🇦🇷 Argentina: live cyber threat activity

Malicious IPs, malware and ransomware victims in Argentina.

293Malicious IPs listed#27 of 182 countries · 0.44% of the world
94New in the last 24hfirst seen by any feed
133Reported by 2+ feedsindependent sources agree
14Ransomware victimsposted in the last 30 days

View Argentina on the live map →All listed IPs in ArgentinaRansomware victims in Argentina

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C27
  2. Malware30
  3. Phishing0
  4. Attacker256

By state or region

  1. Buenos Aires113
  2. Buenos Aires F.D.33
  3. Santa Fe33
  4. Cordoba32
  5. La Pampa19
  6. Rio Negro16
  7. Mendoza8
  8. San Juan7
  9. Tucuman5
  10. Salta4
  11. Santa Cruz4
  12. Santiago del Estero4
  13. Chaco3
  14. Corrientes3
  15. Entre Rios2

By city

  1. Buenos Aires32
  2. Sierra de la Ventana16
  3. Capitán Bermúdez15
  4. Parera14
  5. Lomas de Zamora10
  6. Pedro Luro9
  7. Coronel Belisle8
  8. Justiniano Posse7
  9. Batán6
  10. La Plata5
  11. Rosario5
  12. San Justo5
  13. Burzaco4
  14. Canada de Gomez4
  15. General Roca4

Networks hosting the most

NetworkIPs
AS7303 Telecom Argentina S.A. 41
AS52308 AGUAS DEL COLORADO SAPEM 17
AS27747 Telecentro S.A. 17
AS267690 ELDA SALERNO(FULLNET) 16
AS266702 MEGALINK S.R.L. 15
AS11664 Techtel LMDS Comunicaciones Interactivas S.A. 14
AS22927 Telefonica de Argentina 12
AS27953 NODOSUD S.A 11
AS264758 ISP GROUP SRL 11
AS264619 Wireless Provider 9
AS52490 COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO 9
AS27754 Cooperativa Batan de Obras y Serv. Publicos Ltda 7
AS52371 XF Comunicaciones S.A. 7
AS263715 EMPRESA DE SERVICIOS Y APLICACIONES TECNOLOGICAS SRL 5
AS27926 NETPATAGONIA SAS 5

Malware families served from Argentina

  1. Mozi4
  2. Remcos3
  3. W97m2
  4. DCRat1
  5. Jackskid1
  6. AdaptixC21
  7. Tsunami1
  8. Mokes1
  9. Zard1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
186.109.226[.]24AttackerAttacking hostConcepción del Uruguay, Entre RiosAS7303 Telecom Argentina S.A.1 feed2026-10-12 08:20
181.118.80[.]131AttackerAttacking hostLas Heras, MendozaAS28075 ARLINK S.A.1 feed2026-10-12 08:10
190.224.203[.]37MalwareZardSanto Tome, CorrientesAS7303 Telecom Argentina S.A.1 feed · 247 sandbox samples2026-10-12 07:53
186.182.55[.]44MalwareMokesLa Plata, Buenos AiresAS11664 Techtel LMDS Comunicaciones Interactivas S.A.1 feed · 2,005 sandbox samples2026-10-12 07:26
186.19.123[.]190AttackerAttacking hostIsidro Casanova, Buenos AiresAS27747 Telecentro S.A.1 feed2026-10-12 07:15
181.16.209[.]124AttackerAttacking hostEl Arañado, CordobaAS52323 Colsecor Cooperativa Limitada1 feed2026-10-12 06:41
190.196.253[.]29MalwareMoziCapitán Bermúdez, Santa FeAS266702 MEGALINK S.R.L.aggregated list2026-10-12 06:19
190.196.253[.]118MalwareMoziCapitán Bermúdez, Santa FeAS266702 MEGALINK S.R.L.aggregated list2026-10-12 06:19
190.184.229[.]241AttackerAttacking hostSan Andres de Giles, Buenos AiresAS52369 NEOPHONE ARGENTINA SRL1 feed2026-10-12 05:35
45.191.80[.]110AttackerAttacking hostFontana, ChacoAS269906 Chaco Digital SA1 feed2026-10-12 05:35
179.61.94[.]43AttackerAttacking hostGeneral Alvear, MendozaAS264656 C.E.C.S.A.G.A.L COOP ALVEAR1 feed2026-10-12 05:00
103.50.33[.]107AttackerAttacking hostBuenos Aires, Buenos Aires F.D.AS396356 Latitude.sh2 feeds2026-10-12 04:35
152.231.55[.]75AttackerAttacking hostEmbalse, CordobaAS52420 Intercom SRL2 feeds2026-10-12 04:35
179.37.109[.]2AttackerAttacking hostSan Justo, Buenos AiresAS22927 Telefonica de Argentina2 feeds2026-10-12 04:35
179.61.10[.]183AttackerAttacking hostMalargüe, MendozaAS52503 MALARGÜE ONLINE2 feeds2026-10-12 04:35
181.116.45[.]122AttackerAttacking hostMar del Plata, Buenos AiresAS11664 Techtel LMDS Comunicaciones Interactivas S.A.2 feeds2026-10-12 04:35
181.118.183[.]157AttackerAttacking hostJustiniano Posse, CordobaAS27953 NODOSUD S.A2 feeds2026-10-12 04:35
181.118.183[.]159AttackerAttacking hostJustiniano Posse, CordobaAS27953 NODOSUD S.A2 feeds2026-10-12 04:35
181.13.190[.]38AttackerMalicious IPCatamarca, CatamarcaAS7303 Telecom Argentina S.A.1 feed2026-10-12 04:35
181.167.47[.]173AttackerAttacking hostBahía Blanca, Buenos AiresAS7303 Telecom Argentina S.A.2 feeds2026-10-12 04:35
181.174.128[.]72AttackerAttacking hostParera, La PampaAS52308 AGUAS DEL COLORADO SAPEM2 feeds2026-10-12 04:35
181.41.245[.]12AttackerAttacking hostBatán, Buenos AiresAS27754 Cooperativa Batan de Obras y Serv. Publicos Ltda2 feeds2026-10-12 04:35
181.41.245[.]82AttackerAttacking hostBatán, Buenos AiresAS27754 Cooperativa Batan de Obras y Serv. Publicos Ltda2 feeds2026-10-12 04:35
181.46.136[.]146AttackerAttacking hostBerazategui, Buenos AiresAS27747 Telecentro S.A.2 feeds2026-10-12 04:35
181.46.185[.]113AttackerAttacking hostLomas de Zamora, Buenos AiresAS27747 Telecentro S.A.2 feeds2026-10-12 04:35

See every listed IP in Argentina →

Ransomware victims in Argentina

14 posted in the last 30 days, 47 in 90.

Posted (UTC)VictimGroupSector
2026-10-09 19:27TGNthegentlemen—
2026-10-08 03:31avsa.com.arlockbit5Other
2026-10-01 06:55Laboratorios Roemmers SAICFauroraHealthcare
2026-09-28 18:52pistonespersan.com.arthreeamManufacturing
2026-09-24 02:21Solucioning S.A.BarracudaOther
2026-09-22 19:55Grupo Hospifar S.R.L.titanHealthcare
2026-09-20 20:58arsrenacer.comdragonforceOther
2026-09-18 15:26Ministry of Education — ArgentinaN0nGovernment & Defense
2026-09-18 10:11Ceres TolvasqilinAgriculture and Food Production
2026-09-17 16:03TechwiseqilinTechnology
2026-09-17 07:24www.diarco.com.arincransomRetail & E-Commerce
2026-09-16 18:20krimax.orgAuditTeamOther
2026-09-15 07:08Librería Santa FethegentlemenRetail & E-Commerce
2026-09-14 13:09Vitar GroupqilinOther
2026-09-09 16:50kr***rgAuditTeam—

All ransomware victims in Argentina →

Other countries