,619 39 medium
36 AS57789 HomeNet Technologies Sp. z o.o. 2,581 100 critical
37 AS9829 National Internet Backbone 2,577 34 medium
38 AS394474 WHITELABELCOLO393, US 2,563 97 critical
39 AS60191 NOWATEL-AS, PL 2,457 100 critical
40 AS7922 COMCAST-7922, US 2,397 47 medium
41 AS45090 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Lim 2,393 43 medium
42 AS48678 TR-PENTECH-AS, TR 2,344 100 critical
43 AS50705 Przedsiebiorstwo Telekomunikacyjne telgam Spolka Akcyjna 2,309 100 critical
44 AS200750 Klikom.net Sp.z o.o. 2,304 100 critical
45 AS41297 ABAKS 2,303 100 critical
46 AS8151 UNINET, MX 2,254 36 medium
47 AS28573 CLARO S.A. 2,250 54 high
48 AS9541 CYBERNET-AP Cyber Internet Services Pvt Ltd., PK 2,240 42 medium
49 AS57026 JSC ER-Telecom Holding 2,055 99 critical
50 AS56153 LUUTRUSO-AS-VN Digital Storage Company Limited, VN 2,048 100 critical
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) Network Attack 100,527 Critical
2 Poland (PL) Network Attack 81,027 Critical
3 China (CN) Network Attack 67,018 Critical
4 Türkiye (TR) Network Attack 40,974 Critical
5 Brazil (BR) Network Attack 33,247 Critical
6 Vietnam (VN) Network Attack 19,777 Critical
7 Russia (RU) Network Attack 17,998 Critical
8 Germany (DE) Network Attack 16,510 Critical
9 United Kingdom (GB) malicious 11,376 Critical
10 India (IN) Network Attack 10,989 Critical
11 France (FR) Network Attack 9,666 Critical
12 The Netherlands (NL) Network Attack 8,930 Critical
13 Belgium (BE) Network Attack 7,704 Critical
14 Ukraine (UA) Network Attack 7,540 Critical
15 Hong Kong (HK) malicious 7,215 Critical
16 Singapore (SG) malicious 6,562 Critical
17 Japan (JP) malicious 5,806 Critical
18 Argentina (AR) Network Attack 5,580 Critical
19 Indonesia (ID) Network Attack 5,546 Critical
20 Pakistan (PK) Network Attack 5,420 Critical
21 Bangladesh (BD) Network Attack 5,414 Critical
22 South Korea (KR) malicious 5,146 Critical
23 Canada (CA) Network Attack 5,121 Critical
24 Mexico (MX) Network Attack 4,689 High
25 Seychelles (SC) Network Attack 3,973 High
26 Spain (ES) Network Attack 3,531 High
27 Taiwan (TW) Network Attack 3,467 High
28 Italy (IT) Network Attack 3,346 High
29 Thailand (TH) Network Attack 3,172 High
30 Sweden (SE) malicious 2,521 High
31 Israel (IL) Network Attack 2,282 High
32 Colombia (CO) Network Attack 2,188 High
33 Iran (IR) Network Attack 2,186 High
34 South Africa (ZA) Network Attack 1,992 High
35 Malaysia (MY) malicious 1,923 High
36 Australia (AU) Network Attack 1,854 High
37 Ireland (IE) Network Attack 1,813 High
38 Switzerland (CH) Network Attack 1,717 High
39 Bulgaria (BG) malicious 1,609 High
40 Uzbekistan (UZ) malicious 1,608 High
41 Chile (CL) Network Attack 1,523 High
42 Philippines (PH) Network Attack 1,478 High
43 United Arab Emirates (AE) Network Attack 1,465 High
44 Saudi Arabia (SA) Network Attack 1,185 High
45 Romania (RO) malicious 1,128 High
46 Finland (FI) malicious 1,071 High
47 Morocco (MA) Network Attack 972 High
48 Ecuador (EC) Network Attack 936 High
49 Portugal (PT) malicious 935 High
50 Egypt (EG) Network Attack 918 High
51 Venezuela (VE) Network Attack 894 High
52 Republic of Lithuania (LT) malicious 718 High
53 Kenya (KE) Network Attack 714 High
54 Croatia (HR) Network Attack 652 High
55 Kazakhstan (KZ) Network Attack 621 High
