Intelligence

The fuller analytical surface — every chart and league table behind the home page, in one place.

Back to home
When attackers are most active right now
Where attacks are coming from right now
What attackers are trying to do this week
AI Agent traffic — 24-hour share & 90-day trend methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Brute-force activity — this week vs. last week
58,652 unique attackers
in the last 7 days (vs. 66,698 the week before)
-12.1%
week-over-week change
ASN & ISP league table — top 50 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 30,818 45 medium
2 AS4134 No.31,Jin-rong Street 26,127 25 medium
3 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,948 57 high
4 AS16509 Amazon.com, Inc. 13,715 49 medium
5 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 9,015 51 high
6 AS13335 CLOUDFLARENET, US 8,374 87 critical
7 AS14618 Amazon.com, Inc. 6,349 63 high
8 AS14061 DigitalOcean, LLC 5,764 18 low
9 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 5,519 48 medium
10 AS6823 TR-3C1B-TELEKOM, TR 4,165 100 critical
11 AS42910 PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR 3,726 100 critical
12 AS62425 Mailbox Internet Hizmetleri Ltd. Sti. 3,575 100 critical
13 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 3,226 41 medium
14 AS14789 CLOUDFLARENET-A, US 2,952 96 critical
15 AS6205 HIZLINET-TEKNOLOJI, TR 2,868 100 critical
16 AS9829 National Internet Backbone 2,788 38 medium
17 AS4766 Korea Telecom 2,784 47 medium
18 AS8151 UNINET, MX 2,739 53 high
19 AS42216 Netviser Bilisim Teknolojileri San. Ve Tic. Ltd. Sti. 2,638 100 critical
20 AS394474 WHITELABELCOLO393, US 2,579 98 critical
21 AS9541 CYBERNET-AP Cyber Internet Services Pvt Ltd., PK 2,408 50 high
22 AS48678 TR-PENTECH-AS, TR 2,331 100 critical
23 AS45090 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Lim 2,330 47 medium
24 AS7922 COMCAST-7922, US 2,310 51 high
25 AS3462 HINET Data Communication Business Group, TW 2,263 49 medium
26 AS62240 Clouvider Limited 2,106 39 medium
27 AS57026 JSC ER-Telecom Holding 2,056 99 critical
28 AS28573 Claro NXT Telecomunicacoes Ltda, BR 1,973 62 high
29 AS7713 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 1,924 48 medium
30 AS9808 Guangdong Mobile Communication Co.Ltd. 1,912 30 medium
31 AS26548 PUREVOLTAGE-INC, US 1,886 71 critical
32 AS135377 UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED, HK 1,872 69 high
33 AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue, CN 1,865 46 medium
34 AS34254 HORNET-AS, PL 1,834 100 critical
35 AS63949 LINODE-AP 1,778 46 medium
36 AS263740 Corporacion Laceibanetsociety, HN 1,685 98 critical
37 AS17622 CNCGROUP-GZ China Unicom Guangzhou network, CN 1,577 59 high
38 AS16276 OVH, FR 1,566 43 medium
39 AS3257 GTT-BACKBONE GTT, US 1,526 77 critical
40 AS12389 ROSTELECOM-AS, RU 1,472 42 medium
41 AS47894 VERITEKNIK, TR 1,439 100 critical
42 AS11878 TZULO, US 1,401 68 high
43 AS24940 HETZNER-AS, DE 1,388 39 medium
44 AS42926 RADORE, TR 1,358 99 critical
45 AS206092 SECFIREWALLAS, GB 1,314 14 low
46 AS399647 RUMBLE, CA 1,280 100 critical
