🇪🇨 Ecuador: live cyber threat activity

Malicious IPs, malware and ransomware victims in Ecuador.

45Malicious IPs listed#70 of 182 countries · 0.07% of the world
6New in the last 24hfirst seen by any feed
22Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Ecuador on the live map →All listed IPs in EcuadorRansomware victims in Ecuador

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware5
  3. Phishing0
  4. Attacker40

By state or region

  1. Cotopaxi15
  2. Guayas10
  3. Pichincha7
  4. Manabí3
  5. Tungurahua Province2
  6. Morona-Santiago Province1
  7. Santa Elena1
  8. Imbabura1
  9. Zamora Chinchipe1
  10. Azuay1
  11. Galápagos1
  12. El Oro1
  13. Bolívar1

By city

  1. Pujilí14
  2. Guayaquil6
  3. Quito4
  4. Nayón2
  5. Atahualpa1
  6. Palora1
  7. La Maná1
  8. Portoviejo1
  9. Santa Elena1
  10. La Libertad1
  11. Olmedo1
  12. Llano Chico1
  13. Jaramijo1
  14. La Puntilla1
  15. Otavalo1

Networks hosting the most

NetworkIPs
AS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA. 14
AS28006 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP 10
AS27947 Telconet S.A 7
AS14522 Satnet 7
AS22724 PUNTONET S.A. 2
AS263238 Eliana Vanessa Morocho Oña 1
AS262223 NECUSOFT CIA. LTDA. (NETTPLUS) 1
AS52468 UFINET PANAMA S.A. 1
AS27948 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP 1
AS266756 EBESTPHONE ECUADOR S.A. 1

Malware families served from Ecuador

No malware family attributed to IPs here.

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
181.188.237[.]210AttackerOn multiple blocklistsPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.2 feeds2026-10-12 04:35
181.188.237[.]213AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.3 feeds2026-10-12 04:35
181.188.237[.]219AttackerOn multiple blocklistsPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.3 feeds2026-10-12 04:35
181.199.60[.]144AttackerMalicious IPSanta Elena, Santa ElenaAS27947 Telconet S.A1 feed2026-10-12 04:35
186.46.129[.]76AttackerCompromised hostQuito, PichinchaAS28006 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP1 feed2026-10-12 04:35
181.188.237[.]217AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.3 feeds2026-10-12 00:35
181.188.237[.]214AttackerOn multiple blocklistsPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.2 feeds2026-10-11 04:31
181.188.237[.]211AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.2 feeds2026-10-10 04:30
181.211.250[.]118MalwareMalicious URLSanta Rosa, GalápagosAS27948 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EPaggregated list2026-10-10 04:30
181.188.237[.]221AttackerOn multiple blocklistsPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.2 feeds2026-10-09 18:55
157.100.134[.]59AttackerAttacking hostAtahualpa, Tungurahua ProvinceAS27947 Telconet S.A1 feed2026-10-09 10:35
190.155.217[.]240AttackerMalicious IPAmbato, Tungurahua ProvinceAS14522 Satnet1 feed2026-10-09 04:27
181.211.252[.]34MalwareMalicious URLMachala, El OroAS28006 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EPaggregated list2026-10-09 04:27
186.42.98[.]2MalwareMalicious URLSan Miguel de Bolívar, BolívarAS28006 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EPaggregated list2026-10-09 04:27
181.188.237[.]216AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.1 feed2026-10-09 04:27
190.154.214[.]7AttackerAttacking hostOtavalo, ImbaburaAS14522 Satnet1 feed2026-10-09 04:27
186.70.127[.]199MalwareContacted by malwareGuayaquil, GuayasAS14522 Satnet1 feed · 3,687 sandbox samples2026-10-08 07:49
45.233.94[.]135MalwareMalware downloadGuayaquil, GuayasAS266756 EBESTPHONE ECUADOR S.A.aggregated list2026-09-19 11:00
177.53.215[.]134AttackerAttacking hostPalora, Morona-Santiago ProvinceAS263238 Eliana Vanessa Morocho Oña1 feed—
181.113.114[.]61AttackerAttacking hostLa Maná, CotopaxiAS28006 CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP2 feeds—
181.175.77[.]187AttackerMalicious IPGuayaquil, GuayasAS14522 Satnet1 feed—
181.188.237[.]208AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.1 feed—
181.188.237[.]212AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.1 feed—
181.188.237[.]215AttackerMalicious IPPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.1 feed—
181.188.237[.]220AttackerAttacking hostPujilí, CotopaxiAS271936 SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA.1 feed—

See every listed IP in Ecuador →

Ransomware victims in Ecuador

1 posted in the last 30 days, 5 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-02 04:50Automovil Club del Ecuador ANETABarracudaTransportation
2026-09-06 08:21McDonalds EcuadorVexy RansomwareHospitality
2026-09-03 12:51McDonald's EcuadorVexy RansomwareHospitality
2026-08-16 15:27galmack.com.ecsettraOther
2026-07-30 07:57Indian Motos InmotqilinManufacturing

All ransomware victims in Ecuador →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →