🇧🇾 Belarus: live cyber threat activity

Malicious IPs, malware and ransomware victims in Belarus.

18Malicious IPs listed#100 of 182 countries · 0.03% of the world
1New in the last 24hfirst seen by any feed
2Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Belarus on the live map →All listed IPs in Belarus

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C21
  2. Malware4
  3. Phishing0
  4. Attacker13

By state or region

  1. Minsk City13
  2. Minsk3
  3. Grodnenskaya1
  4. Vitebsk1

By city

  1. Minsk13
  2. Navahrudak1
  3. Sharkowshchyna1
  4. Borisov1
  5. Blon’1
  6. Valer’yanovo1

Networks hosting the most

NetworkIPs
AS62240 Clouvider Limited 8
AS6697 Republican Unitary Telecommunication Enterprise Beltelecom 6
AS25106 Mobile TeleSystems JLLC 2
AS209372 WS Telecom Inc 1
AS12406 Business Network Ltd 1

Malware families served from Belarus

  1. Bittorrent1
  2. Evilginx1
  3. Mozi1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
37.215.40[.]130AttackerAttacking hostBlon’, MinskAS6697 Republican Unitary Telecommunication Enterprise Beltelecom1 feed2026-10-12 03:25
178.126.11[.]29AttackerMalicious IPSharkowshchyna, VitebskAS6697 Republican Unitary Telecommunication Enterprise Beltelecom1 feed2026-10-11 04:31
200.162.146[.]192AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-11 00:05
200.162.146[.]248AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-11 00:05
200.162.146[.]111AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
200.162.146[.]178AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
200.162.146[.]199AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
200.162.146[.]207AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
200.162.146[.]38AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
200.162.146[.]47AttackerAttacking hostMinsk, Minsk CityAS62240 Clouvider Limited1 feed2026-10-10 20:55
212.102.149[.]75AttackerAttacking hostMinsk, Minsk CityAS209372 WS Telecom Inc1 feed2026-10-10 10:55
178.120.49[.]243MalwareBittorrentNavahrudak, GrodnenskayaAS6697 Republican Unitary Telecommunication Enterprise Beltelecom1 feed · 2 sandbox samples2026-10-09 15:37
82.209.204[.]6MalwareMoziMinsk, Minsk CityAS6697 Republican Unitary Telecommunication Enterprise Beltelecomaggregated list2026-10-09 12:19
37.215.127[.]1AttackerAttacking hostBorisov, MinskAS6697 Republican Unitary Telecommunication Enterprise Beltelecom2 feeds2026-10-09 04:27
46.216.42[.]128AttackerAttacking hostValer’yanovo, MinskAS25106 Mobile TeleSystems JLLC2 feeds2026-10-09 04:27
46.216.199[.]241MalwareMalware downloadMinsk, Minsk CityAS25106 Mobile TeleSystems JLLCaggregated list2026-09-20 10:01
178.172.173[.]84:3333C2EvilginxMinsk, Minsk CityAS6697 Republican Unitary Telecommunication Enterprise Beltelecom1 feed2026-08-16 19:44
212.98.186[.]8MalwareMalicious URLMinsk, Minsk CityAS12406 Business Network Ltdaggregated list—

See every listed IP in Belarus →

Ransomware victims in Belarus

No ransomware victims from Belarus posted in the last 90 days.

Other countries

🇺🇸 United States 17,780🇨🇳 China 10,826🇩🇪 Germany 4,209🇬🇧 United Kingdom 3,654🇷🇺 Russia 3,591🇳🇱 Netherlands 2,321🇮🇳 India 2,035🇫🇷 France 1,533🇧🇷 Brazil 1,402🇸🇬 Singapore 1,360🇰🇷 South Korea 1,328🇭🇰 Hong Kong 1,320🇮🇩 Indonesia 1,188🇨🇦 Canada 883🇵🇰 Pakistan 851🇧🇪 Belgium 757🇯🇵 Japan 735🇺🇦 Ukraine 675🇵🇱 Poland 560🇿🇦 South Africa 557🇲🇾 Malaysia 555🇻🇳 Vietnam 548🇮🇹 Italy 407🇸🇪 Sweden 383All countries →