Malicious IPs in Serbia

IPv4 networks located in Serbia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
41
#49 of 179 countries
Per million allocated IPv4
17.7
#26 of 76 countries
Flagged IPv4 addresses
43
ranges count at most as a /24
Allocated IPv4 addresses
2,316,032
RIR delegation statistics

Serbia at a glance

Serbia had 41 flagged IPv4 networks in the snapshot of 2026-10-11, rank #49 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 17.7 flagged networks per million addresses, rank #26 of 76, 1.9 times the median of 9.38 across all rated countries. The largest category is brute force sources with 46% of the flagged networks, followed by botnet hosts (24%). The three networks (ASNs) with the most flagged IPs hold 68% of them, led by TRUF-AS TRUF d.o.o. (AS52026). Another 1 flagged IPv6 network is located in Serbia.

Malicious activity in Serbia by category

A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.

  • Brute force sources in Serbia

    19 (46%)

    19 flagged networks, #52 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Serbia

    10 (24%)

    10 flagged networks, #31 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Other malicious networks in Serbia

    10 (24%)

    10 flagged networks, #45 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Spam sources in Serbia

    2 (5%)

    2 flagged networks, #43 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Serbia

Autonomous systems announcing the flagged networks located in Serbia.

#NetworkFlagged networks
1AS52026TRUF-AS TRUF d.o.o.11
2AS31042YETTEL-AS Yettel d.o.o.9
3AS8400TELEKOM-AS TELEKOM SRBIJA a.d.8
4AS15958CETIN_doo_AS CETIN Ltd. Belgrade5
5AS9009M247 M247 Europe SRL1
6AS9125ORIONTELEKOM-AS Drustvo za telekomunikacije Orion telekom doo Beograd-Zemun1
7AS41897SAT-TRAKT-AS Sat-Trakt D.O.O.1
8AS44143A1SERBIA-AS A1 Srbija d.o.o. Beograd1
9AS51002G-NET ASTRA TELEKOM DOO BEOGRAD1
10AS196886Orion-Telekom-Korisnici-AS Orion Telekom Tim d.o.o.Beograd1

Compare Serbia with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Serbia by rate

#CountryNetworksPer million
24Ghana4018.1
25Malaysia12017.9
26Serbia4117.7
27Singapore43915.7
28Bulgaria5512.7
29Ireland13012.6

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq66144
2Uzbekistan42125
7Albania2651.4
11Jordan2030.9
12Azerbaijan2430.0
15Qatar2124.5
17Moldova3023.8
20Belgium24219.6

Questions about Serbia

How many malicious IP addresses are there in Serbia?
On 2026-10-11, 41 IPv4 networks (/24 blocks) located in Serbia were flagged for malicious activity, with 43 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
Which networks in Serbia host the most flagged IPs?
TRUF-AS TRUF d.o.o. (AS52026, 11 networks), YETTEL-AS Yettel d.o.o. (AS31042, 9 networks), TELEKOM-AS TELEKOM SRBIJA a.d. (AS8400, 8 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Serbia or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Serbia