🇨🇿 Czechia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Czechia.

72Malicious IPs listed#56 of 182 countries · 0.11% of the world
20New in the last 24hfirst seen by any feed
29Reported by 2+ feedsindependent sources agree
6Ransomware victimsposted in the last 30 days

View Czechia on the live map →All listed IPs in CzechiaRansomware victims in Czechia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C26
  2. Malware13
  3. Phishing0
  4. Attacker53

By state or region

  1. Prague45
  2. Central Bohemia4
  3. Moravian-Silesian Region4
  4. Hradec Králové Region3
  5. Jihočeský kraj3
  6. South Bohemian Region3
  7. Olomouc Region2
  8. Moravskoslezský1
  9. Zlín1
  10. Ústí nad Labem Region1
  11. South Moravian1
  12. Hlavní město Praha1
  13. Pardubický1
  14. Pardubice Region1
  15. Královéhradecký kraj1

By city

  1. Prague34
  2. Jinonice6
  3. Hluboká nad Vltavou3
  4. Hať3
  5. Příbram2
  6. Stodůlky2
  7. Čakovice1
  8. Brodek u Konice1
  9. Velké Poříčí1
  10. Čeladná1
  11. Chotěvice1
  12. Rožnov pod Radhoštěm1
  13. Řepy1
  14. Úpice1
  15. Údlice1

Networks hosting the most

NetworkIPs
AS16276 OVH SAS 8
AS206092 F.N.S. HOLDINGS LIMITED 7
AS16019 Vodafone Czech Republic a.s. 5
AS197846 Radovan Ochvat trading as SAO Computers 5
AS5610 O2 Czech Republic, a.s. 4
AS197019 WEDOS Internet, a.s. 3
AS49767 O2 Czech Republic, a.s. 2
AS9009 M247 Europe SRL 2
AS24806 INTERNET CZ, a.s. 2
AS35592 Coolhousing s.r.o. 2
AS210712 ISP Alliance a.s. 2
AS42908 O2 Czech Republic, a.s. 1
AS15685 CASABLANCA INT a.s. 1
AS48574 T-Mobile Czech Republic a.s. 1
AS174 Cogent Communications 1

Malware families served from Czechia

  1. Remcos2
  2. Sality2
  3. Mirai1
  4. AdaptixC21
  5. Agentb1
  6. Cycbot1
  7. Emotet1
  8. Sliver1
  9. Abtrojan1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
109.72.12[.]37AttackerAttacking hostPříbram, Central BohemiaAS49767 O2 Czech Republic, a.s.1 feed2026-10-12 08:20
85.70.240[.]75AttackerAttacking hostRaduň, Moravian-Silesian RegionAS5610 O2 Czech Republic, a.s.1 feed2026-10-12 05:00
109.108.113[.]60AttackerAttacking hostPrague, PragueAS42908 O2 Czech Republic, a.s.2 feeds2026-10-12 04:35
185.138.69[.]94AttackerAttacking hostVelké Poříčí, Hradec Králové RegionAS197393 ISP Alliance a.s.2 feeds2026-10-12 04:35
187.14.124[.]239AttackerAttacking hostPrague, PragueAS136787 PacketHub S.A.2 feeds2026-10-12 04:35
192.162.98[.]180AttackerAttacking hostChotěvice, Hradec Králové RegionAS42000 Futruy s.r.o.2 feeds2026-10-12 04:35
2a02[:]2b88[:]2[:]417[:][:]1AttackerMalicious IPHluboká nad Vltavou, Jihočeský krajAS197019 WEDOS Internet, a.s.1 feed2026-10-12 04:35
31.222.15[.]38AttackerAttacking hostHať, MoravskoslezskýAS197846 Radovan Ochvat trading as SAO Computers2 feeds2026-10-12 04:35
31.30.164[.]243AttackerAttacking hostStodůlky, PragueAS16019 Vodafone Czech Republic a.s.2 feeds2026-10-12 04:35
45.145.220[.]193AttackerAttacking hostÚpice, Hradec Králové RegionAS200918 Pavel Zizka2 feeds2026-10-12 04:35
46.29.224[.]18AttackerAttacking hostÚdlice, Ústí nad Labem RegionAS47232 ISP Alliance a.s.2 feeds2026-10-12 04:35
89.221.215[.]23AttackerMalicious IPHluboká nad Vltavou, Jihočeský krajAS197019 WEDOS Internet, a.s.1 feed2026-10-12 04:35
109.235.7[.]1MalwareMalware downloadPrague, PragueAS210712 ISP Alliance a.s.aggregated list2026-10-12 04:35
83.208.70[.]70AttackerAttacking hostStřelské Hoštice, South Bohemian RegionAS5610 O2 Czech Republic, a.s.1 feed2026-10-12 04:35
212.192.241[.]62MalwareAgentbPrague, Prague 1 feed · 869 sandbox samples2026-10-12 01:47
172.68.213[.]206AttackerAttacking hostPrague, PragueAS13335 Cloudflare, Inc.1 feed2026-10-11 23:40
31.47.99[.]66AttackerAttacking hostRožnov pod Radhoštěm, ZlínAS8251 FreeTel, s.r.o.1 feed2026-10-11 22:31
31.170.179[.]179MalwareCycbotPrague, PragueAS35236 UVT Internet s.r.o.1 feed · 10 sandbox samples2026-10-11 14:59
51.89.38[.]139AttackerAttacking hostPrague, PragueAS16276 OVH SAS1 feed2026-10-11 14:20
109.123.211[.]81:44444C2MiraiPrague, PragueAS15685 CASABLANCA INT a.s.1 feed2026-10-11 09:08
46.28.111[.]142MalwareEmotetHluboká nad Vltavou, Jihočeský krajAS197019 WEDOS Internet, a.s.1 feed · 443 sandbox samples2026-10-11 08:34
51.89.38[.]140AttackerAttacking hostPrague, PragueAS16276 OVH SAS1 feed2026-10-11 07:46
77.93.211[.]244MalwareContacted by malwareBrno, South MoravianAS24971 MasterDC s.r.o.1 feed · 2 sandbox samples2026-10-11 05:39
178.77.228[.]132AttackerMalicious IPBrodek u Konice, Olomouc RegionAS16019 Vodafone Czech Republic a.s.1 feed2026-10-11 04:31
203.26.81[.]1AttackerAttacking hostPrague, PragueAS206092 F.N.S. HOLDINGS LIMITED2 feeds2026-10-11 04:31

See every listed IP in Czechia →

Ransomware victims in Czechia

6 posted in the last 30 days, 16 in 90.

Posted (UTC)VictimGroupSector
2026-10-09 19:23Machine srothegentlemenManufacturing
2026-10-02 09:31www.kres.czkrybit—
2026-09-28 07:31sumperk.czsafepayRetail & E-Commerce
2026-09-23 14:33PALIG.COMclop—
2026-09-23 07:40SeznammedusalockerTechnology
2026-09-16 18:54SEVENOAKS s.r.o.emperador—
2026-08-30 09:25kdynium.czZaWooTechnology
2026-08-27 13:01dece.czlockbit5Technology
2026-08-22 07:59Freelomspacebears—
2026-08-19 11:58www.mestojilemnice.czkrybitOther
2026-08-16 17:52SAGASTA sroPanzer—
2026-08-07 08:02ZS Salovnovathegentlemen—
2026-07-23 15:07Ceska filharmoniethegentlemenOther
2026-07-21 12:53Novasport s.r.o.akiraRetail & E-Commerce
2026-07-17 00:28www.lagus.czkrybitProfessional Services

All ransomware victims in Czechia →

Other countries