🇭🇷 Croatia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Croatia.

22Malicious IPs listed#92 of 182 countries · 0.03% of the world
6New in the last 24hfirst seen by any feed
4Reported by 2+ feedsindependent sources agree
3Ransomware victimsposted in the last 30 days

View Croatia on the live map →All listed IPs in CroatiaRansomware victims in Croatia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C29
  2. Malware1
  3. Phishing0
  4. Attacker12

By state or region

  1. Zagreb13
  2. Karlovac2
  3. Varaždin2
  4. Istria1
  5. Međimurje1
  6. County of Osijek-Baranja1
  7. Sisak-Moslavina1
  8. Primorje-Gorski Kotar1

By city

  1. Zagreb13
  2. Karlovac2
  3. Pula1
  4. Varaždin1
  5. Gardinovec1
  6. Osijek1
  7. Jakopovec1
  8. Sisak1
  9. Crikvenica1

Networks hosting the most

NetworkIPs
AS12810 A1 Hrvatska d.o.o. 6
AS5391 Hrvatski Telekom d.d. 5
AS212238 Datacamp Limited 3
AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP 3
AS57888 Telesat d.o.o. 2
AS14593 Space Exploration Technologies Corporation 1
AS34362 Terrakom d.o.o. 1
AS44377 MAGIC NET D.O.O. 1

Malware families served from Croatia

  1. DanaBot6
  2. Potassium3

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
176.62.38[.]143AttackerMalicious IPPula, IstriaAS34362 Terrakom d.o.o.1 feed2026-10-12 04:35
178.210.189[.]172AttackerAttacking hostZagreb, ZagrebAS57888 Telesat d.o.o.2 feeds2026-10-12 04:35
93.137.242[.]143AttackerAttacking hostOsijek, County of Osijek-BaranjaAS5391 Hrvatski Telekom d.d.2 feeds2026-10-12 04:35
150.228.3[.]35AttackerAttacking hostZagreb, ZagrebAS14593 Space Exploration Technologies Corporation1 feed2026-10-12 02:25
92.242.234[.]138AttackerAttacking hostGardinovec, MeđimurjeAS44377 MAGIC NET D.O.O.1 feed2026-10-12 01:20
85.203.20[.]71AttackerAttacking hostZagreb, ZagrebAS212238 Datacamp Limited1 feed2026-10-11 22:00
178.210.189[.]16AttackerAttacking hostZagreb, ZagrebAS57888 Telesat d.o.o.2 feeds2026-10-11 04:31
93.137.31[.]187AttackerMalicious IPJakopovec, VaraždinAS5391 Hrvatski Telekom d.d.1 feed2026-10-11 04:31
149.102.247[.]250AttackerAttacking hostZagreb, ZagrebAS212238 Datacamp Limited1 feed2026-10-09 04:27
5.181.2[.]8:7193C2PotassiumZagreb, ZagrebAS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP1 feed2026-10-04 06:54
5.181.2[.]75:15987C2PotassiumZagreb, ZagrebAS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP1 feed2026-10-02 06:30
5.181.2[.]159:7193C2PotassiumZagreb, ZagrebAS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP1 feed2026-09-26 06:20
37.244.231[.]39:4433C2DanaBotKarlovac, KarlovacAS12810 A1 Hrvatska d.o.o.1 feed2026-09-23 19:46
178.160.10[.]203MalwareMalware downloadCrikvenica, Primorje-Gorski KotarAS5391 Hrvatski Telekom d.d.aggregated list2026-09-21 07:07
109.227.48[.]165:4433C2DanaBotZagreb, ZagrebAS12810 A1 Hrvatska d.o.o.1 feed2026-09-15 09:43
37.244.232[.]113:4433C2DanaBotVaraždin, VaraždinAS12810 A1 Hrvatska d.o.o.1 feed2026-09-12 09:46
109.227.42[.]108:4433C2DanaBotZagreb, ZagrebAS12810 A1 Hrvatska d.o.o.1 feed2026-09-08 19:43
94.250.191[.]120:4433C2DanaBotSisak, Sisak-MoslavinaAS12810 A1 Hrvatska d.o.o.1 feed2026-09-07 19:47
37.244.231[.]231:4433C2DanaBotKarlovac, KarlovacAS12810 A1 Hrvatska d.o.o.1 feed2026-09-05 09:46
154.47.29[.]154AttackerAttacking hostZagreb, ZagrebAS212238 Datacamp Limited1 feed—
195.29.176[.]178AttackerAttacking hostZagreb, ZagrebAS5391 Hrvatski Telekom d.d.2 feeds—
195.29.198[.]122AttackerAttacking hostZagreb, ZagrebAS5391 Hrvatski Telekom d.d.1 feed—

See every listed IP in Croatia →

Ransomware victims in Croatia

3 posted in the last 30 days, 4 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 04:20Ministarstvo poljoprivrede, šumarstva i ribarstvaBarracudaAgriculture and Food Production
2026-09-15 07:13Ivetathegentlemen—
2026-09-12 10:27meridian16.hrkrybitProfessional Services
2026-07-25 12:57Plitvička Jezera Nacionalni ParkqilinHospitality

All ransomware victims in Croatia →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →