🇦🇹 Austria: live cyber threat activity

Malicious IPs, malware and ransomware victims in Austria.

54Malicious IPs listed#62 of 182 countries · 0.08% of the world
13New in the last 24hfirst seen by any feed
11Reported by 2+ feedsindependent sources agree
3Ransomware victimsposted in the last 30 days

View Austria on the live map →All listed IPs in AustriaRansomware victims in Austria

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C29
  2. Malware15
  3. Phishing0
  4. Attacker30

By state or region

  1. Vienna22
  2. State of Vienna16
  3. Styria7
  4. Carinthia4
  5. Upper Austria3
  6. Tyrol2

By city

  1. Vienna38
  2. Liezen District5
  3. Klagenfurt4
  4. Linz2
  5. Farrach1
  6. Zaubertal1
  7. Raaba1
  8. Innsbruck1
  9. Telfs1

Networks hosting the most

NetworkIPs
AS208323 Foundation for Applied Privacy 11
AS8447 A1 Telekom Austria AG 6
AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP 5
AS197540 netcup GmbH 4
AS44133 IPAX GmbH 3
AS8437 Hutchison Drei Austria GmbH 3
AS8412 T-Mobile Austria GmbH 3
AS200405 IKT Linz GmbH 2
AS212238 Datacamp Limited 2
AS210644 AEZA INTERNATIONAL LTD 2
AS60068 Datacamp Limited 1
AS216416 Evolus IT Solutions GmbH 1
AS208172 Proton AG 1
AS136787 PacketHub S.A. 1
AS58061 Scalaxy B.V. 1

Malware families served from Austria

  1. Potassium5
  2. Eye Pyramid3
  3. Coinhelper2
  4. Generickdq1
  5. Fickleshade1
  6. Mokes1
  7. Bingoml1
  8. Bayrob1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
37.19.195[.]85AttackerAttacking hostVienna, ViennaAS212238 Datacamp Limited1 feed2026-10-12 08:20
77.73.131[.]123MalwareMokesVienna, ViennaAS210644 AEZA INTERNATIONAL LTD1 feed · 2 sandbox samples2026-10-12 05:48
152.53.18[.]201AttackerMalicious IPKlagenfurt, CarinthiaAS197540 netcup GmbH1 feed2026-10-12 04:35
159.26.109[.]45AttackerAttacking hostVienna, ViennaAS208172 Proton AG2 feeds2026-10-12 04:35
187.15.158[.]128AttackerAttacking hostVienna, ViennaAS136787 PacketHub S.A.2 feeds2026-10-12 04:35
194.87.40[.]52AttackerAttacking hostVienna, ViennaAS58061 Scalaxy B.V.2 feeds2026-10-12 04:35
2a00[:]11c0[:]47[:]1e7e[:][:]AttackerMalicious IPKlagenfurt, CarinthiaAS47147 Anexia Cloud Solutions GmbH1 feed2026-10-12 04:35
80.110.37[.]104MalwareMalicious URLVienna, ViennaAS8412 T-Mobile Austria GmbHaggregated list2026-10-12 04:35
88.116.62[.]226MalwareMalicious URLVienna, ViennaAS8447 A1 Telekom Austria AGaggregated list2026-10-12 04:35
152.53.46[.]2AttackerMalicious IPKlagenfurt, CarinthiaAS197540 netcup GmbH1 feed2026-10-12 04:35
157.173.25[.]196AttackerAttacking hostVienna, ViennaAS216416 Evolus IT Solutions GmbH1 feed2026-10-12 03:25
109.70.100[.]3AttackerTor exitVienna, State of ViennaAS208323 Foundation for Applied Privacy2 feeds · 5 sandbox samples2026-10-11 10:25
109.70.100[.]4MalwareTor exitVienna, State of ViennaAS208323 Foundation for Applied Privacy3 feeds · 9 sandbox samples2026-10-11 09:51
86.59.21[.]38MalwareBingomlVienna, ViennaAS8437 Hutchison Drei Austria GmbH1 feed · 268 sandbox samples2026-10-11 08:09
152.53.2[.]97AttackerAttacking hostKlagenfurt, CarinthiaAS197540 netcup GmbH2 feeds2026-10-11 04:31
212.241.72[.]65AttackerMalicious IPZaubertal, Upper AustriaAS12605 LIWEST Kabelmedien GmbH1 feed2026-10-11 04:31
2a00[:]63c1[:]10[:]4[:][:]c001[:]c0deAttackerMalicious IPVienna, ViennaAS44133 IPAX GmbH1 feed2026-10-11 04:31
37.252.191[.]4AttackerMalicious IPVienna, ViennaAS44133 IPAX GmbH1 feed2026-10-11 04:31
213.47.243[.]57MalwareMalicious URLInnsbruck, TyrolAS8412 T-Mobile Austria GmbHaggregated list2026-10-11 04:31
109.70.100[.]15AttackerTor exitVienna, State of ViennaAS208323 Foundation for Applied Privacy1 feed · 2 sandbox samples2026-10-11 04:30
46.124.123[.]247AttackerAttacking hostVienna, ViennaAS8412 T-Mobile Austria GmbH2 feeds2026-10-11 04:30
156.146.61[.]35AttackerAttacking hostVienna, ViennaAS60068 Datacamp Limited1 feed2026-10-10 10:55
81.19.154[.]98MalwareContacted by malwareVienna, ViennaAS8560 IONOS SE1 feed · 3 sandbox samples2026-10-10 09:14
109.70.100[.]1AttackerTor exitVienna, State of ViennaAS208323 Foundation for Applied Privacy1 feed · 2 sandbox samples2026-10-10 04:30
87.249.133[.]3AttackerAttacking hostVienna, State of ViennaAS212238 Datacamp Limited1 feed2026-10-09 16:45

See every listed IP in Austria →

Ransomware victims in Austria

3 posted in the last 30 days, 14 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-30 03:35Auto HollerthegentlemenRetail & E-Commerce
2026-09-26 08:47Hell Helmut GmbHthegentlemenManufacturing
2026-09-17 15:32rottner-tresor.atsettraManufacturing
2026-09-08 19:49reichenau.atsafepayOther
2026-08-30 09:22n-tree.comZaWooTechnology
2026-08-21 08:30UOLconsultthegentlemenProfessional Services
2026-08-21 08:27ARBEITERKAMMERNthegentlemenProfessional Services
2026-08-15 21:44Dynatracexpl0itrsTechnology
2026-08-14 08:33Lercher WerkzeugbauqilinManufacturing
2026-08-11 05:51FREYWILLEauroraRetail & E-Commerce
2026-08-07 13:31EISNER ZT GMBHqilinProfessional Services
2026-08-05 16:32STADLER Sensorik CNC-TechnikqilinManufacturing
2026-08-01 13:50Schreiner Trockenbau GmbHqilinManufacturing
2026-07-23 15:05Wunschkind Klinik Dr BrunbauerthegentlemenHealthcare

All ransomware victims in Austria →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →