🇨🇷 Costa Rica: live cyber threat activity

Malicious IPs, malware and ransomware victims in Costa Rica.

8Malicious IPs listed#126 of 182 countries · 0.01% of the world

0New in the last 24hfirst seen by any feed

3Reported by 2+ feedsindependent sources agree

1Ransomware victimsposted in the last 30 days

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

Listed IPs by role.

Network	IPs
AS11830 Instituto Costarricense de Electricidad y Telecom.	2
AS52263 Telecable Economico S.A.	2
AS52228 Cable Tica	1
AS14754 Telgua	1
AS52468 UFINET PANAMA S.A.	1
AS3790 RADIOGRAFICA COSTARRICENSE	1

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
190.171.108[.]25	Attacker	Attacking host	San Pedro, San José	AS52263 Telecable Economico S.A.	1 feed	2026-10-09 10:55
190.113.124[.]155	Malware	Malicious URL	Escazú, San José	AS52263 Telecable Economico S.A.	aggregated list	2026-10-09 04:27
186.151.104[.]185	Malware	Shortcut	Carrillos, Alajuela Province	AS14754 Telgua	1 feed · 3 sandbox samples	2026-10-08 14:20
181.193.24[.]170	Attacker	Attacking host	San José, San José	AS11830 Instituto Costarricense de Electricidad y Telecom.	2 feeds	—
186.15.28[.]212	Attacker	Attacking host	San Juan de Dios, San José	AS52228 Cable Tica	1 feed	—
186.179.67[.]46	Attacker	Attacking host	San José, San José	AS52468 UFINET PANAMA S.A.	1 feed	—
190.10.8[.]95	Attacker	Attacking host	San José, San José	AS3790 RADIOGRAFICA COSTARRICENSE	2 feeds	—
201.203.101[.]30	Attacker	Attacking host	Llorente, Heredia Province	AS11830 Instituto Costarricense de Electricidad y Telecom.	2 feeds	—