🇰🇬 Kyrgyzstan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Kyrgyzstan.

18Malicious IPs listed#100 of 182 countries · 0.03% of the world

2New in the last 24hfirst seen by any feed

4Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View Kyrgyzstan on the live map →All listed IPs in Kyrgyzstan

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Bishkek16
Chuy Region1
Osh Region1

By city

Bishkek16
Lebedinovka1
Osh1

Networks hosting the most

Network	IPs
AS12764 AKNET Ltd.	8
AS12997 OJSC Kyrgyztelecom	3
AS29061 Saimanet Telecomunications CJSC	2
AS39819 Optima Telecom Ltd.	2
AS42837 Extra Line LLC	1
AS41750 Mega-Line Ltd.	1
AS216358 KSB CB CJSC	1

Malware families served from Kyrgyzstan

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
85.209.11[.]85	Malware	Crifi	Bishkek, Bishkek	AS216358 KSB CB CJSC	1 feed · 74 sandbox samples	2026-10-12 09:04
31.186.54[.]111	Malware	Malicious URL	Bishkek, Bishkek	AS12764 AKNET Ltd.	aggregated list	2026-10-12 04:35
212.112.113[.]76	Malware	Gandcrab	Bishkek, Bishkek	AS12764 AKNET Ltd.	1 feed · 19 sandbox samples	2026-10-11 08:34
212.112.115[.]77	Malware	Gandcrab	Bishkek, Bishkek	AS12764 AKNET Ltd.	1 feed · 19 sandbox samples	2026-10-11 08:34
212.42.103[.]24	Malware	Gandcrab	Bishkek, Bishkek	AS42837 Extra Line LLC	1 feed · 32 sandbox samples	2026-10-11 08:34
85.113.19[.]18	Malware	Phorpiex	Osh, Osh Region	AS12997 OJSC Kyrgyztelecom	1 feed · 18 sandbox samples	2026-10-11 07:23
212.112.107[.]11	Malware	Phorpiex	Bishkek, Bishkek	AS12764 AKNET Ltd.	1 feed · 31 sandbox samples	2026-10-11 05:59
212.112.127[.]34	Malware	Contacted by malware	Bishkek, Bishkek	AS12764 AKNET Ltd.	1 feed · 4 sandbox samples	2026-10-11 05:59
212.97.2[.]11	Attacker	Attacking host	Bishkek, Bishkek	AS12997 OJSC Kyrgyztelecom	2 feeds	2026-10-11 04:31
91.213.233[.]138	Attacker	Malicious IP	Bishkek, Bishkek	AS39819 Optima Telecom Ltd.	1 feed · 10 sandbox samples	2026-10-11 04:31
77.235.20[.]52	Attacker	Attacking host	Bishkek, Bishkek	AS41750 Mega-Line Ltd.	1 feed	2026-10-09 16:50
91.207.28[.]33	Malware	Emotet	Bishkek, Bishkek	AS39819 Optima Telecom Ltd.	1 feed · 102 sandbox samples	2026-10-09 05:48
212.112.110[.]243	Malware	Midie	Bishkek, Bishkek	AS12764 AKNET Ltd.	1 feed · 7 sandbox samples	2026-10-08 12:01
217.29.20[.]226	Malware	Phorpiex	Bishkek, Bishkek	AS29061 Saimanet Telecomunications CJSC	1 feed · 17 sandbox samples	2026-10-08 04:00
212.112.108[.]122	Attacker	Attacking host	Lebedinovka, Chuy Region	AS12764 AKNET Ltd.	1 feed	—
212.112.98[.]73	Attacker	Attacking host	Bishkek, Bishkek	AS12764 AKNET Ltd.	2 feeds	—
217.29.30[.]135	Attacker	Attacking host	Bishkek, Bishkek	AS29061 Saimanet Telecomunications CJSC	2 feeds	—
85.113.1[.]243	Attacker	Attacking host	Bishkek, Bishkek	AS12997 OJSC Kyrgyztelecom	2 feeds	—

See every listed IP in Kyrgyzstan →

Ransomware victims in Kyrgyzstan

No ransomware victims from Kyrgyzstan posted in the last 90 days.