🇱🇺 Luxembourg: live cyber threat activity
Malicious IPs, malware and ransomware victims in Luxembourg.
87Malicious IPs listed#49 of 182 countries · 0.13% of the world
17New in the last 24hfirst seen by any feed
26Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days
View Luxembourg on the live map →All listed IPs in LuxembourgRansomware victims in Luxembourg
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
Malware families served from Luxembourg
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 64.89.161[.]85 | Attacker | Attacking host | Schieren, Diekirch | AS36680 Netiface LLC | 1 feed | 2026-10-12 06:10 |
| 107.189.31[.]171 | Malware | Barys | Bissen, Mersch | AS53667 FranTech Solutions | 1 feed · 2 sandbox samples | 2026-10-12 06:08 |
| 145.223.8[.]13 | Attacker | Attacking host | Steinsel, Luxembourg | AS209854 Cyberzone S.A. | 2 feeds | 2026-10-12 04:35 |
| 185.153.151[.]152 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 2 feeds | 2026-10-12 04:35 |
| 185.153.151[.]160 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 2 feeds | 2026-10-12 04:35 |
| 185.153.151[.]165 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 2 feeds | 2026-10-12 04:35 |
| 185.153.151[.]182 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 2 feeds | 2026-10-12 04:35 |
| 64.89.160[.]96 | Malware | Malicious URL | Schieren, Diekirch | AS36680 Netiface LLC | aggregated list | 2026-10-12 04:35 |
| 185.153.151[.]145 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 1 feed | 2026-10-12 04:35 |
| 64.89.161[.]184 | Attacker | On multiple blocklists | Schieren, Diekirch | AS36680 Netiface LLC | aggregated list | 2026-10-12 04:35 |
| 64.89.160[.]157 | Attacker | Attacking host | Schieren, Diekirch | AS36680 Netiface LLC | 1 feed | 2026-10-12 03:55 |
| 107.189.2[.]172 | Attacker | On multiple blocklists | Bissen, Mersch | AS53667 FranTech Solutions | 1 feed | 2026-10-12 02:25 |
| 92.223.84[.]84 | Malware | Dump | Luxembourg, Luxembourg | AS199524 G-Core Labs S.A. | 1 feed · 18 sandbox samples | 2026-10-12 01:32 |
| 64.89.161[.]185 | Attacker | Attacking host | Schieren, Diekirch | AS36680 Netiface LLC | 1 feed | 2026-10-11 20:55 |
| 104.244.76[.]184 | Malware | Loki | Bissen, Mersch | AS53667 FranTech Solutions | 1 feed · 3 sandbox samples | 2026-10-11 14:09 |
| 107.189.6[.]214 | Malware | Mardom | Bissen, Mersch | AS53667 FranTech Solutions | 1 feed · 33 sandbox samples | 2026-10-11 13:54 |
| 104.244.73[.]43 | Attacker | Tor exit | Bissen, Mersch | AS53667 FranTech Solutions | 2 feeds · 1 sandbox sample | 2026-10-11 09:36 |
| 31.216.145[.]5 | Malware | Contacted by malware | Schieren, Diekirch | AS203055 Datacenter Luxembourg S.A. | 1 feed · 70 sandbox samples | 2026-10-11 06:20 |
| 198.251.84[.]92 | Malware | Contacted by malware | Bissen, Mersch | AS53667 FranTech Solutions | 1 feed · 25 sandbox samples | 2026-10-11 04:58 |
| 145.223.8[.]11 | Attacker | Attacking host | Steinsel, Luxembourg | AS209854 Cyberzone S.A. | 2 feeds | 2026-10-11 04:31 |
| 145.223.8[.]18 | Attacker | Attacking host | Steinsel, Luxembourg | AS209854 Cyberzone S.A. | 2 feeds | 2026-10-11 04:31 |
| 145.223.8[.]6 | Attacker | Attacking host | Steinsel, Luxembourg | AS209854 Cyberzone S.A. | 2 feeds | 2026-10-11 04:31 |
| 145.223.8[.]8 | Attacker | Attacking host | Steinsel, Luxembourg | AS209854 Cyberzone S.A. | 2 feeds | 2026-10-11 04:31 |
| 185.153.151[.]137 | Attacker | Attacking host | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 2 feeds | 2026-10-11 04:31 |
| 185.153.151[.]140 | Attacker | Malicious IP | Schieren, Diekirch | AS203020 HostRoyale Technologies Pvt Ltd | 1 feed | 2026-10-11 04:31 |
Ransomware victims in Luxembourg
1 posted in the last 30 days, 2 in 90.
Sectors hit (30 days)
Groups (30 days)
- N0n1
Other countries
🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →