Malicious IPs in Belgium

IPv4 networks located in Belgium that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
242
#18 of 179 countries
Per million allocated IPv4
19.6
#20 of 76 countries
Flagged IPv4 addresses
270
ranges count at most as a /24
Allocated IPv4 addresses
12,351,104
RIR delegation statistics

Belgium at a glance

Belgium had 242 flagged IPv4 networks in the snapshot of 2026-10-11, rank #18 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 19.6 flagged networks per million addresses, rank #20 of 76, 2.1 times the median of 9.38 across all rated countries. The largest category is brute force sources with 50% of the flagged networks, followed by scanners (21%). The three networks (ASNs) with the most flagged IPs hold 93% of them, led by GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982). Another 2 flagged IPv6 networks are located in Belgium.

Malicious activity in Belgium by category

A network listed in several categories counts once, in the most specific one. Also flagged: 2 IPv6 networks.

  • Brute force sources in Belgium

    120 (50%)

    120 flagged networks, #17 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Scanners in Belgium

    50 (21%)

    50 flagged networks, #3 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • Other malicious networks in Belgium

    32 (13%)

    32 flagged networks, #24 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Belgium

    29 (12%)

    29 flagged networks, #17 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Belgium

    11 (5%)

    11 flagged networks, #12 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Belgium

Autonomous systems announcing the flagged networks located in Belgium.

#NetworkFlagged networks
1AS396982GOOGLE-CLOUD-PLATFORM - Google LLC218
2AS5432PROXIMUS-ISP-AS Proximus NV4
3AS15169GOOGLE - Google LLC4
4AS6848TELENET-AS Telenet BV3
5AS212238CDNEXT Datacamp Limited3
6AS9009M247 M247 Europe SRL3
7AS47377Orange_Belgium_SA Orange Belgium SA3
8AS16276OVH OVH SAS1
9AS3257GTT-BACKBONE GTT Communications Inc.1
10AS49453GLOBALLAYER Global Layer B.V.1

Compare Belgium with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Belgium by rate

#CountryNetworksPer million
18Paraguay2723.4
19Vietnam33620.4
20Belgium24219.6
21Indonesia37519.3
22Georgia2519.1
23Ukraine16718.2

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq66144
2Uzbekistan42125
7Albania2651.4
11Jordan2030.9
12Azerbaijan2430.0
15Qatar2124.5
17Moldova3023.8
22Georgia2519.1

Questions about Belgium

How many malicious IP addresses are there in Belgium?
On 2026-10-11, 242 IPv4 networks (/24 blocks) located in Belgium were flagged for malicious activity, with 270 listed IPv4 addresses and 2 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Belgium host the most flagged IPs?
GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982, 218 networks), PROXIMUS-ISP-AS Proximus NV (AS5432, 4 networks), GOOGLE - Google LLC (AS15169, 4 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Belgium or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Belgium