🇪🇬 Egypt: live cyber threat activity

Malicious IPs, malware and ransomware victims in Egypt.

118Malicious IPs listed#41 of 182 countries · 0.18% of the world
45New in the last 24hfirst seen by any feed
36Reported by 2+ feedsindependent sources agree
3Ransomware victimsposted in the last 30 days

View Egypt on the live map →All listed IPs in EgyptRansomware victims in Egypt

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C26
  2. Malware6
  3. Phishing0
  4. Attacker106

By state or region

  1. Giza68
  2. Cairo26
  3. Dakahlia5
  4. Beheira4
  5. Qalyubia3
  6. Alexandria3
  7. Sharqia2
  8. Matruh1
  9. Gharbia1
  10. Damietta1
  11. Kafr el-Sheikh1
  12. Red Sea1
  13. North Sinai1
  14. Beni Suweif1

By city

  1. Ash-Shaykh Zāyid42
  2. Giza17
  3. New Cairo12
  4. Cairo9
  5. Abū an Numrus5
  6. Al Khuşūş3
  7. Alexandria3
  8. Kerdasa2
  9. Bilqās2
  10. Al Qāhirah al Jadīdah2
  11. Kirdāsah2
  12. Abū Ḩammād1
  13. Helwan1
  14. Damanhur1
  15. Ḩawsh ‘Īsá1

Networks hosting the most

NetworkIPs
AS8452 TE-AS 72
AS24835 Vodafone Data - Egypt 12
AS137409 GSL Networks Pty LTD 11
AS36992 ETISALAT MISR 10
AS24863 LINKdotNET AS number 9
AS36935 Vodafone Data 3
AS25576 AFMIC Autonomous System, Egypt 1

Malware families served from Egypt

  1. AsyncRAT3
  2. DCRat2
  3. NjRAT1
  4. Gandcrab1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
105.203.240[.]28AttackerAttacking hostCairo, CairoAS36992 ETISALAT MISR1 feed2026-10-12 07:15
154.177.159[.]28AttackerAttacking hostGiza, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
154.177.167[.]66AttackerAttacking hostGiza, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
156.204.234[.]152AttackerAttacking hostAl Khuşūş, QalyubiaAS8452 TE-AS2 feeds2026-10-12 04:35
156.214.4[.]49AttackerAttacking hostGiza, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
156.215.160[.]135AttackerAttacking hostHelwan, CairoAS8452 TE-AS2 feeds2026-10-12 04:35
156.216.183[.]16AttackerAttacking hostAsh-Shaykh Zāyid, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
196.202.54[.]103AttackerAttacking hostAl Ḩammām, MatruhAS8452 TE-AS2 feeds2026-10-12 04:35
196.221.165[.]100AttackerAttacking hostMinyat an Naşr, DakahliaAS24835 Vodafone Data - Egypt2 feeds2026-10-12 04:35
197.121.2[.]21AttackerAttacking hostAl Khuşūş, QalyubiaAS36992 ETISALAT MISR2 feeds2026-10-12 04:35
197.34.46[.]238AttackerAttacking hostAsh-Shaykh Zāyid, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
197.35.38[.]233AttackerAttacking hostAsh-Shaykh Zāyid, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
41.235.151[.]230AttackerAttacking hostSīdī Sālim, Kafr el-SheikhAS8452 TE-AS2 feeds2026-10-12 04:35
41.235.174[.]126AttackerAttacking hostKirdāsah, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
41.35.113[.]242AttackerAttacking hostGiza, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
41.41.106[.]176AttackerAttacking hostCairo, CairoAS8452 TE-AS2 feeds2026-10-12 04:35
62.193.69[.]195AttackerAttacking hostNew Cairo, CairoAS36992 ETISALAT MISR2 feeds2026-10-12 04:35
81.10.98[.]82AttackerAttacking hostAsh-Shaykh Zāyid, GizaAS8452 TE-AS2 feeds2026-10-12 04:35
84.36.142[.]9AttackerAttacking hostAl Qāhirah al Jadīdah, CairoAS36992 ETISALAT MISR3 feeds2026-10-12 04:35
102.42.96[.]181MalwareMalicious URLKerdasa, GizaAS8452 TE-ASaggregated list2026-10-12 04:35
45.241.59[.]4AttackerAttacking hostAbū an Numrus, GizaAS24863 LINKdotNET AS number1 feed2026-10-12 04:35
45.130.203[.]130AttackerOn multiple blocklistsNew Cairo, CairoAS137409 GSL Networks Pty LTDaggregated list2026-10-12 04:35
45.130.203[.]143AttackerOn multiple blocklistsNew Cairo, CairoAS137409 GSL Networks Pty LTDaggregated list2026-10-12 04:35
45.130.203[.]165AttackerOn multiple blocklistsNew Cairo, CairoAS137409 GSL Networks Pty LTDaggregated list2026-10-12 04:35
45.130.203[.]180AttackerOn multiple blocklistsNew Cairo, CairoAS137409 GSL Networks Pty LTDaggregated list2026-10-12 04:35

See every listed IP in Egypt →

Ransomware victims in Egypt

3 posted in the last 30 days, 7 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-10 16:54Helwan University (HITU)UmBraEducation
2026-10-08 20:27FSE, Cairo UniversityUmBraEducation
2026-10-06 22:24Beni Suef Technological University – BTUUmBraEducation
2026-09-07 21:55Nile Projects TradingthegentlemenOther
2026-08-04 15:55ADG HealthcareOrovaHealthcare
2026-07-23 15:27nilepet.comkrybitRetail & E-Commerce
2026-07-16 12:24Sinai Grand CasinodragonforceHospitality

All ransomware victims in Egypt →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →