Malicious IPs in Yemen

IPv4 networks located in Yemen that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
1
#158 of 179 countries
Per million allocated IPv4
-
too little address space for a rate
Flagged IPv4 addresses
1
ranges count at most as a /24
Allocated IPv4 addresses
233,472
RIR delegation statistics

Yemen at a glance

Yemen had 1 flagged IPv4 network in the snapshot of 2026-10-11, rank #158 of 179 countries by absolute count. Yemen has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is botnet hosts with 100% of the flagged networks. 100% of them are announced by a single network, PTC-YemenNet Public Telecommunication Corporation (AS30873).

Malicious activity in Yemen by category

A network listed in several categories counts once, in the most specific one.

  • Botnet hosts in Yemen

    1 (100%)

    1 flagged network, #97 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

Networks with the most flagged IPs in Yemen

Autonomous systems announcing the flagged networks located in Yemen.

#NetworkFlagged networks
1AS30873PTC-YemenNet Public Telecommunication Corporation1

Compare Yemen with other countries

Ranked by flagged IPv4 networks.

Questions about Yemen

How many malicious IP addresses are there in Yemen?
On 2026-10-11, 1 IPv4 network (/24 blocks) located in Yemen were flagged for malicious activity, with 1 listed IPv4 address. Each /24 counts once, however many of its addresses are listed.
Which networks in Yemen host the most flagged IPs?
PTC-YemenNet Public Telecommunication Corporation (AS30873, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Yemen or anywhere else with one API call.