🇱🇻 Latvia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Latvia.

41Malicious IPs listed#75 of 182 countries · 0.06% of the world
8New in the last 24hfirst seen by any feed
10Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Latvia on the live map →All listed IPs in LatviaRansomware victims in Latvia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C28
  2. Malware13
  3. Phishing0
  4. Attacker20

By state or region

  1. Riga39
  2. Liepaja1
  3. Tukums Municipality1

By city

  1. Riga39
  2. Liepāja1
  3. Tukums1

Networks hosting the most

NetworkIPs
AS56971 CGI GLOBAL LIMITED 11
AS43513 Sia Nano IT 5
AS212496 SIA GOOD 5
AS12578 SIA Tet 4
AS39845 2 Cloud Ltd. 2
AS50979 GREEN FLOID LLC 2
AS52048 SIA RixHost 2
AS34535 Standart AG, LLC 1
AS41564 Orion Network Limited 1
AS64421 SERTEX SIA 1
AS51017 STOLICA LLC 1
AS199152 Virtual Data Center Inc 1
AS399498 Private Networks Labs LLC 1
AS20910 SIA "BITE Latvija" 1
AS29600 AS "Latvenergo" 1

Malware families served from Latvia

  1. Jackskid4
  2. Zilla1
  3. Asyncrat1
  4. Cryptinject1
  5. Amadey1
  6. Loki1
  7. Mokes1
  8. Lockbit1
  9. AsyncRAT1
  10. HypeAgent1
  11. Fragtor1
  12. Dacic1
  13. Evilginx1
  14. Opencandy1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
77.73.134[.]27MalwareMokesRiga, RigaAS212496 SIA GOOD1 feed · 361 sandbox samples2026-10-12 07:26
77.73.134[.]65MalwareContacted by malwareRiga, RigaAS212496 SIA GOOD1 feed · 6 sandbox samples2026-10-12 06:58
185.176.220[.]76AttackerAttacking hostRiga, RigaAS39845 2 Cloud Ltd.2 feeds2026-10-12 04:35
46.8.232[.]134AttackerAttacking hostRiga, RigaAS56971 CGI GLOBAL LIMITED2 feeds2026-10-12 04:35
80.246.31[.]101AttackerAttacking hostLiepāja, LiepajaAS43513 Sia Nano IT2 feeds2026-10-12 04:35
80.70.24[.]173AttackerAttacking hostRiga, RigaAS29600 AS "Latvenergo"2 feeds2026-10-12 04:35
31.56.177[.]97AttackerAttacking hostRiga, RigaAS56971 CGI GLOBAL LIMITED1 feed2026-10-12 04:35
31.56.204[.]192AttackerAttacking hostRiga, RigaAS56971 CGI GLOBAL LIMITED1 feed2026-10-12 04:35
94.140.112[.]149MalwareFragtorRiga, RigaAS43513 Sia Nano IT1 feed · 3 sandbox samples2026-10-11 05:39
195.123.215[.]252AttackerMalicious IPRiga, RigaAS50979 GREEN FLOID LLC1 feed2026-10-11 04:31
195.13.169[.]219AttackerMalicious IPRiga, RigaAS12578 SIA Tet1 feed2026-10-11 04:31
196.196.53[.]10AttackerAttacking hostRiga, RigaAS41564 Orion Network Limited2 feeds2026-10-11 04:31
94.100.6[.]17AttackerMalicious IPTukums, Tukums MunicipalityAS213934 IPV1 SIA1 feed2026-10-11 04:31
94.140.114[.]79MalwareContacted by malwareRiga, RigaAS43513 Sia Nano IT1 feed · 4 sandbox samples2026-10-11 00:59
46.183.218[.]150AttackerAttacking hostRiga, RigaAS52048 SIA RixHost1 feed2026-10-10 11:30
87.110.5[.]101AttackerMalicious IPRiga, RigaAS12578 SIA Tet1 feed2026-10-10 04:30
84.237.141[.]86:6606C2AsyncRATRiga, RigaAS12578 SIA Tet1 feed2026-10-09 19:45
95.68.60[.]130MalwareOpencandyRiga, RigaAS12578 SIA Tet1 feed · 1 sandbox sample2026-10-09 15:02
45.85.105[.]213AttackerAttacking hostRiga, RigaAS399498 Private Networks Labs LLC1 feed2026-10-09 08:45
31.170.22[.]206AttackerAttacking hostRiga, RigaAS43513 Sia Nano IT2 feeds2026-10-09 04:27
31.59.168[.]62AttackerAttacking hostRiga, RigaAS56971 CGI GLOBAL LIMITED2 feeds2026-10-09 04:27
77.38.132[.]161AttackerAttacking hostRiga, RigaAS20910 SIA "BITE Latvija"1 feed2026-10-09 04:27
2.58.16[.]87MalwareContacted by malwareRiga, RigaAS64421 SERTEX SIA1 feed · 22 sandbox samples2026-10-09 03:02
213.21.220[.]222MalwareCryptinjectRiga, RigaAS51017 STOLICA LLC1 feed · 3 sandbox samples2026-10-08 12:01
77.73.134[.]68MalwareLockbitRiga, RigaAS212496 SIA GOOD1 feed · 16 sandbox samples2026-10-08 12:01

See every listed IP in Latvia →

Ransomware victims in Latvia

0 posted in the last 30 days, 2 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-08-20 17:27LatoplastplayManufacturing
      2026-08-07 08:30doclv.comL GroupProfessional Services

      All ransomware victims in Latvia →

      Other countries

      🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →