🇦🇲 Armenia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Armenia.

34Malicious IPs listed#77 of 182 countries · 0.05% of the world
10New in the last 24hfirst seen by any feed
7Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Armenia on the live map →All listed IPs in Armenia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware17
  3. Phishing0
  4. Attacker17

By state or region

  1. Yerevan30
  2. Gegharkunik1
  3. Vayots Dzor1
  4. Lori1
  5. Kotayk1

By city

  1. Yerevan30
  2. Gavarr1
  3. Areni1
  4. Vanadzor1
  5. Arinj1

Networks hosting the most

NetworkIPs
AS196709 GNC-Alfa CJSC 13
AS44395 Ucom CJSC 9
AS12297 Telecom Armenia OJSC 3
AS49800 GNC-Alfa CJSC 2
AS197834 Ucom CJSC 1
AS201986 Arpinet LLC 1
AS207991 ACHON LLC 1
AS210147 ISP SUPPORT LLC 1
AS16190 LIR LLC 1
AS47975 Supercom LLC 1
AS201884 ISP SUPPORT LLC 1

Malware families served from Armenia

  1. Crifi6
  2. Mokes2
  3. Seraph1
  4. Scar1
  5. Dacic1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
77.91.68[.]249MalwareMokesYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 278 sandbox samples2026-10-12 06:58
77.91.68[.]253MalwareDacicYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 19 sandbox samples2026-10-12 06:58
77.91.68[.]29MalwareMokesYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 781 sandbox samples2026-10-12 06:58
91.103.248[.]250AttackerAttacking hostYerevan, YerevanAS201884 ISP SUPPORT LLC2 feeds2026-10-12 06:10
77.91.68[.]18MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 84 sandbox samples2026-10-12 03:45
77.91.68[.]61MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 231 sandbox samples2026-10-12 03:30
77.91.68[.]78MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 133 sandbox samples2026-10-12 03:30
77.91.68[.]52MalwareContacted by malwareYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 273 sandbox samples2026-10-12 01:32
178.219.56[.]115AttackerAttacking hostYerevan, YerevanAS201986 Arpinet LLC1 feed2026-10-12 00:15
5.77.130[.]137AttackerAttacking hostYerevan, YerevanAS44395 Ucom CJSC1 feed2026-10-11 09:36
195.250.79[.]2AttackerAttacking hostYerevan, YerevanAS49800 GNC-Alfa CJSC2 feeds2026-10-11 04:31
77.91.68[.]239MalwareContacted by malwareYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 5 sandbox samples2026-10-11 02:45
77.91.68[.]3MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 103 sandbox samples2026-10-10 11:40
77.91.68[.]56MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 20 sandbox samples2026-10-10 11:25
77.91.68[.]68MalwareCrifiYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 70 sandbox samples2026-10-10 11:10
5.77.199[.]41AttackerMalicious IPVanadzor, LoriAS44395 Ucom CJSC1 feed2026-10-10 04:30
77.91.68[.]238MalwareScarYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 46 sandbox samples2026-10-09 11:56
194.31.4[.]67AttackerAttacking hostGavarr, GegharkunikAS207991 ACHON LLC2 feeds2026-10-09 04:27
212.73.75[.]84MalwareMalicious URLYerevan, YerevanAS12297 Telecom Armenia OJSCaggregated list2026-10-09 04:27
178.160.230[.]74AttackerAttacking hostYerevan, YerevanAS12297 Telecom Armenia OJSC1 feed2026-10-09 04:27
217.113.7[.]142AttackerMalicious IPYerevan, YerevanAS16190 LIR LLC2 feeds2026-10-09 04:27
77.91.68[.]235MalwareSeraphYerevan, YerevanAS196709 GNC-Alfa CJSC1 feed · 1 sandbox sample2026-10-07 13:57
176.32.193[.]16AttackerAttacking hostYerevan, YerevanAS197834 Ucom CJSC3 feeds2026-03-11 00:00
109.75.47[.]10AttackerAttacking hostYerevan, YerevanAS44395 Ucom CJSC1 feed—
212.73.75[.]82AttackerAttacking hostYerevan, YerevanAS12297 Telecom Armenia OJSC1 feed—

See every listed IP in Armenia →

Ransomware victims in Armenia

No ransomware victims from Armenia posted in the last 90 days.

Other countries