Brute Force Sources by Country

Sources of password guessing against SSH, mail, FTP and web logins. On 2026-10-10, 10,748 brute force sources were flagged in 159 countries, 56% of all flagged IPv4 networks on the map. China has the most in absolute terms (1,569). Relative to allocated IPv4 space, Iraq ranks highest with 116 per million addresses. The network hosting the most is GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982) with 767. Snapshot of 2026-10-10 (UTC), updated daily.

Flagged networks (Brute force sources)

10,748

Countries

159

Share of all flagged networks

56%

Snapshot (UTC)

2026-10-10

Which countries have the most brute force sources?

Top 10 on 2026-10-10.

By flagged networks

1.China1,569
2.United States1,469
3.India862
4.South Korea827
5.Brazil602
6.Germany423
7.Russia296
8.Vietnam256
9.Singapore241
10.Indonesia234

Per million allocated IPv4 addresses

1.Iraq116
2.Uzbekistan83.3
3.Bangladesh43.1
4.Pakistan23.9
5.India20.5
6.Uganda19.6
7.Vietnam15.5
8.Hong Kong SAR China13.5
9.Ukraine12.6
10.Ghana12.3

Show

Flagged networks per million IPv4 addresses allocated to the country by its RIR. Absolute counts mostly show where the large hosting and data center networks are; the rate shows how much of a country's address space is involved. Countries with less than 262,144 allocated addresses or fewer than 20 flagged networks get no rate.

No dataLowHighFlagged networks per million allocated IPv4, Brute force

Countries (Brute force)

159 countries with flagged networks. Select a column to sort.

#
1	Iraq	53	116	457,792
2	Uzbekistan	28	83.3	336,128
3	Bangladesh	90	43.1	2,088,256
4	Pakistan	136	23.9	5,681,664
5	India	862	20.5	42,040,064
6	Uganda	28	19.6	1,427,200
7	Vietnam	256	15.5	16,502,272
8	Hong Kong SAR China	218	13.5	16,120,640
9	Ukraine	116	12.6	9,190,144
10	Ghana	27	12.3	2,203,904
11	Indonesia	234	12.1	19,397,888
12	Malaysia	80	11.9	6,700,800
13	Belgium	147	11.9	12,351,104
14	Argentina	175	9.00	19,440,384
15	Singapore	241	8.63	27,934,784
16	Ecuador	23	8.43	2,727,168
17	Bulgaria	34	7.82	4,345,152
18	Thailand	68	7.61	8,933,120
19	Kazakhstan	25	7.39	3,382,016
20	Brazil	602	7.36	81,825,280
21	South Korea	827	7.35	112,514,816
22	Philippines	41	6.54	6,268,480
23	Russia	296	6.53	45,344,832
24	Nigeria	21	6.52	3,219,200
25	Peru	21	6.46	3,250,432
26	United Arab Emirates	45	6.12	7,351,296
27	Iran	62	5.71	10,866,176
28	Poland	109	5.44	20,053,960
29	Colombia	84	4.80	17,518,080
30	Israel	38	4.71	8,062,080
31	China	1,569	4.57	342,984,448
32	Chile	46	4.35	10,565,376
33	Venezuela	29	4.33	6,703,616
34	Kenya	27	4.31	6,257,920
35	Netherlands	210	4.17	50,365,216
36	Taiwan	151	4.11	36,705,792
37	Türkiye	61	3.62	16,832,192
38	Germany	423	3.34	126,529,152
39	Sweden	103	3.26	31,598,112
40	South Africa	83	3.05	27,184,896
41	Mexico	82	2.82	29,033,984
42	Czechia	24	2.50	9,598,912
43	Finland	34	2.43	13,988,928
44	Saudi Arabia	24	2.13	11,251,008
45	Ireland	20	1.94	10,318,912
46	Morocco	23	1.87	12,274,176
47	Spain	60	1.86	32,240,256
48	Italy	99	1.83	54,244,992
49	Australia	84	1.73	48,445,504
50	Canada	116	1.69	68,506,368
51	France	123	1.50	82,274,128
52	Egypt	31	1.28	24,152,832
53	United Kingdom	134	0.94	141,818,368
54	United States	1,469	0.91	1,616,463,264
55	Japan	137	0.72	189,009,472
56	Romania	16	-	7,852,416
57	Switzerland	16	-	23,296,112
58	Nepal	19	-	585,728
59	Serbia	14	-	2,316,032
60	Hungary	18	-	5,922,560
61	Lithuania	11	-	4,133,376
62	Algeria	18	-	4,768,256
63	Albania	15	-	505,920
64	Moldova	15	-	1,261,568
65	Tunisia	19	-	7,877,632
66	Portugal	18	-	6,694,944
67	Paraguay	16	-	1,153,536
68	Sri Lanka	11	-	563,456
69	Tanzania	13	-	1,102,080
70	Ethiopia	18	-	370,176
71	Norway	9	-	15,630,352
72	Oman	3	-	951,872
73	Azerbaijan	7	-	799,744
74	Georgia	10	-	1,310,784
75	Qatar	8	-	856,192
76	Jordan	4	-	648,192
77	Austria	11	-	11,197,792
78	Bolivia	15	-	1,170,176
79	Myanmar (Burma)	9	-	246,784
80	Greece	5	-	5,725,056
81	Latvia	4	-	1,851,136
82	Armenia	9	-	677,920
83	Benin	11	-	151,296
84	Afghanistan	10	-	178,176
85	Angola	3	-	1,292,032
86	Estonia	11	-	1,349,160
87	Botswana	12	-	166,144
88	Cambodia	8	-	506,368
89	Luxembourg	9	-	1,850,368
90	Seychelles	3	-	9,288,704
91	Kuwait	6	-	1,907,456
92	Panama	5	-	2,188,800
93	Zimbabwe	5	-	105,472
94	Bosnia & Herzegovina	5	-	794,880
95	Cyprus	2	-	1,363,776
96	Dominican Republic	5	-	1,623,296
97	Iceland	4	-	920,576
98	Mozambique	5	-	449,536
99	Zambia	5	-	1,651,968
100	Denmark	7	-	13,516,832
101	Lebanon	5	-	569,472
102	Mauritius	3	-	3,698,944
103	Slovenia	5	-	2,685,696
104	Senegal	7	-	407,296
105	Cameroon	3	-	602,112
106	Costa Rica	4	-	2,334,976
107	Croatia	1	-	2,356,224
108	Libya	4	-	463,104
109	North Macedonia	6	-	685,056
110	New Zealand	6	-	6,530,816
111	Togo	5	-	354,816
112	Uruguay	7	-	2,516,736
113	Belarus	5	-	1,793,536
114	Palestinian Territories	3	-	874,752
115	Syria	3	-	1,279,744
116	Trinidad & Tobago	7	-	548,864
117	Burkina Faso	2	-	339,200
118	Laos	2	-	98,880
119	Mongolia	1	-	181,504
120	Malawi	1	-	556,544
121	Belize	1	-	134,656
122	Côte d’Ivoire	3	-	1,719,552
123	Gambia	4	-	275,968
124	Slovakia	4	-	2,686,976
125	Cape Verde	3	-	38,144
126	Guatemala	3	-	654,848
127	Honduras	4	-	537,088
128	Andorra	1	-	62,720
129	Guadeloupe	2	-	124,928
130	Jamaica	3	-	225,280
131	Kyrgyzstan	3	-	299,008
132	Montenegro	1	-	196,096
133	Nicaragua	1	-	411,136
134	Somalia	3	-	51,968
135	Bahamas	2	-	138,240
136	Congo - Kinshasa	1	-	183,040
137	Congo - Brazzaville	3	-	141,824
138	Guinea	3	-	39,168
139	Haiti	3	-	154,880
140	Macao SAR China	3	-	339,712
141	Namibia	1	-	485,120
142	Rwanda	1	-	283,392
143	Sudan	2	-	1,891,072
144	El Salvador	1	-	663,808
145	Tajikistan	2	-	85,824
146	Turkmenistan	1	-	22,336
147	Kosovo	1	-	-
148	Antarctica	1	-	1,024
149	Barbados	1	-	168,704
150	Bhutan	1	-	51,456
151	Cuba	1	-	257,024
152	Greenland	1	-	34,304
153	Comoros	1	-	8,448
154	Liechtenstein	1	-	104,704
155	Malta	1	-	676,224
156	Papua New Guinea	1	-	67,584
157	St. Pierre & Miquelon	1	-	4,608
158	Réunion	1	-	409,856
159	Solomon Islands	1	-	14,336