47 AS201814 MEVSPACE, PL 1,279 72 critical
48 AS52008 NesterTelecom LLC 1,272 100 critical
49 AS200373 DREI-K-TECH-GMBH, DE 1,242 38 medium
50 AS45899 VNPT-AS-VN VNPT Corp, VN 1,234 30 medium
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) Network Attack 86,827 Critical
2 China (CN) Network Attack 79,026 Critical
3 Türkiye (TR) Network Attack 34,909 Critical
4 Brazil (BR) Network Attack 26,400 Critical
5 Poland (PL) Network Attack 16,211 Critical
6 India (IN) Network Attack 13,926 Critical
7 Russia (RU) malicious 13,738 Critical
8 Germany (DE) malicious 12,117 Critical
9 United Kingdom (GB) malicious 9,986 Critical
10 Hong Kong (HK) malicious 7,914 Critical
11 The Netherlands (NL) malicious 7,908 Critical
12 Belgium (BE) Network Attack 7,629 Critical
13 Singapore (SG) malicious 7,549 Critical
14 France (FR) malicious 6,794 Critical
15 Indonesia (ID) Network Attack 6,061 Critical
16 South Korea (KR) Network Attack 5,959 Critical
17 Pakistan (PK) Network Attack 5,618 Critical
18 Japan (JP) malicious 5,573 Critical
19 Mexico (MX) Network Attack 5,315 Critical
20 Bangladesh (BD) Network Attack 5,006 Critical
21 Vietnam (VN) Network Attack 4,923 Critical
22 Canada (CA) Network Attack 4,272 Critical
23 Ukraine (UA) Network Attack 3,642 Critical
24 Taiwan (TW) Network Attack 3,568 High
25 Thailand (TH) Network Attack 3,449 High
26 Argentina (AR) Network Attack 3,429 High
27 Italy (IT) Network Attack 2,759 High
28 Sweden (SE) Network Attack 2,561 High
29 Australia (AU) Network Attack 2,446 High
30 Spain (ES) Network Attack 2,431 High
31 Ireland (IE) Network Attack 2,426 High
32 South Africa (ZA) Network Attack 2,259 High
33 Malaysia (MY) malicious 2,151 High
34 Iran (IR) malicious 2,059 High
35 Colombia (CO) Network Attack 2,023 High
36 Seychelles (SC) malicious 1,890 High
37 Switzerland (CH) Network Attack 1,803 High
38 Philippines (PH) Network Attack 1,693 High
39 Venezuela (VE) Network Attack 1,689 High
40 Saudi Arabia (SA) Network Attack 1,619 High
41 Bulgaria (BG) malicious 1,553 High
42 United Arab Emirates (AE) Network Attack 1,533 High
43 Egypt (EG) Network Attack 1,403 High
44 Finland (FI) malicious 1,229 High
45 Romania (RO) malicious 1,227 High
46 Uruguay (UY) Network Attack 1,220 High
47 Israel (IL) Network Attack 1,198 High
48 Morocco (MA) Network Attack 1,186 High
49 Portugal (PT) malicious 985 High
50 Uzbekistan (UZ) Network Attack 968 High
51 Chile (CL) Network Attack 916 High
52 Republic of Lithuania (LT) Network Attack 859 High
53 Iraq (IQ) Network Attack 858 High
54 Nigeria (NG) Network Attack 849 High
55 Ecuador (EC) Network Attack 807 High
56 Kenya (KE) Network Attack 753 Medium
57 Kazakhstan (KZ) Network Attack 716 Medium
58 Czechia (CZ) Network Attack 663 Medium
59 Croatia (HR) Network Attack 651 Medium
60 Republic of Moldova (MD) malicious 612 Medium
61 Algeria (DZ) Network Attack 598 Medium
62 Peru (PE) Network Attack 589 Medium
63 Austria (AT) malicious 583 Medium
64 Denmark (DK) Network Attack 558 Medium
65 Hungary (HU) Network Attack 534 Medium
66 Dominican Republic (DO) Network Attack 484 Medium
