Category 20
Malware
Distributing or downloading malicious software.
- Reported IPs
- 723
- Reports
- 1,730
- Reporters
- 2
- Last report
- 10/05/2026
Malware reports describe an address that serves malicious payloads, drops files after an exploit or downloads second-stage tools onto compromised machines. In AbuseIPDB-compatible responses these reports carry category 20 (exploited host).
API category IDs
- ID
- 20
- Accepted IDs
- –
No AbuseIPDB ID maps to this category on input. Check responses list it as 20. API-Docs
Top countries
- United States42425%
- Germany29117%
- Netherlands18110%
- France16510%
- United Kingdom1066%
- China925%
- Canada915%
- Singapore483%
- Slovenia412%
- Belgium292%
