🇧🇦 Bosnia and Herzegovina: live cyber threat activity

Malicious IPs, malware and ransomware victims in Bosnia and Herzegovina.

21Malicious IPs listed#96 of 182 countries · 0.03% of the world

8New in the last 24hfirst seen by any feed

4Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View Bosnia and Herzegovina on the live map →All listed IPs in Bosnia and Herzegovina Ransomware victims in Bosnia and Herzegovina

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Federation of B&H15
Srpska6

By city

Sarajevo12
Banja Luka5
Gračanica1
Orahovica Donja1
Modriča1
Blagaj1

Networks hosting the most

Network	IPs
AS9146 BH Telecom d.d. Sarajevo	8
AS21107 Blicnet d.o.o. Banja Luka	5
AS42560 Telemach BH d.o.o. Sarajevo	3
AS216200 Dinnet d.o.o. Gracanica	1
AS202632 TXTV d.o.o. Tuzla	1
AS25144 "Telekomunikacije Republike Srpske" akcionarsko drustvo Banja Luka	1
AS209854 Cyberzone S.A.	1
AS16178 Logosoft , information engineering and Internet providing	1

Malware families served from Bosnia and Herzegovina

Zitirezc1

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
89.117.46[.]52	Attacker	Attacking host	Sarajevo, Federation of B&H	AS209854 Cyberzone S.A.	1 feed	2026-10-12 08:20
109.175.29[.]39	Malware	Zitirezc	Gračanica, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed · 494 sandbox samples	2026-10-12 05:00
188.246.73[.]106	Attacker	Attacking host	Banja Luka, Srpska	AS21107 Blicnet d.o.o. Banja Luka	2 feeds	2026-10-12 04:35
77.78.213[.]90	Attacker	Attacking host	Sarajevo, Federation of B&H	AS42560 Telemach BH d.o.o. Sarajevo	2 feeds	2026-10-12 04:35
109.176.240[.]23	Attacker	Attacking host	Orahovica Donja, Federation of B&H	AS216200 Dinnet d.o.o. Gracanica	1 feed	2026-10-12 03:55
188.246.73[.]73	Attacker	Attacking host	Banja Luka, Srpska	AS21107 Blicnet d.o.o. Banja Luka	1 feed	2026-10-12 01:20
188.246.73[.]82	Attacker	Attacking host	Banja Luka, Srpska	AS21107 Blicnet d.o.o. Banja Luka	1 feed	2026-10-11 22:31
92.36.151[.]111	Attacker	Attacking host	Blagaj, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed	2026-10-11 21:25
188.246.73[.]114	Attacker	Attacking host	Banja Luka, Srpska	AS21107 Blicnet d.o.o. Banja Luka	2 feeds	2026-10-11 04:31
188.246.73[.]79	Attacker	Malicious IP	Banja Luka, Srpska	AS21107 Blicnet d.o.o. Banja Luka	1 feed	2026-10-11 04:31
77.238.209[.]82	Malware	Malicious URL	Sarajevo, Federation of B&H	AS42560 Telemach BH d.o.o. Sarajevo	aggregated list	2026-10-11 04:31
195.222.59[.]154	Attacker	Attacking host	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed	2026-10-11 04:30
217.75.193[.]34	Malware	Malicious URL	Sarajevo, Federation of B&H	AS16178 Logosoft , information engineering and Internet providing	aggregated list	2026-10-10 04:30
195.222.43[.]138	Attacker	Attacking host	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	2 feeds	—
195.222.57[.]183	Attacker	Attacking host	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed	—
195.222.57[.]190	Attacker	Attacking host	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed	—
31.47.17[.]234	Attacker	Attacking host	Sarajevo, Federation of B&H	AS202632 TXTV d.o.o. Tuzla	1 feed	—
45.131.118[.]60	Attacker	Attacking host	Modriča, Srpska	AS25144 "Telekomunikacije Republike Srpske" akcionarsko drustvo Banja Luka	1 feed	—
77.78.203[.]131	Attacker	Attacking host	Sarajevo, Federation of B&H	AS42560 Telemach BH d.o.o. Sarajevo	1 feed	—
80.65.90[.]155	Attacker	Attacking host	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	1 feed	—
185.12.78[.]161	Malware	Malicious URL	Sarajevo, Federation of B&H	AS9146 BH Telecom d.d. Sarajevo	aggregated list	—

See every listed IP in Bosnia and Herzegovina →

Ransomware victims in Bosnia and Herzegovina

0 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)	Victim	Group	Sector
2026-09-09 12:53	Bosnia and Herzegovina Mine Action Center	emperador	Government & Defense

All ransomware victims in Bosnia and Herzegovina →