Botnet Hosts by Country

Infected hosts taking part in a botnet. On 2026-10-11, 2,015 botnet hosts were flagged in 122 countries, 11% of all flagged IPv4 networks on the map. India has the most in absolute terms (351). Relative to allocated IPv4 space, Pakistan ranks highest with 20.8 per million addresses. The network hosting the most is AMAZON-02 - Amazon.com, Inc. (AS16509) with 127. Snapshot of 2026-10-11 (UTC), updated daily.

Flagged networks (Botnet hosts)

2,015

Countries

122

Share of all flagged networks

11%

Snapshot (UTC)

2026-10-11

Which countries have the most botnet hosts?

Top 10 on 2026-10-11.

By flagged networks

1.India351
2.United States240
3.Pakistan118
4.Ireland99
5.Germany93
6.Singapore69
7.China65
8.Brazil64
9.France60
10.Netherlands48

Per million allocated IPv4 addresses

1.Pakistan20.8
2.Bangladesh14.4
3.Ireland9.59
4.India8.35
5.Philippines5.42
6.Singapore2.47
7.Belgium2.35
8.Indonesia2.01
9.Vietnam1.39
10.Egypt1.16

Show

Flagged networks per million IPv4 addresses allocated to the country by its RIR. Absolute counts mostly show where the large hosting and data center networks are; the rate shows how much of a country's address space is involved. Countries with less than 262,144 allocated addresses or fewer than 20 flagged networks get no rate.

No dataLowHighFlagged networks per million allocated IPv4, Botnet

Countries (Botnet)

122 countries with flagged networks. Select a column to sort.

#
1	Pakistan	118	20.8	5,681,664
2	Bangladesh	30	14.4	2,088,256
3	Ireland	99	9.59	10,318,912
4	India	351	8.35	42,040,064
5	Philippines	34	5.42	6,268,480
6	Singapore	69	2.47	27,934,784
7	Belgium	29	2.35	12,351,104
8	Indonesia	39	2.01	19,397,888
9	Vietnam	23	1.39	16,502,272
10	Egypt	28	1.16	24,152,832
11	Russia	44	0.97	45,344,832
12	Netherlands	48	0.95	50,365,216
13	Brazil	64	0.78	81,826,304
14	Germany	93	0.74	126,529,152
15	France	60	0.73	82,274,128
16	Canada	43	0.63	68,507,392
17	United Kingdom	42	0.30	141,818,368
18	China	65	0.19	342,984,448
19	United States	240	0.15	1,616,471,456
20	South Korea	9	-	112,514,816
21	Hong Kong SAR China	16	-	16,120,640
22	Japan	12	-	189,009,472
23	Argentina	11	-	19,440,384
24	Ukraine	8	-	9,190,144
25	Taiwan	1	-	36,705,792
26	Poland	10	-	20,053,960
27	Italy	15	-	54,244,992
28	Sweden	10	-	31,598,112
29	Australia	8	-	48,445,504
30	Türkiye	13	-	16,832,192
31	South Africa	15	-	27,184,896
32	Malaysia	4	-	6,700,800
33	Mexico	8	-	29,033,984
34	Spain	10	-	32,240,256
35	Thailand	15	-	8,933,120
36	Colombia	2	-	17,518,080
37	United Arab Emirates	14	-	7,351,296
38	Iran	5	-	10,866,176
39	Finland	15	-	13,988,928
40	Kenya	8	-	6,258,944
41	Iraq	4	-	457,792
42	Chile	5	-	10,565,376
43	Israel	2	-	8,062,080
44	Bulgaria	7	-	4,345,152
45	Romania	5	-	7,852,416
46	Switzerland	10	-	23,296,112
47	Saudi Arabia	9	-	11,251,008
48	Serbia	10	-	2,316,032
49	Ghana	10	-	2,203,904
50	Nigeria	13	-	3,219,200
51	Algeria	12	-	4,768,256
52	Uganda	5	-	1,427,200
53	Hungary	10	-	5,922,560
54	Nepal	8	-	585,728
55	Lithuania	3	-	4,133,376
56	Venezuela	1	-	6,703,616
57	Czechia	2	-	9,598,912
58	Kazakhstan	3	-	3,382,016
59	Morocco	4	-	12,274,176
60	Moldova	1	-	1,261,568
61	Peru	3	-	3,250,432
62	Portugal	5	-	6,694,944
63	Tanzania	5	-	1,102,080
64	Paraguay	3	-	1,153,536
65	Tunisia	4	-	7,877,632
66	Albania	4	-	505,920
67	Georgia	1	-	1,310,784
68	Azerbaijan	5	-	799,744
69	Sri Lanka	7	-	563,456
70	Norway	4	-	15,630,352
71	Ethiopia	3	-	370,176
72	Austria	5	-	11,197,792
73	Qatar	3	-	856,192
74	Jordan	7	-	648,192
75	Latvia	4	-	1,851,136
76	Oman	7	-	951,872
77	Myanmar (Burma)	2	-	246,784
78	Kuwait	2	-	1,907,456
79	Luxembourg	3	-	1,850,368
80	Afghanistan	2	-	178,176
81	Armenia	1	-	677,920
82	Estonia	3	-	1,349,160
83	Cambodia	1	-	506,368
84	Angola	3	-	1,292,032
85	Panama	7	-	2,188,800
86	Zimbabwe	6	-	105,472
87	Zambia	4	-	1,651,968
88	Slovenia	2	-	2,685,696
89	Syria	5	-	1,279,744
90	Dominican Republic	1	-	1,623,296
91	Greece	3	-	5,725,056
92	Lebanon	1	-	569,472
93	Bosnia & Herzegovina	1	-	794,880
94	Iceland	4	-	920,576
95	Slovakia	1	-	2,686,976
96	Belarus	2	-	1,793,536
97	Croatia	3	-	2,356,224
98	Mozambique	2	-	449,536
99	Bahrain	2	-	423,168
100	North Macedonia	3	-	685,056
101	Cyprus	3	-	1,363,776
102	Senegal	1	-	407,296
103	Cameroon	2	-	602,112
104	Laos	1	-	98,880
105	Madagascar	2	-	579,840
106	Malawi	2	-	556,544
107	Côte d’Ivoire	1	-	1,719,552
108	Andorra	2	-	62,720
109	Guatemala	1	-	654,848
110	Namibia	1	-	485,120
111	El Salvador	1	-	663,808
112	Kosovo	1	-	-
113	Bahamas	1	-	138,240
114	Montenegro	2	-	196,096
115	Niger	1	-	48,128
116	Puerto Rico	1	-	875,264
117	Sierra Leone	1	-	85,760
118	Eswatini	1	-	55,040
119	Liberia	1	-	40,192
120	United Kingdom	1	-	-
121	Samoa	1	-	19,968
122	Yemen	1	-	233,472

Networks hosting the most botnet hosts

Autonomous systems announcing the most IPv4 networks flagged as botnet hosts. Large hosting providers appear here because attackers rent their servers, not necessarily because of the operator.

#	Network	Country	Flagged networks
1	AS16509AMAZON-02 - Amazon.com, Inc.	US	127
2	AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC	US	104
3	AS396982GOOGLE-CLOUD-PLATFORM - Google LLC	US	100
4	AS16276OVH OVH SAS	FR	92
5	AS55836RELIANCEJIO-IN - Reliance Jio Infocomm Limited	IN	65
6	AS24560AIRTELBROADBAND-AS-AP - Bharti Airtel Ltd., Telemedia Services	IN	56
7	AS9829BSNL-NIB - National Internet Backbone	IN	43
8	AS17557PKTELECOM-AS-PK - Pakistan Telecommunication Company Limited	PK	38
9	AS212238CDNEXT Datacamp Limited	GB	36
10	AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation	US	30

Other threat categories

Frequently Asked Questions

Which country has the most botnet hosts?: In the snapshot of 2026-10-11, India has the most botnet hosts in absolute terms (351 flagged networks), followed by the United States (240). Per million allocated IPv4 addresses, Pakistan ranks first (20.8). Absolute counts mostly follow where large hosting networks are; the rate shows how much of a country's address space is involved.
What is a botnet host?: Infected hosts taking part in a botnet.
How are botnet hosts counted on this map?: Flagged addresses are counted as /24 networks: all listed addresses within one /24 count once, and larger ranges count as a single /24. A network listed in several categories is counted once, in the most specific category (C2 before phishing, botnet, brute force, spam, scanner and other malicious activity), so the categories add up to the country total. Address space that is not announced in BGP is left out.
How often is the data updated?: Once a day. Every snapshot uses the listings that are active on that day, aggregated from multiple external and internal threat intelligence sources; listings that are no longer reported drop out of the next snapshot.

Check a single IP via the API

The same threat intelligence is available for every address: threat categories, reputation score, ASN and geolocation in one JSON response.

Read the API docs Check one IP for free

Back to the world threat map