Malicious IPs in Czechia
IPv4 networks located in Czechia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Czechia at a glance
Czechia had 37 flagged IPv4 networks in the snapshot of 2026-10-12, rank #50 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 3.85 flagged networks per million addresses, rank #60 of 75, well below the median of 9.15 across all rated countries. The largest category is brute force sources with 62% of the flagged networks, followed by botnet hosts (14%). The three networks (ASNs) with the most flagged IPs hold 27% of them, led by SAOCOMP-AS Radovan Ochvat trading as SAO Computers (AS197846).
Malicious activity in Czechia by category
A network listed in several categories counts once, in the most specific one.
Brute force sources in Czechia
23 (62%)23 flagged networks, #45 of 157 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Botnet hosts in Czechia
5 (14%)5 flagged networks, #54 of 120 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Other malicious networks in Czechia
4 (11%)4 flagged networks, #82 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
C2 servers in Czechia
3 (8%)3 flagged networks, #25 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Scanners in Czechia
1 (3%)1 flagged network, #26 of 38 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country
Spam sources in Czechia
1 (3%)1 flagged network, #55 of 86 countries for spam sources. Sources of email spam. Spam Sources by Country
Networks with the most flagged IPs in Czechia
Autonomous systems announcing the flagged networks located in Czechia.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS197846SAOCOMP-AS Radovan Ochvat trading as SAO Computers | 4 |
| 2 | AS5610O2-CZECH-REPUBLIC O2 Czech Republic, a.s. | 3 |
| 3 | AS9009M247 M247 Europe SRL | 3 |
| 4 | AS16019VODAFONE-CZ-AS Vodafone Czech Republic a.s. | 3 |
| 5 | AS210712GRAPESC-ISP ISP Alliance a.s. | 2 |
| 6 | AS218688WL661-AS WULDI LLC | 1 |
| 7 | AS16276OVH OVH SAS | 1 |
| 8 | AS206092SECFIREWALLAS F.N.S. HOLDINGS LIMITED | 1 |
| 9 | AS13335CLOUDFLARENET - Cloudflare, Inc. | 1 |
| 10 | AS49767INTERNETPB-AS O2 Czech Republic, a.s. | 1 |
Compare Czechia with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Countries ranked next to Czechia by rate
| # | Country | Networks | Per million |
|---|---|---|---|
| 58 | Venezuela | 27 | 4.03 |
| 59 | Portugal | 26 | 3.88 |
| 60 | Czechia | 37 | 3.85 |
| 61 | Saudi Arabia | 43 | 3.82 |
| 62 | France | 314 | 3.82 |
| 63 | Canada | 255 | 3.72 |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 67 | 146 |
| 2 | Uzbekistan | 41 | 122 |
| 7 | Albania | 26 | 51.4 |
| 11 | Azerbaijan | 25 | 31.3 |
| 12 | Oman | 26 | 27.3 |
| 13 | Moldova | 31 | 24.6 |
| 14 | Qatar | 21 | 24.5 |
| 19 | Belgium | 240 | 19.4 |
Questions about Czechia
- How many malicious IP addresses are there in Czechia?
- On 2026-10-12, 37 IPv4 networks (/24 blocks) located in Czechia were flagged for malicious activity, with 321 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Czechia host the most flagged IPs?
- SAOCOMP-AS Radovan Ochvat trading as SAO Computers (AS197846, 4 networks), O2-CZECH-REPUBLIC O2 Czech Republic, a.s. (AS5610, 3 networks), M247 M247 Europe SRL (AS9009, 3 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Czechia or anywhere else with one API call.