Malicious IPs in Bhutan

IPv4 networks located in Bhutan that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
1
#158 of 179 countries
Per million allocated IPv4
-
too little address space for a rate
Flagged IPv4 addresses
1
ranges count at most as a /24
Allocated IPv4 addresses
51,456
RIR delegation statistics

Bhutan at a glance

Bhutan had 1 flagged IPv4 network in the snapshot of 2026-10-11, rank #158 of 179 countries by absolute count. Bhutan has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is brute force sources with 100% of the flagged networks. 100% of them are announced by a single network, DRUKNET-AS DrukNet ISP (AS17660).

Malicious activity in Bhutan by category

A network listed in several categories counts once, in the most specific one.

  • Brute force sources in Bhutan

    1 (100%)

    1 flagged network, #134 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

Networks with the most flagged IPs in Bhutan

Autonomous systems announcing the flagged networks located in Bhutan.

#NetworkFlagged networks
1AS17660DRUKNET-AS DrukNet ISP1

Compare Bhutan with other countries

Ranked by flagged IPv4 networks.

Questions about Bhutan

How many malicious IP addresses are there in Bhutan?
On 2026-10-11, 1 IPv4 network (/24 blocks) located in Bhutan were flagged for malicious activity, with 1 listed IPv4 address. Each /24 counts once, however many of its addresses are listed.
Which networks in Bhutan host the most flagged IPs?
DRUKNET-AS DrukNet ISP (AS17660, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Bhutan or anywhere else with one API call.