Malicious IPs in United Kingdom
IPv4 networks located in United Kingdom that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
United Kingdom at a glance
The United Kingdom had 1 flagged IPv4 network in the snapshot of 2026-10-11, rank #158 of 179 countries by absolute count. The United Kingdom has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is botnet hosts with 100% of the flagged networks. 100% of them are announced by a single network, BT-UK-AS British Telecommunications Limited (AS2856).
Malicious activity in United Kingdom by category
A network listed in several categories counts once, in the most specific one.
Botnet hosts in United Kingdom
1 (100%)1 flagged network, #97 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Networks with the most flagged IPs in United Kingdom
Autonomous systems announcing the flagged networks located in United Kingdom.
| # | Network | Flagged networks |
|---|---|---|
| 1 | AS2856BT-UK-AS British Telecommunications Limited | 1 |
Compare United Kingdom with other countries
Ranked by flagged IPv4 networks.
Countries ranked next to the United Kingdom by count
| # | Country | Networks | Per million |
|---|---|---|---|
| 174 | Réunion | 1 | - |
| 175 | South Sudan | 1 | - |
| 176 | United Kingdom | 1 | - |
| 177 | Vanuatu | 1 | - |
| 178 | Samoa | 1 | - |
| 179 | Yemen | 1 | - |
Questions about United Kingdom
- How many malicious IP addresses are there in the United Kingdom?
- On 2026-10-11, 1 IPv4 network (/24 blocks) located in the United Kingdom were flagged for malicious activity, with 1 listed IPv4 address. Each /24 counts once, however many of its addresses are listed.
- Which networks in the United Kingdom host the most flagged IPs?
- BT-UK-AS British Telecommunications Limited (AS2856, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in United Kingdom or anywhere else with one API call.