Malicious IPs in Ethiopia
IPv4 networks located in Ethiopia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Ethiopia at a glance
Ethiopia had 22 flagged IPv4 networks in the snapshot of 2026-10-11, rank #73 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 59.4 flagged networks per million addresses, rank #6 of 76, 6.3 times the median of 9.38 across all rated countries. The largest category is brute force sources with 68% of the flagged networks, followed by spam sources (18%). The two networks (ASNs) with the most flagged IPs hold 100% of them, led by EthioNet-AS (AS24757).
Malicious activity in Ethiopia by category
A network listed in several categories counts once, in the most specific one.
Brute force sources in Ethiopia
15 (68%)15 flagged networks, #65 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Spam sources in Ethiopia
4 (18%)4 flagged networks, #31 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country
Botnet hosts in Ethiopia
3 (14%)3 flagged networks, #69 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Networks with the most flagged IPs in Ethiopia
Autonomous systems announcing the flagged networks located in Ethiopia.
Compare Ethiopia with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Questions about Ethiopia
- How many malicious IP addresses are there in Ethiopia?
- On 2026-10-11, 22 IPv4 networks (/24 blocks) located in Ethiopia were flagged for malicious activity, with 25 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Ethiopia host the most flagged IPs?
- EthioNet-AS (AS24757, 20 networks), SAFARICOM-TEL (AS328988, 2 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Ethiopia or anywhere else with one API call.