Malicious IPs in Japan

IPv4 networks located in Japan that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
278
#16 of 176 countries
Per million allocated IPv4
1.47
#77 of 77 countries
Flagged IPv4 addresses
11,834
ranges count at most as a /24
Allocated IPv4 addresses
189,009,472
RIR delegation statistics

Japan at a glance

Japan had 278 flagged IPv4 networks in the snapshot of 2026-10-10, rank #16 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 1.47 flagged networks per million addresses, rank #77 of 77, well below the median of 10.6 across all rated countries. The largest category is brute force sources with 49% of the flagged networks, followed by other malicious networks (31%). The three networks (ASNs) with the most flagged IPs hold 38% of them, led by GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982).

Malicious activity in Japan by category

A network listed in several categories counts once, in the most specific one.

  • Brute force sources in Japan

    137 (49%)

    137 flagged networks, #16 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Japan

    86 (31%)

    86 flagged networks, #12 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Scanners in Japan

    21 (8%)

    21 flagged networks, #9 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • C2 servers in Japan

    15 (5%)

    15 flagged networks, #9 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Spam sources in Japan

    10 (4%)

    10 flagged networks, #17 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

  • Botnet hosts in Japan

    9 (3%)

    9 flagged networks, #37 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

Networks with the most flagged IPs in Japan

Autonomous systems announcing the flagged networks located in Japan.

#NetworkFlagged networks
1AS396982GOOGLE-CLOUD-PLATFORM - Google LLC73
2AS4686BEKKOAME - BEKKOAME INTERNET INC.17
3AS45102ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd.17
4AS132203TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue16
5AS31898ORACLE-BMC-31898 - Oracle Corporation15
6AS2516KDDI - KDDI CORPORATION11
7AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation9
8AS152194CTGSERVERLIMITED-AS-AP - CTG Server Limited7
9AS19527GOOGLE-2 - Google LLC7
10AS20473AS-VULTR - The Constant Company, LLC7

Compare Japan with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Japan by rate

#CountryNetworksPer million
72United Kingdom3372.38
73Switzerland522.23
74United States2,9811.84
75Austria201.79
76Norway241.54
77Japan2781.47

Other countries in the APNIC region

#CountryNetworksPer million
3Bangladesh16679.5
4Pakistan42574.8
5Nepal4170.0
8Sri Lanka2646.1
9India1,77742.3
11Hong Kong SAR China50031.0
12Philippines18830.0
21Indonesia40821.0

Questions about Japan

How many malicious IP addresses are there in Japan?
On 2026-10-10, 278 IPv4 networks (/24 blocks) located in Japan were flagged for malicious activity, with 11,834 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
Which networks in Japan host the most flagged IPs?
GOOGLE-CLOUD-PLATFORM - Google LLC (AS396982, 73 networks), BEKKOAME - BEKKOAME INTERNET INC. (AS4686, 17 networks), ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. (AS45102, 17 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Japan or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Japan