67 Norway (NO) Network Attack 483 Medium
68 Tunisia (TN) Network Attack 478 Medium
69 Tanzania (TZ) Network Attack 464 Medium
70 Paraguay (PY) Network Attack 457 Medium
71 Greece (GR) Network Attack 456 Medium
72 Panama (PA) Network Attack 455 Medium
73 Azerbaijan (AZ) Network Attack 391 Medium
74 Senegal (SN) Network Attack 391 Medium
75 Palestine (PS) Network Attack 370 Medium
76 Mauritius (MU) Network Attack 364 Medium
77 Bolivia (BO) Network Attack 354 Medium
78 Slovenia (SI) Network Attack 344 Medium
79 Cambodia (KH) Network Attack 331 Medium
80 Ethiopia (ET) Network Attack 329 Medium
81 Nepal (NP) Network Attack 329 Medium
82 Georgia (GE) Network Attack 327 Medium
83 New Zealand (NZ) Network Attack 321 Medium
84 Armenia (AM) Network Attack 320 Medium
85 Latvia (LV) malicious 305 Medium
86 Costa Rica (CR) Network Attack 291 Medium
87 Syria (SY) Network Attack 288 Medium
88 Serbia (RS) Network Attack 282 Medium
89 Jordan (JO) Network Attack 268 Medium
90 Turkmenistan (TM) malicious 267 Medium
91 Honduras (HN) Network Attack 266 Medium
92 Belarus (BY) Network Attack 248 Medium
93 Sri Lanka (LK) Network Attack 243 Medium
94 Albania (AL) Network Attack 239 Medium
95 Oman (OM) Network Attack 231 Medium
96 Luxembourg (LU) Network Attack 230 Medium
97 North Macedonia (MK) Network Attack 230 Medium
98 Qatar (QA) Network Attack 211 Medium
99 Mongolia (MN) Network Attack 202 Medium
100 Cyprus (CY) Network Attack 189 Medium
101 British Virgin Islands (VG) malicious 182 Medium
102 Estonia (EE) malicious 178 Medium
103 Kuwait (KW) Network Attack 177 Medium
104 Myanmar (MM) Network Attack 170 Medium
105 Lebanon (LB) Network Attack 167 Medium
106 Slovakia (SK) malicious 162 Medium
107 Bahrain (BH) Network Attack 158 Medium
108 Ghana (GH) malicious 157 Medium
109 Angola (AO) Network Attack 156 Medium
110 Guatemala (GT) Network Attack 153 Low
111 Laos (LA) Network Attack 135 Low
112 Burkina Faso (BF) Network Attack 134 Low
113 Iceland (IS) tor_exit 134 Low
114 Jamaica (JM) Network Attack 134 Low
115 Belize (BZ) Network Attack 123 Low
116 Uganda (UG) malicious 119 Low
117 Ivory Coast (CI) Network Attack 118 Low
118 Trinidad and Tobago (TT) Network Attack 113 Low
119 Botswana (BW) Network Attack 112 Low
120 Bosnia and Herzegovina (BA) malicious 111 Low
121 Kyrgyzstan (KG) Network Attack 104 Low
122 Mozambique (MZ) Network Attack 103 Low
123 Nicaragua (NI) Network Attack 102 Low
124 Puerto Rico (PR) Network Attack 97 Low
125 Libya (LY) Network Attack 95 Low
126 Macao (MO) Network Attack 89 Low
127 Zambia (ZM) Network Attack 87 Low
128 Kosovo (XK) Network Attack 84 Low
129 Cameroon (CM) malicious 74 Low
130 Congo Republic (CG) Network Attack 72 Low
131 Malta (MT) Network Attack 72 Low
132 Zimbabwe (ZW) Network Attack 72 Low
133 Gabon (GA) Network Attack 67 Low
134 El Salvador (SV) Network Attack 67 Low
135 Rwanda (RW) Network Attack 57 Low
136 Guyana (GY) Network Attack 54 Low
137 Namibia (NA) Network Attack 52 Low
138 Togo (TG) Network Attack 50 Low
139 Tajikistan (TJ) Network Attack 50 Low
140 Mali (ML) Network Attack 44 Low
141 Benin (BJ) malicious 40 Low
