Malicious IPs in Australia
IPv4 networks located in Australia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Australia at a glance
Australia had 133 flagged IPv4 networks in the snapshot of 2026-10-11, rank #27 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 2.75 flagged networks per million addresses, rank #69 of 76, well below the median of 9.38 across all rated countries. The largest category is brute force sources with 50% of the flagged networks, followed by other malicious networks (27%). The three networks (ASNs) with the most flagged IPs hold 36% of them, led by TPG-INTERNET-AP TPG Telecom Limited (AS7545). Another 1 flagged IPv6 network is located in Australia.
Malicious activity in Australia by category
A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.
Brute force sources in Australia
67 (50%)67 flagged networks, #30 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Other malicious networks in Australia
36 (27%)36 flagged networks, #20 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Scanners in Australia
16 (12%)16 flagged networks, #12 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country
Botnet hosts in Australia
8 (6%)8 flagged networks, #40 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Spam sources in Australia
5 (4%)5 flagged networks, #26 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country
C2 servers in Australia
1 (1%)1 flagged network, #34 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Networks with the most flagged IPs in Australia
Autonomous systems announcing the flagged networks located in Australia.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS7545TPG-INTERNET-AP TPG Telecom Limited | 23 |
| 2 | AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation | 14 |
| 3 | AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC | 11 |
| 4 | AS31898ORACLE-BMC-31898 - Oracle Corporation | 9 |
| 5 | AS1221ASN-TELSTRA Telstra Limited | 8 |
| 6 | AS16509AMAZON-02 - Amazon.com, Inc. | 7 |
| 7 | AS55803HOSTOPIA-AU Hostopia Australia Web Pty Ltd | 6 |
| 8 | AS2764AAPT AAPT Limited | 5 |
| 9 | AS4764AUSSIEFIBRE-AS-AP Aussie Fibre Pty Ltd | 4 |
| 10 | AS9443VOCUS-RETAIL-AU Vocus Retail | 4 |
Compare Australia with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Countries ranked next to Australia by rate
| # | Country | Networks | Per million |
|---|---|---|---|
| 67 | Italy | 154 | 2.84 |
| 68 | Egypt | 67 | 2.77 |
| 69 | Australia | 133 | 2.75 |
| 70 | Morocco | 32 | 2.61 |
| 71 | United Kingdom | 320 | 2.26 |
| 72 | Switzerland | 52 | 2.23 |
Other countries in the APNIC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 3 | Bangladesh | 149 | 71.3 |
| 4 | Pakistan | 385 | 67.8 |
| 5 | Nepal | 36 | 61.5 |
| 8 | Sri Lanka | 24 | 42.6 |
| 9 | India | 1,569 | 37.3 |
| 10 | Hong Kong SAR China | 503 | 31.2 |
| 16 | Philippines | 150 | 23.9 |
| 19 | Vietnam | 336 | 20.4 |
Questions about Australia
- How many malicious IP addresses are there in Australia?
- On 2026-10-11, 133 IPv4 networks (/24 blocks) located in Australia were flagged for malicious activity, with 3,963 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
- Which networks in Australia host the most flagged IPs?
- TPG-INTERNET-AP TPG Telecom Limited (AS7545, 23 networks), MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation (AS8075, 14 networks), DIGITALOCEAN-ASN - DigitalOcean, LLC (AS14061, 11 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Australia or anywhere else with one API call.