Country Risk Trends — Global Cyber Threat Landscape
This page compares cyber attack activity by country over two time windows: the last 24 hours and the last 7 days. The trend indicator shows whether a country's threat activity is increasing, decreasing, or holding steady. Rising trends may signal new attack campaigns or compromised infrastructure within that region. Data is sourced from multiple independent threat intelligence feeds.
| Rank | Country | 24h Reports | 7d Reports | Trend |
|---|---|---|---|---|
| 1 | United States | 1,349 | 871,979 | ↓ -99% |
| 2 | Vietnam | 1,040 | 18,857 | ↓ -61% |
| 3 | China | 832 | 168,827 | ↓ -97% |
| 4 | Brazil | 723 | 20,406 | ↓ -75% |
| 5 | Germany | 708 | 34,648 | ↓ -86% |
| 6 | India | 429 | 47,878 | ↓ -94% |
| 7 | Netherlands | 344 | 53,211 | ↓ -95% |
| 8 | Romania | 244 | 19,604 | ↓ -91% |
| 9 | VE | 238 | 7,750 | ↓ -79% |
| 10 | Indonesia | 230 | 24,726 | ↓ -93% |
| 11 | France | 218 | 16,468 | ↓ -91% |
| 12 | Russia | 216 | 53,098 | ↓ -97% |
| 13 | Philippines | 192 | 2,862 | ↓ -53% |
| 14 | Mexico | 186 | 12,697 | ↓ -90% |
| 15 | Chile | 176 | 5,140 | ↓ -76% |
| 16 | United Kingdom | 159 | 116,661 | ↓ -99% |
| 17 | Turkey | 156 | 6,975 | ↓ -84% |
| 18 | Argentina | 141 | 5,715 | ↓ -83% |
| 19 | Malaysia | 139 | 9,194 | ↓ -89% |
| 20 | Singapore | 138 | 29,727 | ↓ -97% |
| 21 | Saudi Arabia | 130 | 2,348 | ↓ -61% |
| 22 | Pakistan | 121 | 6,430 | ↓ -87% |
| 23 | South Africa | 120 | 30,879 | ↓ -97% |
| 24 | Hong Kong | 106 | 61,558 | ↓ -99% |
| 25 | Ukraine | 106 | 18,828 | ↓ -96% |
| 26 | UAE | 105 | 3,479 | ↓ -79% |
| 27 | Canada | 104 | 86,129 | ↓ -99% |
| 28 | Italy | 85 | 6,849 | ↓ -91% |
| 29 | Bangladesh | 79 | 4,343 | ↓ -87% |
| 30 | South Korea | 78 | 18,338 | ↓ -97% |
| 31 | Bulgaria | 73 | 7,600 | ↓ -93% |
| 32 | Japan | 71 | 138,276 | ↓ -100% |
| 33 | Morocco | 70 | 543 | → -10% |
| 34 | JO | 69 | 262 | ↑ +84% |
| 35 | Colombia | 69 | 960 | ↓ -50% |
| 36 | Australia | 65 | 14,284 | ↓ -97% |
| 37 | Thailand | 63 | 5,363 | ↓ -92% |
| 38 | SN | 61 | 76 | ↑ +462% |
| 39 | Spain | 61 | 11,603 | ↓ -96% |
| 40 | IQ | 61 | 674 | ↓ -37% |
| 41 | JM | 57 | 108 | ↑ +269% |
| 42 | EC | 55 | 317 | ↑ +21% |
| 43 | UZ | 54 | 420 | → -10% |
| 44 | Taiwan | 54 | 5,520 | ↓ -93% |
| 45 | DZ | 52 | 361 | → 1% |
| 46 | Poland | 52 | 9,246 | ↓ -96% |
| 47 | Finland | 49 | 2,358 | ↓ -85% |
| 48 | UY | 48 | 186 | ↑ +81% |
| 49 | Sweden | 47 | 2,042 | ↓ -84% |
| 50 | PA | 46 | 1,205 | ↓ -73% |
Understanding Country Risk Trends
The trend percentage compares a country's 24-hour report volume against its daily average over the past 7 days. A rising trend (shown in red) means attacks from that country are increasing beyond the weekly baseline, which may indicate an active campaign, newly compromised botnets, or a shift in attacker infrastructure. A declining trend (shown in green) suggests a reduction in malicious activity, possibly due to takedowns, patching, or law enforcement actions.
Countries with high absolute numbers but stable trends represent persistent threat sources with established malicious infrastructure. Countries with sudden spikes deserve immediate attention as they may signal emerging threats.