Botnet Hosts by Country

Infected hosts taking part in a botnet. On 2026-10-10, 2,221 botnet hosts were flagged in 126 countries, 12% of all flagged IPv4 networks on the map. India has the most in absolute terms (412). Relative to allocated IPv4 space, Pakistan ranks highest with 25.3 per million addresses. The network hosting the most is GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982) with 137. Snapshot of 2026-10-10 (UTC), updated daily.

Flagged networks (Botnet hosts)

2,221

Countries

126

Share of all flagged networks

12%

Snapshot (UTC)

2026-10-10

Which countries have the most botnet hosts?

Top 10 on 2026-10-10.

By flagged networks

1.India412
2.United States285
3.Pakistan144
4.Brazil85
5.Germany85
6.Ireland84
7.Philippines62
8.Netherlands59
9.China58
10.France56

Per million allocated IPv4 addresses

1.Pakistan25.3
2.Bangladesh15.8
3.Philippines9.89
4.India9.80
5.Ireland8.14
6.Belgium2.67
7.Indonesia2.17
8.Singapore1.83
9.Vietnam1.70
10.Egypt1.45

Show

Flagged networks per million IPv4 addresses allocated to the country by its RIR. Absolute counts mostly show where the large hosting and data center networks are; the rate shows how much of a country's address space is involved. Countries with less than 262,144 allocated addresses or fewer than 20 flagged networks get no rate.

No dataLowHighFlagged networks per million allocated IPv4, Botnet

Countries (Botnet)

126 countries with flagged networks. Select a column to sort.

#
1	Pakistan	144	25.3	5,681,664
2	Bangladesh	33	15.8	2,088,256
3	Philippines	62	9.89	6,268,480
4	India	412	9.80	42,040,064
5	Ireland	84	8.14	10,318,912
6	Belgium	33	2.67	12,351,104
7	Indonesia	42	2.17	19,397,888
8	Singapore	51	1.83	27,934,784
9	Vietnam	28	1.70	16,502,272
10	Egypt	35	1.45	24,152,832
11	Netherlands	59	1.17	50,365,216
12	Russia	50	1.10	45,344,832
13	Brazil	85	1.04	81,825,280
14	Canada	49	0.72	68,506,368
15	France	56	0.68	82,274,128
16	Germany	85	0.67	126,529,152
17	United Kingdom	38	0.27	141,818,368
18	United States	285	0.18	1,616,463,264
19	China	58	0.17	342,984,448
20	South Korea	9	-	112,514,816
21	Hong Kong SAR China	18	-	16,120,640
22	Japan	9	-	189,009,472
23	Argentina	8	-	19,440,384
24	Taiwan	2	-	36,705,792
25	Sweden	10	-	31,598,112
26	Poland	12	-	20,053,960
27	Ukraine	8	-	9,190,144
28	Italy	13	-	54,244,992
29	Australia	9	-	48,445,504
30	Malaysia	9	-	6,700,800
31	Türkiye	14	-	16,832,192
32	South Africa	18	-	27,184,896
33	Thailand	9	-	8,933,120
34	Mexico	8	-	29,033,984
35	Spain	16	-	32,240,256
36	United Arab Emirates	16	-	7,351,296
37	Colombia	2	-	17,518,080
38	Iran	5	-	10,866,176
39	Finland	15	-	13,988,928
40	Iraq	3	-	457,792
41	Kenya	8	-	6,257,920
42	Chile	6	-	10,565,376
43	Israel	3	-	8,062,080
44	Bulgaria	6	-	4,345,152
45	Romania	7	-	7,852,416
46	Saudi Arabia	12	-	11,251,008
47	Switzerland	11	-	23,296,112
48	Ghana	13	-	2,203,904
49	Nigeria	14	-	3,219,200
50	Nepal	11	-	585,728
51	Uganda	4	-	1,427,200
52	Uzbekistan	1	-	336,128
53	Serbia	11	-	2,316,032
54	Hungary	10	-	5,922,560
55	Venezuela	2	-	6,703,616
56	Czechia	3	-	9,598,912
57	Lithuania	3	-	4,133,376
58	Ecuador	2	-	2,727,168
59	Kazakhstan	3	-	3,382,016
60	Peru	4	-	3,250,432
61	Morocco	4	-	12,274,176
62	Algeria	6	-	4,768,256
63	Albania	4	-	505,920
64	Moldova	2	-	1,261,568
65	Tunisia	5	-	7,877,632
66	Portugal	3	-	6,694,944
67	Paraguay	4	-	1,153,536
68	Sri Lanka	6	-	563,456
69	Tanzania	3	-	1,102,080
70	Ethiopia	3	-	370,176
71	Norway	6	-	15,630,352
72	Oman	11	-	951,872
73	Azerbaijan	6	-	799,744
74	Georgia	3	-	1,310,784
75	Qatar	2	-	856,192
76	Jordan	8	-	648,192
77	Austria	3	-	11,197,792
78	Bolivia	1	-	1,170,176
79	Myanmar (Burma)	4	-	246,784
80	Greece	5	-	5,725,056
81	Latvia	3	-	1,851,136
82	Armenia	1	-	677,920
83	Afghanistan	2	-	178,176
84	Angola	3	-	1,292,032
85	Estonia	2	-	1,349,160
86	Cambodia	1	-	506,368
87	Luxembourg	3	-	1,850,368
88	Kuwait	1	-	1,907,456
89	Panama	5	-	2,188,800
90	Zimbabwe	4	-	105,472
91	Bosnia & Herzegovina	3	-	794,880
92	Cyprus	2	-	1,363,776
93	Iceland	4	-	920,576
94	Mozambique	2	-	449,536
95	Zambia	2	-	1,651,968
96	Lebanon	2	-	569,472
97	Mauritius	3	-	3,698,944
98	Senegal	1	-	407,296
99	Cameroon	5	-	602,112
100	Croatia	4	-	2,356,224
101	Libya	4	-	463,104
102	North Macedonia	3	-	685,056
103	New Zealand	1	-	6,530,816
104	Bahrain	2	-	423,168
105	Belarus	1	-	1,793,536
106	Palestinian Territories	1	-	874,752
107	Syria	4	-	1,279,744
108	Burkina Faso	1	-	339,200
109	Laos	1	-	98,880
110	Mongolia	2	-	181,504
111	Malawi	2	-	556,544
112	Côte d’Ivoire	1	-	1,719,552
113	Slovakia	1	-	2,686,976
114	Madagascar	3	-	579,840
115	Andorra	2	-	62,720
116	Montenegro	2	-	196,096
117	Bahamas	1	-	138,240
118	Namibia	1	-	485,120
119	Puerto Rico	1	-	875,264
120	Isle of Man	1	-	135,680
121	Sierra Leone	1	-	85,760
122	Suriname	2	-	82,688
123	Yemen	2	-	233,472
124	Equatorial Guinea	1	-	17,920
125	United Kingdom	1	-	-
126	Samoa	1	-	19,968

