🇱🇹 Lithuania: live cyber threat activity

Malicious IPs, malware and ransomware victims in Lithuania.

67Malicious IPs listed#57 of 182 countries · 0.1% of the world
18New in the last 24hfirst seen by any feed
13Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Lithuania on the live map →All listed IPs in LithuaniaRansomware victims in Lithuania

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C211
  2. Malware10
  3. Phishing0
  4. Attacker46

By state or region

  1. Kaunas33
  2. Vilnius30
  3. Siauliai4

By city

  1. Kaunas33
  2. Vilnius30
  3. Šiauliai4

Networks hosting the most

NetworkIPs
AS209605 UAB Host Baltic 23
AS48721 Flyservers S.A. 14
AS61272 UAB Bacloud 5
AS47583 Hostinger International Limited 4
AS8764 Telia Lietuva, AB 4
AS15440 UAB "Baltnetos komunikacijos" 3
AS1257 Tele2 Sverige AB 2
AS212531 UAB "Interneto vizija" 2
AS16125 UAB Cherry Servers 2
AS213772 UAB "Baltnetos komunikacijos" 1
AS133398 Tele Asia Limited 1
AS21412 UAB "Cgates" 1
AS13194 UAB "Bite Lietuva" 1
AS62164 Heymman Servers Corporation 1
AS24852 UAB INIT 1

Malware families served from Lithuania

  1. Remcos4
  2. XOR DDoS1
  3. PureRAT1
  4. Antidot1
  5. Cobalt Strike1
  6. Emotet1
  7. Nymeria1
  8. Autdwnlrner1
  9. Sybici1
  10. Ekstak1
  11. Kimwolf1
  12. Loader1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
141.98.9[.]103AttackerAttacking hostKaunas, KaunasAS209605 UAB Host Baltic2 feeds2026-10-12 04:35
158.173.79[.]28AttackerAttacking hostVilnius, VilniusAS61272 UAB Bacloud2 feeds2026-10-12 04:35
185.169.4[.]232AttackerMalicious IPVilnius, VilniusAS209605 UAB Host Baltic1 feed2026-10-12 04:35
194.165.16[.]21AttackerAttacking hostKaunas, KaunasAS48721 Flyservers S.A.2 feeds · 9 sandbox samples2026-10-12 04:35
2a02[:]4780[:]c[:]b01e[:][:]1AttackerAttacking hostVilnius, VilniusAS47583 Hostinger International Limited2 feeds2026-10-12 04:35
72.62.119[.]104AttackerAttacking hostVilnius, VilniusAS47583 Hostinger International Limited3 feeds2026-10-12 04:35
78.56.173[.]7AttackerAttacking hostVilnius, VilniusAS8764 Telia Lietuva, AB2 feeds2026-10-12 04:35
92.62.141[.]96AttackerAttacking hostVilnius, VilniusAS15440 UAB "Baltnetos komunikacijos"3 feeds2026-10-12 04:35
141.98.10[.]198AttackerOn multiple blocklistsKaunas, KaunasAS209605 UAB Host Balticaggregated list2026-10-12 04:35
141.98.9[.]123AttackerAttacking hostKaunas, KaunasAS209605 UAB Host Baltic1 feed2026-10-12 04:35
141.98.9[.]35AttackerOn multiple blocklistsKaunas, KaunasAS209605 UAB Host Balticaggregated list2026-10-12 04:35
194.165.16[.]139AttackerAttacking hostKaunas, KaunasAS48721 Flyservers S.A.1 feed · 9 sandbox samples2026-10-12 04:35
194.165.16[.]140AttackerAttacking hostKaunas, KaunasAS48721 Flyservers S.A.1 feed · 10 sandbox samples2026-10-12 04:35
194.165.16[.]151AttackerAttacking hostKaunas, KaunasAS48721 Flyservers S.A.1 feed · 9 sandbox samples2026-10-12 04:35
194.165.16[.]165AttackerMalicious IPKaunas, KaunasAS48721 Flyservers S.A.2 feeds · 9 sandbox samples2026-10-12 04:35
93.115.25[.]73MalwareContacted by malwareŠiauliai, SiauliaiAS16125 UAB Cherry Servers1 feed · 25 sandbox samples2026-10-12 04:15
84.15.188[.]215AttackerAttacking hostVilnius, VilniusAS13194 UAB "Bite Lietuva"1 feed2026-10-11 13:50
146.103.38[.]59:28116C2AntidotVilnius, VilniusAS213772 UAB "Baltnetos komunikacijos"1 feed2026-10-11 08:59
141.98.10[.]162AttackerOn multiple blocklistsKaunas, KaunasAS209605 UAB Host Baltic2 feeds2026-10-11 04:31
194.165.16[.]163AttackerOn multiple blocklistsKaunas, KaunasAS48721 Flyservers S.A.2 feeds · 9 sandbox samples2026-10-11 04:31
5.20.182[.]115AttackerAttacking hostVilnius, VilniusAS21412 UAB "Cgates"2 feeds2026-10-11 04:31
82.197.202[.]131AttackerMalicious IPVilnius, VilniusAS61272 UAB Bacloud1 feed2026-10-11 04:31
82.197.202[.]229AttackerMalicious IPVilnius, VilniusAS61272 UAB Bacloud1 feed2026-10-11 04:31
88.135.26[.]83MalwareMalicious URLVilnius, VilniusAS62179 UAB Ecofonaggregated list2026-10-11 04:31
88.119.165[.]46MalwareSybiciŠiauliai, SiauliaiAS61272 UAB Bacloud1 feed · 3 sandbox samples2026-10-11 00:59

See every listed IP in Lithuania →

Ransomware victims in Lithuania

1 posted in the last 30 days, 2 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-28 07:30Holiday Inn VilniussafepayHospitality
2026-08-12 14:46UAB BiotechamajinahanashiHealthcare

All ransomware victims in Lithuania →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →