Malicious IPs in Andorra
IPv4 networks located in Andorra that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Andorra at a glance
Andorra had 4 flagged IPv4 networks in the snapshot of 2026-10-10, rank #130 of 176 countries by absolute count. Andorra has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is botnet hosts with 50% of the flagged networks, followed by brute force sources (25%). The two networks (ASNs) with the most flagged IPs hold 100% of them, led by DMZHOST TECHOFF SRV LIMITED (AS48090).
Malicious activity in Andorra by category
A network listed in several categories counts once, in the most specific one.
Botnet hosts in Andorra
2 (50%)2 flagged networks, #87 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country
Brute force sources in Andorra
1 (25%)1 flagged network, #135 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
C2 servers in Andorra
1 (25%)1 flagged network, #35 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country
Networks with the most flagged IPs in Andorra
Autonomous systems announcing the flagged networks located in Andorra.
Compare Andorra with other countries
Ranked by flagged IPv4 networks.
Countries ranked next to Andorra by count
| # | Country | Networks | Per million |
|---|---|---|---|
| 128 | Honduras | 5 | - |
| 129 | Madagascar | 5 | - |
| 130 | Andorra | 4 | - |
| 131 | Guadeloupe | 4 | - |
| 132 | Jamaica | 4 | - |
| 133 | Kyrgyzstan | 4 | - |
Other countries in the RIPE NCC region
| # | Country | Networks | Per million |
|---|---|---|---|
| 1 | Iraq | 65 | 142 |
| 2 | Uzbekistan | 41 | 122 |
| 7 | Albania | 30 | 59.3 |
| 10 | Jordan | 22 | 33.9 |
| 13 | Azerbaijan | 23 | 28.8 |
| 15 | Qatar | 23 | 26.9 |
| 16 | Oman | 24 | 25.2 |
| 17 | Moldova | 30 | 23.8 |
Questions about Andorra
- How many malicious IP addresses are there in Andorra?
- On 2026-10-10, 4 IPv4 networks (/24 blocks) located in Andorra were flagged for malicious activity, with 1,024 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Andorra host the most flagged IPs?
- DMZHOST TECHOFF SRV LIMITED (AS48090, 3 networks), BestDC-Limited BestDC Limited (AS216014, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Andorra or anywhere else with one API call.