Malicious IPs in Luxembourg

IPv4 networks located in Luxembourg that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
11
#100 of 179 countries
Per million allocated IPv4
-
too little address space for a rate
Flagged IPv4 addresses
17
ranges count at most as a /24
Allocated IPv4 addresses
1,850,368
RIR delegation statistics

Luxembourg at a glance

Luxembourg had 11 flagged IPv4 networks in the snapshot of 2026-10-09, rank #100 of 179 countries by absolute count. Luxembourg has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is brute force sources with 55% of the flagged networks, followed by botnet hosts (18%). The three networks (ASNs) with the most flagged IPs hold 73% of them, led by PONYNET - FranTech Solutions (AS53667).

Malicious activity in Luxembourg by category

A network listed in several categories counts once, in the most specific one.

  • Brute force sources in Luxembourg

    6 (55%)

    6 flagged networks, #93 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Luxembourg

    2 (18%)

    2 flagged networks, #91 of 129 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Other malicious networks in Luxembourg

    2 (18%)

    2 flagged networks, #108 of 148 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • C2 servers in Luxembourg

    1 (9%)

    1 flagged network, #35 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

Networks with the most flagged IPs in Luxembourg

Autonomous systems announcing the flagged networks located in Luxembourg.

#NetworkFlagged networks
1AS53667PONYNET - FranTech Solutions5
2AS6661EPT-LU POST Luxembourg2
3AS403005BLATANTHOST - Blatant1
4AS206804EstNOC-GLOBAL Realcloud OU1
5AS9009M247 M247 Europe SRL1
6AS197869CIRCL Luxembourg House of Cybersecurity1

Compare Luxembourg with other countries

Ranked by flagged IPv4 networks.

Countries ranked next to Luxembourg by count

#CountryNetworksPer million
100Iceland11-
101Lebanon11-
102Luxembourg11-
103Syria11-
104Bahrain10-
105Cameroon10-

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq63138
2Uzbekistan44131
7Albania2753.4
10Jordan2538.6
12Armenia2131.0
13Qatar2529.2
15Oman2728.4
17Azerbaijan2126.3

Questions about Luxembourg

How many malicious IP addresses are there in Luxembourg?
On 2026-10-09, 11 IPv4 networks (/24 blocks) located in Luxembourg were flagged for malicious activity, with 17 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
Which networks in Luxembourg host the most flagged IPs?
PONYNET - FranTech Solutions (AS53667, 5 networks), EPT-LU POST Luxembourg (AS6661, 2 networks), BLATANTHOST - Blatant (AS403005, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Luxembourg or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Luxembourg