🇺🇿 Uzbekistan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Uzbekistan.

126Malicious IPs listed#39 of 182 countries · 0.19% of the world
13New in the last 24hfirst seen by any feed
22Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Uzbekistan on the live map →All listed IPs in UzbekistanRansomware victims in Uzbekistan

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C22
  2. Malware69
  3. Phishing0
  4. Attacker55

By state or region

  1. Tashkent62
  2. Tashkent Region24
  3. Samarqand Region9
  4. Qashqadaryo7
  5. Fergana7
  6. Andijan Region5
  7. Bukhara3
  8. Namangan3
  9. Navoiy Region2
  10. Xorazm Region2
  11. Karakalpakstan1
  12. Jizzakh Region1

By city

  1. Tashkent61
  2. Salor21
  3. Samarkand9
  4. Qarshi6
  5. Andijan4
  6. Qibray3
  7. Bukhara3
  8. Yaypan2
  9. Kokand2
  10. Toshbuloq2
  11. Chiroqchi1
  12. Navoiy1
  13. Nukus1
  14. Namangan1
  15. Dashtobod1

Networks hosting the most

NetworkIPs
AS8193 "Uzbektelekom" Joint Stock Company 87
AS39032 "IST TELEKOM" LLC 16
AS202660 "Uzbektelekom" Joint Stock Company 7
AS34718 "IST TELEKOM" JV LLC 5
AS35682 BEST INTERNET SOLUTION XK 2
AS59668 Turon Media XK 2
AS49273 COSCOM Liability Limited Company 1
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 1
AS59706 "RUBICON WIRELESS COMMUNICATION" LLC 1
AS12365 JC LLC Sarkor-Telecom 1
AS43060 IPLUS LLC 1
AS41202 UNITEL LLC 1

Malware families served from Uzbekistan

  1. Gandcrab42
  2. Phorpiex21
  3. Neshta2
  4. AdaptixC22
  5. Zard1
  6. Bundleinstaller1
  7. Utorrent1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
82.215.105[.]248AttackerAttacking hostSalor, Tashkent RegionAS59668 Turon Media XK1 feed2026-10-12 08:20
188.113.236[.]5AttackerAttacking hostChiroqchi, QashqadaryoAS49273 COSCOM Liability Limited Company1 feed2026-10-12 07:50
87.192.232[.]116AttackerAttacking hostFergana, FerganaAS8193 "Uzbektelekom" Joint Stock Company1 feed2026-10-12 07:50
195.158.3[.]162MalwareZardTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 1,646 sandbox samples2026-10-12 07:26
198.163.193[.]136MalwarePhorpiexQarshi, QashqadaryoAS8193 "Uzbektelekom" Joint Stock Company1 feed · 23 sandbox samples2026-10-12 06:58
93.188.80[.]136MalwarePhorpiexTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 8 sandbox samples2026-10-12 06:58
93.188.85[.]2MalwarePhorpiexTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 22 sandbox samples2026-10-12 06:58
93.188.86[.]40MalwarePhorpiexSalor, Tashkent RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 24 sandbox samples2026-10-12 06:58
84.54.71[.]128AttackerAttacking hostToshbuloq, NamanganAS8193 "Uzbektelekom" Joint Stock Company2 feeds2026-10-12 04:35
84.54.71[.]20AttackerAttacking hostToshbuloq, NamanganAS8193 "Uzbektelekom" Joint Stock Company2 feeds2026-10-12 04:35
89.249.61[.]115AttackerAttacking hostQibray, Tashkent RegionAS8193 "Uzbektelekom" Joint Stock Company2 feeds2026-10-12 04:35
87.192.244[.]173AttackerAttacking hostBektemir, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed2026-10-12 04:05
95.214.211[.]130AttackerAttacking hostSamarkand, Samarqand RegionAS41202 UNITEL LLC1 feed2026-10-12 02:25
195.158.22[.]4MalwareGandcrabSamarkand, Samarqand RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 36 sandbox samples2026-10-11 08:34
213.230.127[.]140MalwareGandcrabTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 28 sandbox samples2026-10-11 08:34
213.230.80[.]12MalwareGandcrabTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 22 sandbox samples2026-10-11 08:34
213.230.91[.]15MalwareGandcrabTashkent, TashkentAS8193 "Uzbektelekom" Joint Stock Company1 feed · 23 sandbox samples2026-10-11 08:34
217.30.169[.]113MalwarePhorpiexTashkent, TashkentAS39032 "IST TELEKOM" LLC1 feed · 8 sandbox samples2026-10-11 08:34
217.30.170[.]9MalwareGandcrabKokand, FerganaAS39032 "IST TELEKOM" LLC1 feed · 25 sandbox samples2026-10-11 08:34
217.30.171[.]37MalwareGandcrabTashkent, TashkentAS39032 "IST TELEKOM" LLC1 feed · 12 sandbox samples2026-10-11 08:34
195.158.20[.]27MalwareGandcrabNavoiy, Navoiy RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 19 sandbox samples2026-10-11 08:09
195.158.22[.]11MalwareGandcrabSamarkand, Samarqand RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 42 sandbox samples2026-10-11 08:09
198.163.193[.]6MalwareGandcrabQarshi, QashqadaryoAS8193 "Uzbektelekom" Joint Stock Company1 feed · 11 sandbox samples2026-10-11 08:09
213.230.108[.]92MalwarePhorpiexSalor, Tashkent RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 44 sandbox samples2026-10-11 08:09
213.230.126[.]39MalwareGandcrabSalor, Tashkent RegionAS8193 "Uzbektelekom" Joint Stock Company1 feed · 29 sandbox samples2026-10-11 08:09

See every listed IP in Uzbekistan →

Ransomware victims in Uzbekistan

1 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-22 01:51FinSoft (Kolibri retail back-office software)N0nRetail & E-Commerce

All ransomware victims in Uzbekistan →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →