🇦🇺 Australia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Australia.

187Malicious IPs listed#33 of 182 countries · 0.28% of the world
41New in the last 24hfirst seen by any feed
44Reported by 2+ feedsindependent sources agree
15Ransomware victimsposted in the last 30 days

View Australia on the live map →All listed IPs in AustraliaRansomware victims in Australia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C29
  2. Malware38
  3. Phishing0
  4. Attacker140

By state or region

  1. New South Wales129
  2. Victoria27
  3. Queensland15
  4. Western Australia9
  5. South Australia4
  6. Tasmania2
  7. Australian Capital Territory1

By city

  1. Sydney49
  2. Alexandria41
  3. Melbourne15
  4. Brisbane9
  5. Haymarket9
  6. Huntingwood7
  7. Perth4
  8. North Sydney4
  9. Adelaide3
  10. South Brisbane2
  11. Beaumaris2
  12. Mascot2
  13. Burwood2
  14. Narre Warren2
  15. Campbelltown2

Networks hosting the most

NetworkIPs
AS14061 DigitalOcean, LLC 39
AS7545 TPG Internet Pty Ltd 23
AS1221 Telstra Limited 18
AS16509 Amazon.com, Inc. 11
AS31898 Oracle Corporation 8
AS4764 Aussie Fibre Pty Ltd 7
AS14956 RouterHosting LLC 7
AS55803 Hostopia Australia Web Pty Ltd 6
AS38195 SUPERLOOP (AUSTRALIA) PTY LTD 6
AS8075 Microsoft Corporation 6
AS2764 AAPT Limited 5
AS20473 The Constant Company, LLC 4
AS38333 Symbio Networks Pty Ltd 4
AS9443 VOCUS PTY LTD 4
AS16276 OVH SAS 4

Malware families served from Australia

  1. Emotet3
  2. W97m3
  3. Cobalt Strike3
  4. Windigo2
  5. Expiro1
  6. Sybici1
  7. Mirai1
  8. PoshC21
  9. Asyncrat1
  10. AdaptixC21
  11. Remcos1
  12. AsyncRAT1
  13. Nanocore1
  14. Tofsee1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
170.64.203[.]248AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 08:20
13.238.55[.]255AttackerAttacking hostSydney, New South WalesAS16509 Amazon.com, Inc.2 feeds2026-10-12 07:55
110.142.146[.]188AttackerOn multiple blocklistsSydney, New South WalesAS1221 Telstra Limited1 feed2026-10-12 07:15
170.64.164[.]138AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 07:15
120.157.79[.]189AttackerAttacking hostMelbourne, VictoriaAS1221 Telstra Limited1 feed2026-10-12 06:41
170.64.165[.]134AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:55
170.64.174[.]95AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:55
103.224.212[.]204MalwareExpiroBeaumaris, VictoriaAS133618 Trellian Pty. Limited1 feed · 4 sandbox samples2026-10-12 05:15
168.144.161[.]127AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
168.144.162[.]30AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
168.144.165[.]69AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
170.64.198[.]250AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
209.38.17[.]150AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
209.38.90[.]16AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC1 feed2026-10-12 05:00
172.111.161[.]134:4489C2RemcosSydney, New South WalesAS137409 GSL Networks Pty LTD1 feed2026-10-12 04:59
101.0.79[.]170AttackerAttacking hostSurry Hills, New South WalesAS55803 Hostopia Australia Web Pty Ltd2 feeds2026-10-12 04:35
134.199.158[.]34AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC2 feeds2026-10-12 04:35
134.199.160[.]246AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC2 feeds2026-10-12 04:35
144.6.159[.]107AttackerAttacking hostTrigg, Western AustraliaAS4764 Aussie Fibre Pty Ltd2 feeds2026-10-12 04:35
15.135.163[.]9AttackerAttacking hostSydney, New South WalesAS16509 Amazon.com, Inc.2 feeds2026-10-12 04:35
168.144.172[.]171AttackerAttacking hostAlexandria, New South WalesAS14061 DigitalOcean, LLC2 feeds2026-10-12 04:35
2001[:]8003[:]7827[:]6b01[:]a1cc[:]7c59[:]1ef3[:]b769AttackerAttacking hostBrisbane, QueenslandAS1221 Telstra Limited2 feeds2026-10-12 04:35
202.67.92[.]254AttackerAttacking hostNorth Sydney, New South WalesAS9443 VOCUS PTY LTD2 feeds2026-10-12 04:35
34.40.130[.]171AttackerMalicious IPSydney, New South WalesAS396982 Google LLC1 feed2026-10-12 04:35
45.61.172[.]60AttackerAttacking hostHaymarket, New South WalesAS14956 RouterHosting LLC2 feeds2026-10-12 04:35

See every listed IP in Australia →

Ransomware victims in Australia

15 posted in the last 30 days, 48 in 90.

Posted (UTC)VictimGroupSector
2026-10-11 14:23Company #27N0nHealthcare
2026-10-09 19:24All Souls St Gabriels SchoolthegentlemenEducation
2026-10-06 20:55KOOKABARRA JUICEVexy RansomwareRetail & E-Commerce
2026-10-04 15:03Chadwick SwitchboardsqilinManufacturing
2026-10-03 06:25Mandurah State Emergency ServicethegentlemenGovernment & Defense
2026-09-30 13:04Virtual IdeaslamashtuTechnology
2026-09-28 18:49stjames.wa.edu.authreeamEducation
2026-09-24 14:22Zig Inge Groupqilin—
2026-09-24 12:08www.jonesthegrocer.comkrybitRetail & E-Commerce
2026-09-23 14:28TRANSPORT-NSW.GOV.AUclopTransportation
2026-09-17 15:31pacificabs.comsettraProfessional Services
2026-09-16 17:57Leisure Coast KitchenskairosRetail & E-Commerce
2026-09-16 17:02Reddrop Groupqilin—
2026-09-16 15:05Thorndale FoundationqilinOther
2026-09-15 07:15Alchin Long GroupthegentlemenOther

All ransomware victims in Australia →

Other countries