56 Czechia (CZ) Network Attack 610 Medium
57 Uruguay (UY) Network Attack 577 Medium
58 Republic of Moldova (MD) malicious 564 Medium
59 Iraq (IQ) malicious 563 Medium
60 Austria (AT) malicious 550 Medium
61 Norway (NO) Network Attack 520 Medium
62 Peru (PE) Network Attack 505 Medium
63 Nigeria (NG) Network Attack 478 Medium
64 Algeria (DZ) Network Attack 453 Medium
65 Denmark (DK) Network Attack 428 Medium
66 Tunisia (TN) Network Attack 424 Medium
67 Cyprus (CY) Network Attack 400 Medium
68 Greece (GR) Network Attack 400 Medium
69 Hungary (HU) malicious 389 Medium
70 Azerbaijan (AZ) Network Attack 382 Medium
71 Slovenia (SI) Network Attack 376 Medium
72 Latvia (LV) malicious 369 Medium
73 Estonia (EE) Network Attack 362 Medium
74 Georgia (GE) Network Attack 352 Medium
75 Nepal (NP) Network Attack 342 Medium
76 Mauritius (MU) Network Attack 337 Medium
77 Bolivia (BO) Network Attack 336 Medium
78 Armenia (AM) Network Attack 334 Medium
79 Dominican Republic (DO) Network Attack 323 Medium
80 Myanmar (MM) Network Attack 308 Medium
81 Turkmenistan (TM) malicious 285 Medium
82 Cambodia (KH) Network Attack 273 Medium
83 New Zealand (NZ) Network Attack 256 Medium
84 Qatar (QA) Network Attack 252 Medium
85 Serbia (RS) Network Attack 251 Medium
86 Paraguay (PY) Network Attack 236 Medium
87 Senegal (SN) Network Attack 235 Medium
88 Albania (AL) Network Attack 232 Medium
89 Panama (PA) malicious 230 Medium
90 Belarus (BY) Network Attack 227 Medium
91 Sri Lanka (LK) Network Attack 222 Medium
92 Tanzania (TZ) Network Attack 207 Medium
93 Jordan (JO) Network Attack 204 Medium
94 Palestine (PS) Network Attack 201 Medium
95 Costa Rica (CR) Network Attack 195 Medium
96 British Virgin Islands (VG) malicious 186 Medium
97 Ethiopia (ET) Network Attack 180 Medium
98 Oman (OM) Network Attack 174 Medium
99 Slovakia (SK) malicious 159 Medium
100 Bahrain (BH) Network Attack 150 Medium
101 Kuwait (KW) Network Attack 150 Medium
102 Ivory Coast (CI) Network Attack 142 Medium
103 Ghana (GH) malicious 137 Medium
104 North Macedonia (MK) malicious 137 Medium
105 Iceland (IS) malicious 133 Medium
106 Mongolia (MN) Network Attack 126 Medium
107 Luxembourg (LU) malicious 121 Medium
108 Bosnia and Herzegovina (BA) malicious 113 Medium
109 Puerto Rico (PR) Network Attack 111 Medium
110 Honduras (HN) Network Attack 108 Low
111 Burkina Faso (BF) Network Attack 107 Low
112 Guatemala (GT) Network Attack 107 Low
113 Lebanon (LB) Network Attack 101 Low
114 Uganda (UG) malicious 91 Low
115 Trinidad and Tobago (TT) Network Attack 87 Low
116 Kyrgyzstan (KG) Network Attack 83 Low
117 Angola (AO) Network Attack 80 Low
118 Syria (SY) Network Attack 77 Low
119 Togo (TG) Network Attack 77 Low
120 Mozambique (MZ) Network Attack 76 Low
121 Botswana (BW) malicious 75 Low
122 Cameroon (CM) malicious 73 Low
123 Jamaica (JM) Network Attack 71 Low
124 Macao (MO) Network Attack 71 Low
125 Malta (MT) Network Attack 67 Low
126 Kosovo (XK) Network Attack 65 Low
127 Laos (LA) Network Attack 61 Low
128 Congo Republic (CG) Network Attack 60 Low
129 Libya (LY) Network Attack 57 Low
130 El Salvador (SV) Network Attack 57 Low
131 Belize (BZ) Network Attack 55 Low
132 Zimbabwe (ZW) Network Attack 54 Low
133 Zambia (ZM) Network Attack 52 Low
134 Mali (ML) Network Attack 51 Low
135 Liberia (LR) Network Attack 47 Low
136 Maldives (MV) Network Attack 44 Low
137 Réunion (RE) Network Attack 44 Low
138 Rwanda (RW) Network Attack 42 Low
139 Gabon (GA) Network Attack 41 Low
140 Tajikistan (TJ) Network Attack 39 Low
141 Namibia (NA) Network Attack 37 Low
142 Barbados (BB) Network Attack 36 Low
143 Benin (BJ) malicious 35 Low
144 Guadeloupe (GP) Network Attack 30 Low
145 Afghanistan (AF) malicious 29 Low
146 Nicaragua (NI) malicious 29 Low
147 Yemen (YE) Network Attack 29 Low
148 Monaco (MC) malicious 27 Low
149 Montenegro (ME) malicious 26 Low
150 Madagascar (MG) Network Attack 26 Low
151 Guam (GU) Network Attack 24 Low
152 Martinique (MQ) Network Attack 24 Low
153 Fiji (FJ) Network Attack 23 Low
154 Congo (DRC) (CD) Network Attack 22 Low
155 Cabo Verde (CV) Network Attack 20 Low
156 New Caledonia (NC) Network Attack 20 Low
157 Malawi (MW) malicious 19 Low
158 Timor-Leste (TL) Network Attack 19 Low
159 French Guiana (GF) Network Attack 18 Low
160 Andorra (AD) Network Attack 17 Low
161 Bahamas (BS) Network Attack 17 Low
162 Bhutan (BT) Network Attack 17 Low
163 Curaçao (CW) Network Attack 17 Low
164 Liechtenstein (LI) tor_exit 17 Low
165 Djibouti (DJ) Network Attack 16 Low
166 Gambia (GM) Network Attack 16 Low
167 Haiti (HT) Network Attack 16 Low
168 Guyana (GY) Network Attack 15 Low
169 Sint Maarten (SX) Network Attack 14 Low
170 Cayman Islands (KY) Network Attack 13 Low
171 French Polynesia (PF) Network Attack 13 Low
172 Suriname (SR) Network Attack 13 Low
173 Somalia (SO) Network Attack 12 Low
174 Brunei (BN) malicious 11 Low
175 Lesotho (LS) Network Attack 11 Low
176 Mauritania (MR) malicious 10 Low
177 Eritrea (ER) malicious 9 Low
178 Cuba (CU) malicious 8 Low
179 Sudan (SD) malicious 8 Low
180 Grenada (GD) Network Attack 7 Low
181 Isle of Man (IM) malicious 7 Low
182 Antigua and Barbuda (AG) Network Attack 6 Low
183 Burundi (BI) malicious 6 Low
184 Eswatini (SZ) malicious 6 Low
185 Niger (NE) Network Attack 5 Low
186 U.S. Virgin Islands (VI) malicious 5 Low
187 Vanuatu (VU) Network Attack 5 Low
188 Guernsey (GG) Network Attack 4 Low
189 Jersey (JE) Network Attack 4 Low
190 Papua New Guinea (PG) Network Attack 4 Low
191 American Samoa (AS) Network Attack 3 Low
192 Dominica (DM) malicious 3 Low
193 Faroe Islands (FO) malicious 3 Low
194 Sierra Leone (SL) Network Attack 3 Low
195 Aruba (AW) Network Attack 2 Low
196 Åland Islands (AX) malicious 2 Low
197 Bermuda (BM) Network Attack 2 Low
198 Bonaire, Sint Eustatius and Saba (BQ) malicious 2 Low
199 Guinea (GN) Network Attack 2 Low
200 Equatorial Guinea (GQ) Network Attack 2 Low
201 Kiribati (KI) Network Attack 2 Low
202 Comoros (KM) Network Attack 2 Low
203 Saint Kitts and Nevis (KN) Network Attack 2 Low
204 Saint Lucia (LC) Network Attack 2 Low
205 Saint Pierre and Miquelon (PM) Network Attack 2 Low
206 South Sudan (SS) Network Attack 2 Low
207 Chad (TD) malicious 2 Low
208 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
209 Samoa (WS) malicious 2 Low
210 Mayotte (YT) Network Attack 2 Low
211 Anguilla (AI) Network Attack 1 Low
212 Greenland (GL) Network Attack 1 Low
213 Saint Martin (MF) Network Attack 1 Low
214 Northern Mariana Islands (MP) malicious 1 Low
215 Solomon Islands (SB) Network Attack 1 Low
216 San Marino (SM) Network Attack 1 Low
217 Turks and Caicos Islands (TC) Network Attack 1 Low