Networks hosting the most brute force sources

Autonomous systems announcing the most IPv4 networks flagged as brute force sources. Large hosting providers appear here because attackers rent their servers, not necessarily because of the operator.

#	Network	Country	Flagged networks
1	AS396982GOOGLE-CLOUD-PLATFORM - Google LLC	US	767
2	AS4766KIXS-AS-KR-KR - Korea Telecom	KR	672
3	AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC	US	313
4	AS4134CHINANET-BACKBONE - No.31,Jin-rong Street	CN	256
5	AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation	US	204
6	AS22773ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.	US	184
7	AS4837CHINA169-Backbone - CHINA UNICOM China169 Backbone	CN	155
8	AS31898ORACLE-BMC-31898 - Oracle Corporation	US	146
9	AS45102ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd.	HK	144
10	AS24560AIRTELBROADBAND-AS-AP - Bharti Airtel Ltd., Telemedia Services	IN	133

Other threat categories

Frequently Asked Questions

Which country has the most brute force sources?: In the snapshot of 2026-10-10, China has the most brute force sources in absolute terms (1,569 flagged networks), followed by the United States (1,469). Per million allocated IPv4 addresses, Iraq ranks first (116). Absolute counts mostly follow where large hosting networks are; the rate shows how much of a country's address space is involved.
What is a brute force source?: Sources of password guessing against SSH, mail, FTP and web logins.
How are brute force sources counted on this map?: Flagged addresses are counted as /24 networks: all listed addresses within one /24 count once, and larger ranges count as a single /24. A network listed in several categories is counted once, in the most specific category (C2 before phishing, botnet, brute force, spam, scanner and other malicious activity), so the categories add up to the country total. Address space that is not announced in BGP is left out.
How often is the data updated?: Once a day. Every snapshot uses the listings that are active on that day, aggregated from multiple external and internal threat intelligence sources; listings that are no longer reported drop out of the next snapshot.

Check a single IP via the API

The same threat intelligence is available for every address: threat categories, reputation score, ASN and geolocation in one JSON response.

Read the API docs Check one IP for free

Back to the world threat map