🇦🇴 Angola: live cyber threat activity

Malicious IPs, malware and ransomware victims in Angola.

19Malicious IPs listed#99 of 182 countries · 0.03% of the world

5New in the last 24hfirst seen by any feed

5Reported by 2+ feedsindependent sources agree

1Ransomware victimsposted in the last 30 days

View Angola on the live map →All listed IPs in Angola Ransomware victims in Angola

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Luanda18
Bengo1

By city

Luanda10
Cabolombo4
Panguíla1
Samba1
Camama1
Kikolo1
Ingombota1

Networks hosting the most

Network	IPs
AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	7
AS36907 TV CABO ANGOLA LDA	3
AS328943 Africell Angola S.A	2
AS328111 IP WORLD - Sociedade de servicos e telecomunicacoes Limitada	1
AS328509 Speed Net Serviços, Lda	1
AS37119 UNITEL SA	1
AS327806 CENTRO NACIONAL DAS TECNOLOGIAS DE INFORMACAO	1
AS17400 MSTelcom-Mercury Servicos de Telecomunicacoes, S.A.R.L	1
AS29286 SKYLOGIC S.P.A.	1
AS37593 Infrasat	1

Malware families served from Angola

Phorpiex2

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
41.222.251[.]117	Attacker	Attacking host	Luanda, Luanda	AS36907 TV CABO ANGOLA LDA	1 feed	2026-10-12 09:10
129.122.132[.]126	Malware	Phorpiex	Samba, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed · 24 sandbox samples	2026-10-12 06:58
2a00[:]ca0[:]2002[:]d2[:]354b[:]8274[:]7dc[:]cf1a	Attacker	Attacking host	Luanda, Luanda	AS29286 SKYLOGIC S.P.A.	2 feeds	2026-10-12 04:35
41.222.202[.]170	Attacker	Attacking host	Cabolombo, Luanda	AS37593 Infrasat	2 feeds	2026-10-12 04:35
102.213.102[.]20	Attacker	Attacking host	Luanda, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed	2026-10-11 19:50
102.218.85[.]209	Attacker	Attacking host	Panguíla, Bengo	AS328943 Africell Angola S.A	2 feeds	2026-10-11 04:31
197.148.32[.]132	Attacker	Attacking host	Ingombota, Luanda	AS36907 TV CABO ANGOLA LDA	1 feed	2026-10-10 11:25
102.216.169[.]161	Attacker	Attacking host	Luanda, Luanda	AS328111 IP WORLD - Sociedade de servicos e telecomunicacoes Limitada	2 feeds	2026-10-09 04:27
105.175.225[.]185	Attacker	Attacking host	Luanda, Luanda	AS37119 UNITEL SA	2 feeds	2026-10-09 04:27
129.122.141[.]24	Malware	Phorpiex	Camama, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed · 5 sandbox samples	2026-10-08 03:01
41.63.163[.]119	Malware	Malware download	Luanda, Luanda	AS36907 TV CABO ANGOLA LDA	aggregated list	2026-09-23 23:17
102.130.192[.]17	Attacker	Attacking host	Cabolombo, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed	—
102.130.192[.]63	Attacker	Attacking host	Cabolombo, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed	—
102.130.193[.]150	Attacker	Compromised host	Luanda, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed	—
102.206.57[.]98	Attacker	Attacking host	Cabolombo, Luanda	AS37645 Finstar - Sociedade de Investimento e Participacoes S.A	1 feed	—
102.214.37[.]132	Attacker	Attacking host	Luanda, Luanda	AS328943 Africell Angola S.A	1 feed	—
102.64.60[.]6	Attacker	Attacking host	Luanda, Luanda	AS328509 Speed Net Serviços, Lda	1 feed	—
154.116.254[.]157	Attacker	On multiple blocklists	Luanda, Luanda	AS327806 CENTRO NACIONAL DAS TECNOLOGIAS DE INFORMACAO	aggregated list	—
196.249.229[.]22	Attacker	Attacking host	Kikolo, Luanda	AS17400 MSTelcom-Mercury Servicos de Telecomunicacoes, S.A.R.L	1 feed	—