Malicious IPs in Portugal

IPv4 networks located in Portugal that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
28
#66 of 176 countries
Per million allocated IPv4
4.18
#61 of 77 countries
Flagged IPv4 addresses
28
ranges count at most as a /24
Allocated IPv4 addresses
6,694,944
RIR delegation statistics

Portugal at a glance

Portugal had 28 flagged IPv4 networks in the snapshot of 2026-10-10, rank #66 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 4.18 flagged networks per million addresses, rank #61 of 77, well below the median of 10.6 across all rated countries. The largest category is brute force sources with 64% of the flagged networks, followed by other malicious networks (21%). The three networks (ASNs) with the most flagged IPs hold 86% of them, led by VODAFONE-PT Vodafone Portugal - Communicacoes Pessoais S.A. (AS12353). Another 3 flagged IPv6 networks are located in Portugal.

Malicious activity in Portugal by category

A network listed in several categories counts once, in the most specific one. Also flagged: 3 IPv6 networks.

  • Brute force sources in Portugal

    18 (64%)

    18 flagged networks, #58 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Portugal

    6 (21%)

    6 flagged networks, #72 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Portugal

    3 (11%)

    3 flagged networks, #70 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Portugal

    1 (4%)

    1 flagged network, #54 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Portugal

Autonomous systems announcing the flagged networks located in Portugal.

#NetworkFlagged networks
1AS12353VODAFONE-PT Vodafone Portugal - Communicacoes Pessoais S.A.9
2AS3243MEO-RESIDENCIAL MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A.8
3AS2860NOS_COMUNICACOES NOS COMUNICACOES, S.A.7
4AS20879DIGI-PT DIGI ROMANIA S.A.1
5AS13156AS13156 NOWO COMMUNICATIONS, S.A.1
6AS60068CDN77 Datacamp Limited1
7AS212238CDNEXT Datacamp Limited1
8AS13335CLOUDFLARENET - Cloudflare, Inc.0
9AS199155REDE-MEC Direcao Geral de Estatisticas da Educacao e Ciencia0

Compare Portugal with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Portugal by rate

#CountryNetworksPer million
59South Africa1314.82
60Saudi Arabia534.71
61Portugal284.18
62Mexico1153.96
63Czechia383.96
64Canada2693.93

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq65142
2Uzbekistan41122
7Albania3059.3
10Jordan2233.9
13Azerbaijan2328.8
15Qatar2326.9
16Oman2425.2
17Moldova3023.8

Questions about Portugal

How many malicious IP addresses are there in Portugal?
On 2026-10-10, 28 IPv4 networks (/24 blocks) located in Portugal were flagged for malicious activity, with 28 listed IPv4 addresses and 3 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Portugal host the most flagged IPs?
VODAFONE-PT Vodafone Portugal - Communicacoes Pessoais S.A. (AS12353, 9 networks), MEO-RESIDENCIAL MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A. (AS3243, 8 networks), NOS_COMUNICACOES NOS COMUNICACOES, S.A. (AS2860, 7 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Portugal or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Portugal