142 Suriname (SR) Network Attack 40 Low
143 Afghanistan (AF) malicious 39 Low
144 Barbados (BB) Network Attack 39 Low
145 Maldives (MV) Network Attack 39 Low
146 Montenegro (ME) malicious 33 Low
147 New Caledonia (NC) Network Attack 33 Low
148 Réunion (RE) Network Attack 33 Low
149 Congo (DRC) (CD) Network Attack 32 Low
150 Madagascar (MG) Network Attack 32 Low
151 Gambia (GM) Network Attack 26 Low
152 Monaco (MC) malicious 26 Low
153 Yemen (YE) malicious 26 Low
154 Guam (GU) Network Attack 25 Low
155 Fiji (FJ) Network Attack 24 Low
156 Andorra (AD) Network Attack 23 Low
157 Martinique (MQ) Network Attack 23 Low
158 Somalia (SO) Network Attack 22 Low
159 Haiti (HT) Network Attack 21 Low
160 Bhutan (BT) Network Attack 19 Low
161 Guadeloupe (GP) malicious 18 Low
162 Liechtenstein (LI) tor_exit 18 Low
163 French Polynesia (PF) Network Attack 18 Low
164 Cabo Verde (CV) Network Attack 16 Low
165 Curaçao (CW) Network Attack 16 Low
166 Djibouti (DJ) Network Attack 16 Low
167 Mauritania (MR) Network Attack 15 Low
168 Malawi (MW) Network Attack 15 Low
169 Brunei (BN) malicious 13 Low
170 Isle of Man (IM) Network Attack 12 Low
171 Lesotho (LS) Network Attack 12 Low
172 Sint Maarten (SX) Network Attack 11 Low
173 Sudan (SD) Network Attack 10 Low
174 Cayman Islands (KY) Network Attack 9 Low
175 Mayotte (YT) Network Attack 9 Low
176 Bahamas (BS) Network Attack 8 Low
177 Grenada (GD) Network Attack 8 Low
178 Papua New Guinea (PG) Network Attack 8 Low
179 Guinea (GN) Network Attack 7 Low
180 Niger (NE) Network Attack 7 Low
181 Eswatini (SZ) malicious 7 Low
182 American Samoa (AS) Network Attack 6 Low
183 Burundi (BI) malicious 6 Low
184 Cuba (CU) Network Attack 6 Low
185 French Guiana (GF) Network Attack 6 Low
186 Liberia (LR) malicious 6 Low
187 Chad (TD) malicious 6 Low
188 Vanuatu (VU) Network Attack 6 Low
189 Guernsey (GG) Network Attack 5 Low
190 Equatorial Guinea (GQ) Network Attack 5 Low
191 Jersey (JE) Network Attack 5 Low
192 Solomon Islands (SB) Network Attack 5 Low
193 Antigua and Barbuda (AG) malicious 4 Low
194 Aruba (AW) Network Attack 4 Low
195 Dominica (DM) Network Attack 4 Low
196 Eritrea (ER) Network Attack 4 Low
197 Comoros (KM) Network Attack 4 Low
198 Bermuda (BM) Network Attack 3 Low
199 Sierra Leone (SL) Network Attack 3 Low
200 South Sudan (SS) Network Attack 3 Low
201 Timor-Leste (TL) Network Attack 3 Low
202 U.S. Virgin Islands (VI) malicious 3 Low
203 Samoa (WS) Network Attack 3 Low
204 Åland Islands (AX) malicious 2 Low
205 Bonaire, Sint Eustatius and Saba (BQ) malware 2 Low
206 Faroe Islands (FO) malicious 2 Low
207 Greenland (GL) Network Attack 2 Low
208 Saint Kitts and Nevis (KN) malicious 2 Low
209 Saint Lucia (LC) Network Attack 2 Low
210 Tonga (TO) Network Attack 2 Low
211 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
212 Anguilla (AI) Network Attack 1 Low
213 Central African Republic (CF) Network Attack 1 Low
214 Gibraltar (GI) Network Attack 1 Low
215 Kiribati (KI) Network Attack 1 Low
216 Northern Mariana Islands (MP) Network Attack 1 Low
217 São Tomé and Príncipe (ST) Network Attack 1 Low