Malicious IPs in Syria
IPv4 networks located in Syria that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Syria at a glance
Syria had 11 flagged IPv4 networks in the snapshot of 2026-10-09, rank #100 of 179 countries by absolute count. Syria has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is botnet hosts with 45% of the flagged networks, followed by brute force sources (36%). The three networks (ASNs) with the most flagged IPs hold 100% of them, led by INT-PDN-STE-AS Syrian Telecommunication Private Closed Joint Stock Company (AS29256).
Malicious activity in Syria by category
A network listed in several categories counts once, in the most specific one.
Botnet hosts in Syria
5 (45%)5 flagged networks, #51 of 129 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Brute force sources in Syria
4 (36%)4 flagged networks, #105 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Other malicious networks in Syria
2 (18%)2 flagged networks, #108 of 148 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Networks with the most flagged IPs in Syria
Autonomous systems announcing the flagged networks located in Syria.
Compare Syria with other countries
Ranked by flagged IPv4 networks.
Countries ranked next to Syria by count
| # | Country | Networks | Per million |
|---|---|---|---|
| 101 | Lebanon | 11 | - |
| 102 | Luxembourg | 11 | - |
| 103 | Syria | 11 | - |
| 104 | Bahrain | 10 | - |
| 105 | Cameroon | 10 | - |
| 106 | Laos | 10 | - |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 63 | 138 |
| 2 | Uzbekistan | 44 | 131 |
| 7 | Albania | 27 | 53.4 |
| 10 | Jordan | 25 | 38.6 |
| 12 | Armenia | 21 | 31.0 |
| 13 | Qatar | 25 | 29.2 |
| 15 | Oman | 27 | 28.4 |
| 17 | Azerbaijan | 21 | 26.3 |
Questions about Syria
- How many malicious IP addresses are there in Syria?
- On 2026-10-09, 11 IPv4 networks (/24 blocks) located in Syria were flagged for malicious activity, with 12 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Syria host the most flagged IPs?
- INT-PDN-STE-AS Syrian Telecommunication Private Closed Joint Stock Company (AS29256, 8 networks), Rcell RCell LLC (AS214707, 2 networks), SPACEX-STARLINK - Space Exploration Technologies Corporation (AS14593, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Syria or anywhere else with one API call.