🇬🇷 Greece: live cyber threat activity

Malicious IPs, malware and ransomware victims in Greece.

22Malicious IPs listed#94 of 182 countries · 0.03% of the world

8New in the last 24hfirst seen by any feed

5Reported by 2+ feedsindependent sources agree

2Ransomware victimsposted in the last 30 days

View Greece on the live map →All listed IPs in Greece Ransomware victims in Greece

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Attica12
Central Macedonia5
Thessaly4
Crete1

By city

Athens7
Pylaia2
Zografos1
Pachi1
Kalamaria1
Élafos1
Pigí1
Nea Potidea1
Chalandri1
Drapetsona1
Nea Anatoli1
Alimos1
Trikala1
Týrnavos1
Ampelóna1

Networks hosting the most

Network	IPs
AS6799 Ote SA (Hellenic Telecommunications Organisation)	10
AS22363 Powerhouse Management, Inc.	2
AS3323 National Technical University of Athens	1
AS212238 Datacamp Limited	1
AS29247 Ote SA (Hellenic Telecommunications Organisation)	1
AS14593 Space Exploration Technologies Corporation	1
AS208172 Proton AG	1
AS25472 Nova Telecommunications & Media Single Member S.A	1
AS199458 LLC Rusbuilding	1
AS9009 M247 Europe SRL	1
AS3329 VODAFONE-PANAFON HELLENIC TELECOMMUNICATIONS COMPANY SA	1
AS5408 National Infrastructures for Research and Technology S.A.	1

Malware families served from Greece

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
149.102.246[.]99	Attacker	Attacking host	Athens, Attica	AS212238 Datacamp Limited	2 feeds	2026-10-12 04:35
159.26.121[.]41	Attacker	Attacking host	Kalamaria, Central Macedonia	AS208172 Proton AG	2 feeds	2026-10-12 04:35
2a02[:]586[:]7a3c[:]2c00[:]c812[:]2690[:]c248[:]b12f	Attacker	Attacking host	Pigí, Thessaly	AS6799 Ote SA (Hellenic Telecommunications Organisation)	2 feeds	2026-10-12 04:35
79.131.254[.]8	Attacker	Attacking host	Drapetsona, Attica	AS6799 Ote SA (Hellenic Telecommunications Organisation)	2 feeds	2026-10-12 04:35
94.67.152[.]120	Malware	Malicious IP	Týrnavos, Thessaly	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed	2026-10-12 04:35
150.228.61[.]247	Attacker	Scanner / attacker	Athens, Attica	AS14593 Space Exploration Technologies Corporation	1 feed	2026-10-12 00:00
2a02[:]586[:]6e30[:]ee00[:]9d7[:]15d2[:]54ef[:]662	Attacker	Attacking host	Élafos, Central Macedonia	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed	2026-10-11 20:55
147.102.131[.]133	Attacker	Attacking host	Zografos, Attica	AS3323 National Technical University of Athens	1 feed	2026-10-11 18:41
45.139.215[.]185	Malware	Contacted by malware	Pylaia, Central Macedonia	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed · 4 sandbox samples	2026-10-09 14:24
45.139.215[.]181	Malware	Opencandy	Pylaia, Central Macedonia	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed · 3 sandbox samples	2026-10-09 14:06
176.58.246[.]201	Attacker	Attacking host	Athens, Attica	AS25472 Nova Telecommunications & Media Single Member S.A	1 feed	2026-10-09 04:27
83.235.16[.]111	Attacker	Attacking host	Nea Anatoli, Crete	AS6799 Ote SA (Hellenic Telecommunications Organisation)	2 feeds	2026-10-09 04:27
45.92.33[.]82	Attacker	On multiple blocklists	Nea Potidea, Central Macedonia	AS9009 M247 Europe SRL	1 feed	2026-10-09 04:27
2.85.58[.]246	Malware	Malware download	Ampelóna, Thessaly	AS6799 Ote SA (Hellenic Telecommunications Organisation)	aggregated list	2026-10-09 03:00
83.212.99[.]68	Malware	Contacted by malware	Athens, Attica	AS5408 National Infrastructures for Research and Technology S.A.	1 feed · 7 sandbox samples	2026-10-06 16:38
31.6.11[.]79:7777	C2	AsyncRAT	Athens, Attica	AS22363 Powerhouse Management, Inc.	1 feed	2026-09-30 19:45
31.6.11[.]231:7777	C2	AsyncRAT	Athens, Attica	AS22363 Powerhouse Management, Inc.	1 feed	2026-09-29 19:45
45.142.31[.]82:52125	C2	AdaptixC2	Athens, Attica	AS199458 LLC Rusbuilding	1 feed	2026-08-31 19:46
149.210.8[.]34	Attacker	Attacking host	Pachi, Attica	AS29247 Ote SA (Hellenic Telecommunications Organisation)	1 feed	—
62.38.20[.]61	Attacker	Attacking host	Chalandri, Attica	AS3329 VODAFONE-PANAFON HELLENIC TELECOMMUNICATIONS COMPANY SA	1 feed	—
85.72.53[.]103	Attacker	Attacking host	Alimos, Attica	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed	—
87.202.113[.]240	Attacker	Attacking host	Trikala, Thessaly	AS6799 Ote SA (Hellenic Telecommunications Organisation)	1 feed	—

See every listed IP in Greece →

Ransomware victims in Greece

2 posted in the last 30 days, 6 in 90.

Sectors hit (30 days)

Other1

Groups (30 days)

Posted (UTC)	Victim	Group	Sector
2026-10-02 07:50	UNION FA	Deadlock	Other
2026-09-30 03:37	Agospap	thegentlemen	—
2026-08-19 18:05	grecosteel.com	settra	Manufacturing
2026-08-14 05:55	EKEPIS	thegentlemen	—
2026-08-10 12:21	MACOFIN HELLAS S.A.	Global Secret Group	Financial Services
2026-08-10 08:09	Mikel Coffee	thegentlemen	Retail & E-Commerce

All ransomware victims in Greece →