🇦🇿 Azerbaijan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Azerbaijan.

32Malicious IPs listed#79 of 182 countries · 0.05% of the world
13New in the last 24hfirst seen by any feed
17Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Azerbaijan on the live map →All listed IPs in AzerbaijanRansomware victims in Azerbaijan

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C21
  2. Malware4
  3. Phishing0
  4. Attacker27

By state or region

  1. Baki25
  2. Sumqayit2
  3. Abşeron2
  4. Gǝncǝ1
  5. Sabirabad District1
  6. Fuzuli District1

By city

  1. Baku17
  2. Badamdar3
  3. Qobustan2
  4. Ganja1
  5. Sumqayit1
  6. Corat1
  7. Lokbatan1
  8. Sabirabad1
  9. Novxanı1
  10. Binǝ1
  11. Digah1
  12. Birinji Zobujug1
  13. Sabunçu1

Networks hosting the most

NetworkIPs
AS57293 AG Telekom MMC. 4
AS8814 Aztelekom LLC 4
AS28787 Aztelekom LLC 4
AS39232 Uninet LLC 4
AS15723 "AZERONLINE LTD" JOINT ENTERPRISE 3
AS49345 BEEONLINE OJSC 2
AS200729 AzInTelecom LLC 1
AS13099 "AZ-EVRO TEL" LLC 1
AS203622 GSP LLC 1
AS29584 AZEDUNET LLC 1
AS60258 ENGINET LLC 1
AS201167 Caspian Telecom LLC 1
AS207251 CASPEL LLC 1
AS209854 Cyberzone S.A. 1
AS213881 OUR Technology LLC 1

Malware families served from Azerbaijan

  1. Swrort1
  2. Phorpiex1
  3. Gandcrab1
  4. Tiny1
  5. Evilginx1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
212.47.137[.]217AttackerAttacking hostSumqayit, SumqayitAS8814 Aztelekom LLC1 feed2026-10-12 07:15
109.205.208[.]238AttackerAttacking hostBaku, BakiAS15723 "AZERONLINE LTD" JOINT ENTERPRISE1 feed2026-10-12 06:55
31.171.1[.]219AttackerAttacking hostBaku, BakiAS49345 BEEONLINE OJSC1 feed2026-10-12 06:10
185.146.113[.]84AttackerAttacking hostGanja, GǝncǝAS57293 AG Telekom MMC.2 feeds2026-10-12 04:35
212.47.142[.]68AttackerAttacking hostCorat, SumqayitAS8814 Aztelekom LLC2 feeds2026-10-12 04:35
213.172.70[.]65AttackerAttacking hostSabirabad, Sabirabad DistrictAS13099 "AZ-EVRO TEL" LLC2 feeds2026-10-12 04:35
37.114.146[.]37AttackerAttacking hostBinǝ, BakiAS39232 Uninet LLC2 feeds2026-10-12 04:35
37.61.119[.]172AttackerAttacking hostBadamdar, BakiAS28787 Aztelekom LLC2 feeds2026-10-12 04:35
37.61.124[.]108AttackerAttacking hostQobustan, BakiAS28787 Aztelekom LLC2 feeds2026-10-12 04:35
5.197.27[.]212AttackerAttacking hostBaku, BakiAS57293 AG Telekom MMC.2 feeds2026-10-12 04:35
80.69.58[.]17AttackerAttacking hostBaku, BakiAS8814 Aztelekom LLC2 feeds2026-10-12 04:35
62.217.151[.]55AttackerAttacking hostBirinji Zobujug, Fuzuli DistrictAS15723 "AZERONLINE LTD" JOINT ENTERPRISE3 feeds2026-10-11 22:31
37.114.147[.]62AttackerAttacking hostBaku, BakiAS39232 Uninet LLC1 feed2026-10-11 18:41
213.154.15[.]109MalwarePhorpiexLokbatan, BakiAS28787 Aztelekom LLC1 feed · 21 sandbox samples2026-10-11 08:09
82.194.13[.]1MalwareGandcrabBaku, BakiAS29584 AZEDUNET LLC1 feed · 4 sandbox samples2026-10-11 08:09
91.242.14[.]27MalwareTinyBaku, BakiAS39232 Uninet LLC1 feed · 3 sandbox samples2026-10-11 05:59
37.61.124[.]73AttackerAttacking hostQobustan, BakiAS28787 Aztelekom LLC2 feeds2026-10-11 04:31
85.132.11[.]214AttackerAttacking hostSabunçu, BakiAS201167 Caspian Telecom LLC2 feeds2026-10-11 04:31
94.20.213[.]199AttackerAttacking hostBaku, BakiAS200446 SELNET LLC2 feeds2026-10-11 04:31
89.117.47[.]38AttackerAttacking hostBaku, BakiAS209854 Cyberzone S.A.1 feed2026-10-11 02:50
37.114.180[.]22AttackerAttacking hostDigah, AbşeronAS39232 Uninet LLC1 feed2026-10-09 07:40
80.69.55[.]163AttackerAttacking hostBaku, BakiAS8814 Aztelekom LLC2 feeds2026-10-09 04:27
31.171.125[.]179AttackerOn multiple blocklistsNovxanı, AbşeronAS49345 BEEONLINE OJSC2 feeds2026-10-09 04:27
109.205.213[.]247MalwareSwrortBaku, BakiAS15723 "AZERONLINE LTD" JOINT ENTERPRISE1 feed · 2 sandbox samples2026-10-08 05:49
94.20.141[.]82:8443C2EvilginxBaku, BakiAS213881 OUR Technology LLC1 feed2026-08-19 09:46

See every listed IP in Azerbaijan →

Ransomware victims in Azerbaijan

0 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-07-26 19:20Caspian OneDeadlockEnergy & Utilities

      All ransomware victims in Azerbaijan →

      Other countries

      🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →