🇬🇪 Georgia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Georgia.

19Malicious IPs listed#100 of 182 countries · 0.03% of the world

4New in the last 24hfirst seen by any feed

7Reported by 2+ feedsindependent sources agree

1Ransomware victimsposted in the last 30 days

View Georgia on the live map →All listed IPs in Georgia Ransomware victims in Georgia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Tbilisi13
T'bilisi5
Adjara1

By city

Tbilisi12
T'bilisi4
Okroq’ana2
K'obulet'i1

Networks hosting the most

Network	IPs
AS35805 JSC "Silknet"	5
AS16010 Magticom Ltd.	3
AS34797 System Net Ltd	2
AS49254 Alternet Ltd	2
AS34666 JSC "Global Erty"	2
AS199625 Netcom LLC	1
AS210580 Internet Exchange Association of Georgia	1
AS209012 MULTISOFT LLC	1
AS20771 Caucasus Online Ltd.	1
AS49628 LLC Skytel	1

Malware families served from Georgia

No malware family attributed to IPs here.

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
92.241.94[.]233	Attacker	Attacking host	Tbilisi, Tbilisi	AS35805 JSC "Silknet"	1 feed	2026-10-12 07:50
176.74.110[.]147	Attacker	Attacking host	Tbilisi, Tbilisi	AS34797 System Net Ltd	2 feeds	2026-10-12 04:35
188.92.209[.]202	Attacker	Attacking host	T'bilisi, T'bilisi	AS49254 Alternet Ltd	2 feeds	2026-10-12 04:35
94.43.139[.]153	Malware	Malicious URL	Tbilisi, T'bilisi	AS35805 JSC "Silknet"	aggregated list	2026-10-12 04:35
193.24.126[.]226	Attacker	Malicious IP	Tbilisi, Tbilisi	AS199625 Netcom LLC	1 feed	2026-10-11 04:31
212.58.102[.]235	Attacker	Attacking host	Okroq’ana, Tbilisi	AS16010 Magticom Ltd.	2 feeds	2026-10-11 04:31
94.43.11[.]19	Attacker	Attacking host	Tbilisi, Tbilisi	AS35805 JSC "Silknet"	2 feeds	2026-10-10 04:30
188.92.209[.]156	Attacker	Attacking host	T'bilisi, T'bilisi	AS49254 Alternet Ltd	1 feed	2026-10-09 07:15
212.58.119[.]217	Attacker	Attacking host	K'obulet'i, Adjara	AS16010 Magticom Ltd.	2 feeds	2026-10-09 04:27
85.117.58[.]67	Attacker	Attacking host	Tbilisi, Tbilisi	AS20771 Caucasus Online Ltd.	2 feeds	2026-10-09 04:27
81.16.249[.]96	Malware	Malicious URL	Tbilisi, Tbilisi	AS34666 JSC "Global Erty"	aggregated list	2026-10-09 04:27
188.121.201[.]22	Malware	Malware download	T'bilisi, T'bilisi	AS16010 Magticom Ltd.	aggregated list	2026-09-27 15:16
176.74.71[.]59	Attacker	Attacking host	Tbilisi, Tbilisi	AS34797 System Net Ltd	1 feed	—
178.134.214[.]198	Attacker	Attacking host	Tbilisi, Tbilisi	AS35805 JSC "Silknet"	1 feed	—
194.31.8[.]12	Attacker	Attacking host	Tbilisi, Tbilisi	AS210580 Internet Exchange Association of Georgia	1 feed	—
2.57.217[.]229	Attacker	Attacking host	Tbilisi, Tbilisi	AS209012 MULTISOFT LLC	2 feeds	—
5.152.112[.]188	Attacker	Attacking host	T'bilisi, T'bilisi	AS35805 JSC "Silknet"	1 feed	—
185.168.227[.]130	Malware	Malicious URL	Tbilisi, Tbilisi	AS49628 LLC Skytel	aggregated list	—
81.16.247[.]81	Malware	Malicious URL	Okroq’ana, Tbilisi	AS34666 JSC "Global Erty"	aggregated list	—

See every listed IP in Georgia →

Ransomware victims in Georgia

1 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

Technology1

Groups (30 days)

clop1

Posted (UTC)	Victim	Group	Sector
2026-09-23 14:38	KVHELI-WORDPRESS.COM	clop	Technology
2026-09-12 10:32	www.tiflispalace.ge	krybit	Hospitality
2026-09-07 21:50	Superstore	thegentlemen	Retail & E-Commerce

All ransomware victims in Georgia →