Malicious IPs in Germany

IPv4 networks located in Germany that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
777
#6 of 176 countries
Per million allocated IPv4
6.14
#52 of 77 countries
Flagged IPv4 addresses
11,515
ranges count at most as a /24
Allocated IPv4 addresses
126,529,152
RIR delegation statistics

Germany at a glance

Germany had 777 flagged IPv4 networks in the snapshot of 2026-10-10, rank #6 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 6.14 flagged networks per million addresses, rank #52 of 77, well below the median of 10.6 across all rated countries. The largest category is brute force sources with 54% of the flagged networks, followed by other malicious networks (22%). The three networks (ASNs) with the most flagged IPs hold 36% of them, led by DIGITALOCEAN-ASN - DigitalOcean, LLC (AS14061). Another 57 flagged IPv6 networks are located in Germany.

Malicious activity in Germany by category

A network listed in several categories counts once, in the most specific one. Also flagged: 57 IPv6 networks.

  • Brute force sources in Germany

    423 (54%)

    423 flagged networks, #6 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Germany

    168 (22%)

    168 flagged networks, #5 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Germany

    85 (11%)

    85 flagged networks, #4 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • C2 servers in Germany

    42 (5%)

    42 flagged networks, #4 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Scanners in Germany

    39 (5%)

    39 flagged networks, #4 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • Spam sources in Germany

    20 (3%)

    20 flagged networks, #7 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Germany

Autonomous systems announcing the flagged networks located in Germany.

#NetworkFlagged networks
1AS14061DIGITALOCEAN-ASN - DigitalOcean, LLC120
2AS51167CONTABO Contabo GmbH95
3AS3320DTAG Deutsche Telekom AG65
4AS396982GOOGLE-CLOUD-PLATFORM - Google LLC63
5AS3209VODANET Vodafone GmbH52
6AS24940HETZNER-AS Hetzner Online GmbH30
7AS6805TDDE-ASN1 Telefonica Germany GmbH & Co.OHG20
8AS31334KABELDEUTSCHLAND-AS Vodafone GmbH18
9AS8881VERSATEL 1&1 Versatel GmbH15
10AS16276OVH OVH SAS15

Compare Germany with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Germany by rate

#CountryNetworksPer million
50Hungary396.58
51China2,2046.43
52Germany7776.14
53Chile646.06
54Venezuela395.82
55Colombia1005.71

Questions about Germany

How many malicious IP addresses are there in Germany?
On 2026-10-10, 777 IPv4 networks (/24 blocks) located in Germany were flagged for malicious activity, with 11,515 listed IPv4 addresses and 57 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Germany host the most flagged IPs?
DIGITALOCEAN-ASN - DigitalOcean, LLC (AS14061, 120 networks), CONTABO Contabo GmbH (AS51167, 95 networks), DTAG Deutsche Telekom AG (AS3320, 65 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Germany or anywhere else with one API call.