🇩🇪 Germany: live cyber threat activity

Malicious IPs, malware and ransomware victims in Germany.

4,042Malicious IPs listed#3 of 182 countries · 6.11% of the world
1,568New in the last 24hfirst seen by any feed
427Reported by 2+ feedsindependent sources agree
36Ransomware victimsposted in the last 30 days

View Germany on the live map →All listed IPs in GermanyRansomware victims in Germany

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C2281
  2. Malware655
  3. Phishing0
  4. Attacker3,106

By state or region

  1. Hesse2,167
  2. North Rhine-Westphalia561
  3. Bavaria428
  4. Baden-Wurttemberg217
  5. Saxony123
  6. Lower Saxony121
  7. Hamburg86
  8. State of Berlin78
  9. Rheinland-Pfalz54
  10. Schleswig-Holstein51
  11. Brandenburg50
  12. Saarland29
  13. Saxony-Anhalt28
  14. Thuringia17
  15. Mecklenburg-Vorpommern14

By city

  1. Frankfurt am Main2,017
  2. Gütersloh259
  3. Munich100
  4. Falkenstein86
  5. Berlin85
  6. Hamburg84
  7. Nuremberg83
  8. Augsburg55
  9. Limburg an der Lahn53
  10. Düsseldorf39
  11. Karlsruhe37
  12. Cologne36
  13. Backnang25
  14. Eschborn18
  15. Norderstedt16

Networks hosting the most

NetworkIPs
AS3209 Vodafone GmbH 360
AS3320 Deutsche Telekom AG 350
AS45102 Alibaba (US) Technology Co., Ltd. 342
AS25369 Hydra Communications Ltd 338
AS14061 DigitalOcean, LLC 257
AS206813 4830.org e. V. 256
AS24940 Hetzner Online GmbH 146
AS51167 Contabo GmbH 131
AS6805 Telefonica Germany GmbH & Co.OHG 130
AS8881 1&1 Versatel GmbH 122
AS60729 Stiftung Erneuerbare Freiheit 70
AS16276 OVH SAS 59
AS197540 netcup GmbH 51
AS398705 Censys, Inc. 47
AS16509 Amazon.com, Inc. 44

Malware families served from Germany

  1. Cerber235
  2. PureRAT45
  3. Tsundere26
  4. Vidar23
  5. Remcos22
  6. AsyncRAT21
  7. AdaptixC220
  8. Bladabindi15
  9. DanaBot13
  10. Cobalt Strike12
  11. Havoc10
  12. Aisuru10
  13. Dacic9
  14. Loki9
  15. Evilginx8

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
107.150.117[.]187AttackerAttacking hostFrankfurt am Main, HesseAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED3 feeds2026-10-12 08:20
145.224.73[.]94AttackerAttacking hostBerlin, State of BerlinAS14593 Space Exploration Technologies Corporation1 feed2026-10-12 08:20
149.88.24[.]230AttackerAttacking hostFrankfurt am Main, HesseAS212238 Datacamp Limited1 feed2026-10-12 08:20
157.22.47[.]104AttackerAttacking hostFrankfurt am Main, HesseAS213954 Global Transit Systems LLC1 feed2026-10-12 08:20
161.35.207[.]127AttackerAttacking hostFrankfurt am Main, HesseAS14061 DigitalOcean, LLC1 feed2026-10-12 08:20
164.92.176[.]76AttackerAttacking hostFrankfurt am Main, HesseAS14061 DigitalOcean, LLC1 feed2026-10-12 08:20
178.201.26[.]162AttackerAttacking hostGiessen, HesseAS3209 Vodafone GmbH1 feed2026-10-12 08:20
178.202.56[.]192AttackerAttacking hostMonheim am Rhein, North Rhine-WestphaliaAS3209 Vodafone GmbH1 feed2026-10-12 08:20
18.156.142[.]154AttackerAttacking hostFrankfurt am Main, HesseAS16509 Amazon.com, Inc.1 feed2026-10-12 08:20
2.208.37[.]119AttackerAttacking hostMunich, BavariaAS6805 Telefonica Germany GmbH & Co.OHG1 feed2026-10-12 08:20
2.243.83[.]196AttackerAttacking hostWerdohl, North Rhine-WestphaliaAS6805 Telefonica Germany GmbH & Co.OHG1 feed2026-10-12 08:20
212.237.175[.]5AttackerAttacking hostUlm, Baden-WurttembergAS48284 SWU TeleNet GmbH1 feed2026-10-12 08:20
217.227.106[.]51AttackerAttacking hostBorken, North Rhine-WestphaliaAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
37.5.242[.]178AttackerAttacking hostLübeck, Schleswig-HolsteinAS3209 Vodafone GmbH1 feed2026-10-12 08:20
46.227.217[.]186AttackerAttacking hostZwickau, SaxonyAS21413 Envia Tel GmbH1 feed2026-10-12 08:20
46.5.35[.]120AttackerAttacking hostBiberach an der Riss, Baden-WurttembergAS3209 Vodafone GmbH1 feed2026-10-12 08:20
47.64.115[.]203AttackerAttacking hostZusmarshausen, BavariaAS3209 Vodafone GmbH1 feed2026-10-12 08:20
62.227.90[.]147AttackerAttacking hostDüsseldorf, North Rhine-WestphaliaAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
77.20.252[.]229AttackerAttacking hostGarstedt, Lower SaxonyAS3209 Vodafone GmbH1 feed2026-10-12 08:20
79.210.102[.]209AttackerAttacking hostDüsseldorf, North Rhine-WestphaliaAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
79.231.196[.]60AttackerAttacking hostMarktoberdorf, BavariaAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
79.234.179[.]126AttackerAttacking hostBad Bevensen, Lower SaxonyAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
79.250.34[.]143AttackerAttacking hostEmmerich, North Rhine-WestphaliaAS3320 Deutsche Telekom AG1 feed2026-10-12 08:20
80.171.187[.]101AttackerAttacking hostFrankfurt am Main, HesseAS6805 Telefonica Germany GmbH & Co.OHG1 feed2026-10-12 08:20
80.171.251[.]79AttackerAttacking hostNeukirchen-Vluyn, North Rhine-WestphaliaAS6805 Telefonica Germany GmbH & Co.OHG1 feed2026-10-12 08:20

See every listed IP in Germany →

Ransomware victims in Germany

36 posted in the last 30 days, 142 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 22:09dwi-bau.desafepayOther
2026-10-09 19:14bayerBlack XHealthcare
2026-10-08 03:32grunenwald.comlockbit5Other
2026-10-07 18:53University of RostockPanzerEducation
2026-10-07 16:54LeadecanubisManufacturing
2026-10-07 05:06architekt-vondanwitz.deincransomProfessional Services
2026-10-05 19:36bwi-bau.desafepayProfessional Services
2026-10-05 19:34t-systems.comsafepayTechnology
2026-10-05 07:31Bender TribunenbaulamashtuManufacturing
2026-10-02 14:04Inova Semiconductors GmbHqilinManufacturing
2026-09-30 20:11wolfusofsky.desafepay—
2026-09-30 17:37TitusplayTechnology
2026-09-30 17:36Orth AutomobileplayManufacturing
2026-09-30 13:36econ-tec.comsafepayTechnology
2026-09-30 13:06Becker LogistiklamashtuTransportation

All ransomware victims in Germany →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →