Malicious IPs in Philippines

IPv4 networks located in Philippines that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
181
#21 of 179 countries
Per million allocated IPv4
28.9
#14 of 78 countries
Flagged IPv4 addresses
223
ranges count at most as a /24
Allocated IPv4 addresses
6,268,480
RIR delegation statistics

Philippines at a glance

The Philippines had 181 flagged IPv4 networks in the snapshot of 2026-10-09, rank #21 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 28.9 flagged networks per million addresses, rank #14 of 78, 2.8 times the median of 10.2 across all rated countries. The largest category is other malicious networks with 41% of the flagged networks, followed by botnet hosts (35%). The three networks (ASNs) with the most flagged IPs hold 68% of them, led by IPG-AS-AP - Philippine Long Distance Telephone Company (AS9299). Another 10 flagged IPv6 networks are located in the Philippines.

Malicious activity in Philippines by category

A network listed in several categories counts once, in the most specific one. Also flagged: 10 IPv6 networks.

  • Other malicious networks in Philippines

    74 (41%)

    74 flagged networks, #14 of 148 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Philippines

    63 (35%)

    63 flagged networks, #8 of 129 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Brute force sources in Philippines

    40 (22%)

    40 flagged networks, #38 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Spam sources in Philippines

    2 (1%)

    2 flagged networks, #45 of 90 countries for spam sources. Sources of email spam. Spam Sources by Country

  • C2 servers in Philippines

    1 (1%)

    1 flagged network, #35 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Scanners in Philippines

    1 (1%)

    1 flagged network, #28 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

Networks with the most flagged IPs in Philippines

Autonomous systems announcing the flagged networks located in Philippines.

#NetworkFlagged networks
1AS9299IPG-AS-AP - Philippine Long Distance Telephone Company75
2AS17639CONVERGE-AS - Converge ICT Solutions Inc.29
3AS4775GLOBE-TELECOM-AS - Globe Telecoms19
4AS132199GLOBE-MOBILE-5TH-GEN-AS - Globe Telecom Inc.17
5AS9658ETPI-IDS-AS-AP - Eastern Telecoms Phils., Inc.10
6AS135607INFINIVAN-AS-AP - Infinivan Incorporated4
7AS14593SPACEX-STARLINK - Space Exploration Technologies Corporation3
8AS134707RCC-AS-AP - RoyalCable Flash3
9AS45102ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd.2
10AS139831DTC-AS-AP - DITO TELECOMMUNITY CORP.2

Compare Philippines with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to the Philippines by rate

#CountryNetworksPer million
12Armenia2131.0
13Qatar2529.2
14Philippines18128.9
15Oman2728.4
16Uganda4028.0
17Azerbaijan2126.3

Questions about Philippines

How many malicious IP addresses are there in the Philippines?
On 2026-10-09, 181 IPv4 networks (/24 blocks) located in the Philippines were flagged for malicious activity, with 223 listed IPv4 addresses and 10 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in the Philippines host the most flagged IPs?
IPG-AS-AP - Philippine Long Distance Telephone Company (AS9299, 75 networks), CONVERGE-AS - Converge ICT Solutions Inc. (AS17639, 29 networks), GLOBE-TELECOM-AS - Globe Telecoms (AS4775, 19 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Philippines or anywhere else with one API call.