🇧🇪 Belgium: live cyber threat activity

Malicious IPs, malware and ransomware victims in Belgium.

726Malicious IPs listed#16 of 182 countries · 1.1% of the world
235New in the last 24hfirst seen by any feed
118Reported by 2+ feedsindependent sources agree
4Ransomware victimsposted in the last 30 days

View Belgium on the live map →All listed IPs in BelgiumRansomware victims in Belgium

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C26
  2. Malware3
  3. Phishing0
  4. Attacker717

By state or region

  1. Brussels Capital702
  2. Flanders20
  3. Wallonia4

By city

  1. Brussels700
  2. Zaventem14
  3. Charleroi1
  4. Bruges1
  5. Antwerp1
  6. Hoboken1
  7. Evere1
  8. Mechelen1
  9. Auderghem1
  10. Lodelinsart1
  11. Tongerlo1
  12. Gembloux1
  13. Mont-sur-Marchienne1
  14. Lauwe1

Networks hosting the most

NetworkIPs
AS396982 Google LLC 691
AS16276 OVH SAS 10
AS9009 M247 Europe SRL 8
AS5432 Proximus NV 4
AS212238 Datacamp Limited 3
AS47377 Orange Belgium SA 3
AS13335 Cloudflare, Inc. 1
AS399486 12651980 CANADA INC. 1
AS49453 Global Layer B.V. 1
AS43515 Google Ireland Limited 1
AS206804 EstNOC OU 1
AS6848 Telenet BV 1
AS34665 Petersburg Internet Network ltd. 1

Malware families served from Belgium

  1. PureRAT1
  2. Mirai1
  3. Alien1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
207.175.138[.]62AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 08:20
34.140.170[.]45AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 08:20
158.173.67[.]88AttackerAttacking hostBrussels, Brussels CapitalAS212238 Datacamp Limited1 feed2026-10-12 07:55
34.62.93[.]48AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 07:50
34.52.180[.]255AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 07:15
34.53.129[.]203AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 07:15
34.14.3[.]149AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:41
34.62.47[.]85AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:41
34.76.123[.]141AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:41
34.76.151[.]59AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:41
34.22.226[.]31:23C2MiraiBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:11
34.140.107[.]185AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:10
34.62.46[.]22AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 06:10
34.38.168[.]248AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 05:35
207.175.32[.]174AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 05:00
146.70.176[.]222AttackerAttacking hostBruges, FlandersAS9009 M247 Europe SRL1 feed2026-10-12 04:50
104.155.92[.]149AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC3 feeds2026-10-12 04:35
104.199.86[.]41AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 04:35
146.148.119[.]67AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 04:35
192.158.31[.]44AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 04:35
207.175.118[.]159AttackerMalicious IPBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 04:35
207.175.119[.]47AttackerAttacking hostBrussels, Brussels CapitalAS396982 Google LLC2 feeds2026-10-12 04:35
207.175.120[.]220AttackerMalicious IPBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 04:35
207.175.123[.]163AttackerMalicious IPBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 04:35
207.175.144[.]195AttackerMalicious IPBrussels, Brussels CapitalAS396982 Google LLC1 feed2026-10-12 04:35

See every listed IP in Belgium →

Ransomware victims in Belgium

4 posted in the last 30 days, 14 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-30 13:36assist2enjoy.besafepayOther
2026-09-30 03:34Corswarem Groupthegentlemen—
2026-09-28 07:31eagroep.comsafepayAgriculture and Food Production
2026-09-25 15:33CENELECeverestProfessional Services
2026-08-27 13:01takt.belockbit5Technology
2026-08-16 15:58WEBA MeubelenqilinRetail & E-Commerce
2026-08-14 14:34Connectionsqilin—
2026-08-09 10:59Université Libre de BruxellesqilinEducation
2026-08-07 08:03LensAss ArchitectenthegentlemenProfessional Services
2026-08-05 13:11Rodschinson InvestmenteverestFinancial Services
2026-08-01 05:30CEN and CeneleccoinbasecartelOther
2026-07-30 07:59AdpoqilinTransportation
2026-07-30 07:58OrimarqilinOther
2026-07-22 17:20windiam.comBrainCipherTechnology

All ransomware victims in Belgium →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →