🇲🇰 North Macedonia: live cyber threat activity

Malicious IPs, malware and ransomware victims in North Macedonia.

17Malicious IPs listed#107 of 182 countries · 0.03% of the world

1New in the last 24hfirst seen by any feed

1Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View North Macedonia on the live map →All listed IPs in North Macedonia Ransomware victims in North Macedonia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Grad Skopje14
Gostivar1
Kavadarci1
Gevgelija1

By city

Skopje13
Cresevo1
Gostivar1
Kavadarci1
Gevgelija1

Networks hosting the most

Network	IPs
AS205119 TELEKS DOOEL Skopje	7
AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	6
AS212645 GLOBALSAT DOOEL	1
AS57374 Company for communications services A1 Makedonija DOOEL Skopje	1
AS49056 Inel Internacional Dooel Kavadarci	1
AS199128 PET NET DOO Gevgelija	1

Malware families served from North Macedonia

Potassium5
Stealerc1

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
95.86.30[.]3	Malware	Stealerc	Kavadarci, Kavadarci	AS49056 Inel Internacional Dooel Kavadarci	1 feed · 77 sandbox samples	2026-10-12 09:53
185.233.211[.]109	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]166	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]17	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]41	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]60	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]74	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
185.233.211[.]91	Attacker	Malicious IP	Skopje, Grad Skopje	AS205119 TELEKS DOOEL Skopje	1 feed	2026-10-11 04:31
188.44.20[.]25	Malware	Contacted by malware	Gostivar, Gostivar	AS57374 Company for communications services A1 Makedonija DOOEL Skopje	1 feed · 136 sandbox samples	2026-10-09 04:37
151.236.247[.]230	Malware	Malicious URL	Gevgelija, Gevgelija	AS199128 PET NET DOO Gevgelija	aggregated list	2026-10-09 04:27
89.185.82[.]70:7193	C2	Potassium	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	1 feed	2026-10-04 06:54
89.185.82[.]69:7193	C2	Potassium	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	1 feed	2026-10-04 06:54
89.185.82[.]24	Malware	Malware download	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	aggregated list	2026-10-03 23:49
89.185.82[.]37:7193	C2	Potassium	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	1 feed	2026-09-26 06:20
89.185.82[.]38:7193	C2	Potassium	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	1 feed	2026-09-26 06:20
89.185.82[.]39:7193	C2	Potassium	Skopje, Grad Skopje	AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP	1 feed	2026-09-26 06:20
185.193.240[.]246	Attacker	Attacking host	Cresevo, Grad Skopje	AS212645 GLOBALSAT DOOEL	2 feeds	—

See every listed IP in North Macedonia →

Ransomware victims in North Macedonia

0 posted in the last 30 days, 2 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)	Victim	Group	Sector
2026-08-30 16:07	AFSARD	qilin	—
2026-07-23 15:14	MK Jewelry	thegentlemen	Retail & E-Commerce

All ransomware victims in North Macedonia →