Networks hosting the most botnet hosts

Autonomous systems announcing the most IPv4 networks flagged as botnet hosts. Large hosting providers appear here because attackers rent their servers, not necessarily because of the operator.

#	Network	Country	Flagged networks
1	AS396982GOOGLE-CLOUD-PLATFORM - Google LLC	US	137
2	AS16509AMAZON-02 - Amazon.com, Inc.	US	110
3	AS16276OVH OVH SAS	FR	85
4	AS55836RELIANCEJIO-IN - Reliance Jio Infocomm Limited	IN	84
5	AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC	US	78
6	AS24560AIRTELBROADBAND-AS-AP - Bharti Airtel Ltd., Telemedia Services	IN	59
7	AS9829BSNL-NIB - National Internet Backbone	IN	46
8	AS212238CDNEXT Datacamp Limited	GB	43
9	AS17557PKTELECOM-AS-PK - Pakistan Telecommunication Company Limited	PK	42
10	AS9541CYBERNET-AP - Cyber Internet Services (Pvt) Ltd.	PK	36

Other threat categories

Frequently Asked Questions

Which country has the most botnet hosts?: In the snapshot of 2026-10-10, India has the most botnet hosts in absolute terms (412 flagged networks), followed by the United States (285). Per million allocated IPv4 addresses, Pakistan ranks first (25.3). Absolute counts mostly follow where large hosting networks are; the rate shows how much of a country's address space is involved.
What is a botnet host?: Infected hosts taking part in a botnet.
How are botnet hosts counted on this map?: Flagged addresses are counted as /24 networks: all listed addresses within one /24 count once, and larger ranges count as a single /24. A network listed in several categories is counted once, in the most specific category (C2 before phishing, botnet, brute force, spam, scanner and other malicious activity), so the categories add up to the country total. Address space that is not announced in BGP is left out.
How often is the data updated?: Once a day. Every snapshot uses the listings that are active on that day, aggregated from multiple external and internal threat intelligence sources; listings that are no longer reported drop out of the next snapshot.

Check a single IP via the API

The same threat intelligence is available for every address: threat categories, reputation score, ASN and geolocation in one JSON response.

Read the API docs Check one IP for free

Back to the world threat map