Malicious IPs in Israel
IPv4 networks located in Israel that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Israel at a glance
Israel had 67 flagged IPv4 networks in the snapshot of 2026-10-09, rank #40 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 8.31 flagged networks per million addresses, rank #45 of 78, close to the median of 10.2 across all rated countries. The largest category is brute force sources with 58% of the flagged networks, followed by spam sources (21%). The three networks (ASNs) with the most flagged IPs hold 46% of them, led by PARTNER-AS Partner Communications Ltd. (AS12400). Another 3 flagged IPv6 networks are located in Israel.
Malicious activity in Israel by category
A network listed in several categories counts once, in the most specific one. Also flagged: 3 IPv6 networks.
Brute force sources in Israel
39 (58%)39 flagged networks, #39 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Spam sources in Israel
14 (21%)14 flagged networks, #11 of 90 countries for spam sources. Sources of email spam. Spam Sources by Country
Other malicious networks in Israel
6 (9%)6 flagged networks, #67 of 148 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Botnet hosts in Israel
3 (4%)3 flagged networks, #77 of 129 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
C2 servers in Israel
3 (4%)3 flagged networks, #25 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Scanners in Israel
2 (3%)2 flagged networks, #23 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country
Networks with the most flagged IPs in Israel
Autonomous systems announcing the flagged networks located in Israel.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS12400PARTNER-AS Partner Communications Ltd. | 15 |
| 2 | AS16116Pelephone Communications Ltd. | 11 |
| 3 | AS12849HOTNET-IL Hot-Net internet services Ltd. | 5 |
| 4 | AS1680NV-ASN - Cellcom Fixed Line Communication L.P | 4 |
| 5 | AS50463TRIPLEC-ASN Triple C Cloud Computing Ltd. | 4 |
| 6 | AS6810BEZEK "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. | 3 |
| 7 | AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation | 3 |
| 8 | AS208905Exelera-AS Exelera Telecom Ltd | 3 |
| 9 | AS8551BEZEQ-INTERNATIONAL-AS Bezeq International Ltd. | 2 |
| 10 | AS35091Teledata-AS Teledata, Ghana | 2 |
Compare Israel with other countries
Ranked by flagged networks per million allocated IPv4 addresses.
Countries ranked next to Israel by rate
| # | Country | Networks | Per million |
|---|---|---|---|
| 43 | Netherlands | 470 | 9.33 |
| 44 | Lithuania | 36 | 8.71 |
| 45 | Israel | 67 | 8.31 |
| 46 | Iran | 87 | 8.01 |
| 47 | Poland | 156 | 7.78 |
| 48 | Türkiye | 127 | 7.55 |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 63 | 138 |
| 2 | Uzbekistan | 44 | 131 |
| 7 | Albania | 27 | 53.4 |
| 10 | Jordan | 25 | 38.6 |
| 12 | Armenia | 21 | 31.0 |
| 13 | Qatar | 25 | 29.2 |
| 15 | Oman | 27 | 28.4 |
| 17 | Azerbaijan | 21 | 26.3 |
Questions about Israel
- How many malicious IP addresses are there in Israel?
- On 2026-10-09, 67 IPv4 networks (/24 blocks) located in Israel were flagged for malicious activity, with 96 listed IPv4 addresses and 3 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
- Which networks in Israel host the most flagged IPs?
- PARTNER-AS Partner Communications Ltd. (AS12400, 15 networks), Pelephone Communications Ltd. (AS16116, 11 networks), HOTNET-IL Hot-Net internet services Ltd. (AS12849, 5 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Israel or anywhere else with one API call.