Malicious IPs in Switzerland

IPv4 networks located in Switzerland that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
52
#46 of 179 countries
Per million allocated IPv4
2.23
#72 of 76 countries
Flagged IPv4 addresses
1,080
ranges count at most as a /24
Allocated IPv4 addresses
23,296,112
RIR delegation statistics

Switzerland at a glance

Switzerland had 52 flagged IPv4 networks in the snapshot of 2026-10-11, rank #46 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 2.23 flagged networks per million addresses, rank #72 of 76, well below the median of 9.38 across all rated countries. The largest category is brute force sources with 33% of the flagged networks, followed by botnet hosts (19%). The three networks (ASNs) with the most flagged IPs hold 42% of them, led by PLI-AS Private Layer INC (AS51852). Another 1 flagged IPv6 network is located in Switzerland.

Malicious activity in Switzerland by category

A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.

  • Brute force sources in Switzerland

    17 (33%)

    17 flagged networks, #59 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Switzerland

    10 (19%)

    10 flagged networks, #31 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Other malicious networks in Switzerland

    10 (19%)

    10 flagged networks, #45 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Scanners in Switzerland

    7 (13%)

    7 flagged networks, #18 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • C2 servers in Switzerland

    4 (8%)

    4 flagged networks, #21 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Spam sources in Switzerland

    4 (8%)

    4 flagged networks, #31 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Switzerland

Autonomous systems announcing the flagged networks located in Switzerland.

#NetworkFlagged networks
1AS51852PLI-AS Private Layer INC11
2AS212238CDNEXT Datacamp Limited6
3AS264617GRUPO PANAGLOBAL 15 S.A5
4AS9009M247 M247 Europe SRL5
5AS6730SUNRISE Sunrise GmbH3
6AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation3
7AS29222Infomaniak-AS Infomaniak Network SA3
8AS402253SKN-NETWORK-1 - SKN Subnet & Telecom Ltd2
9AS211720DATASHIELD_CH Datashield, Inc.1
10AS209373SWISSNET-AS SWISSNET LLC1

Compare Switzerland with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Switzerland by rate

#CountryNetworksPer million
70Morocco322.61
71United Kingdom3202.26
72Switzerland522.23
73Austria211.88
74United States2,6111.62
75Norway231.47

Questions about Switzerland

How many malicious IP addresses are there in Switzerland?
On 2026-10-11, 52 IPv4 networks (/24 blocks) located in Switzerland were flagged for malicious activity, with 1,080 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
Which networks in Switzerland host the most flagged IPs?
PLI-AS Private Layer INC (AS51852, 11 networks), CDNEXT Datacamp Limited (AS212238, 6 networks), GRUPO PANAGLOBAL 15 S.A (AS264617, 5 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Switzerland or anywhere else with one API call.