🇫🇷 France: live cyber threat activity

Malicious IPs, malware and ransomware victims in France.

1,538Malicious IPs listed#8 of 182 countries · 2.33% of the world
225New in the last 24hfirst seen by any feed
357Reported by 2+ feedsindependent sources agree
25Ransomware victimsposted in the last 30 days

View France on the live map →All listed IPs in FranceRansomware victims in France

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C2104
  2. Malware141
  3. Phishing0
  4. Attacker1,293

By state or region

  1. Île-de-France712
  2. Hauts-de-France662
  3. Provence-Alpes-Côte d'Azur52
  4. Grand Est29
  5. Pays de la Loire18
  6. New Aquitaine15
  7. Auvergne-Rhône-Alpes14
  8. Occitanie12
  9. Rhône-Alpes6
  10. Brittany5
  11. Provence3
  12. Centre-Val de Loire3
  13. Normandy3
  14. Corsica2
  15. Bourgogne-Franche-Comté2

By city

  1. Roubaix434
  2. Paris363
  3. Massy250
  4. Gravelines215
  5. Vélizy-Villacoublay49
  6. Marseille39
  7. Strasbourg23
  8. Saint-Denis21
  9. Saint-Herblain17
  10. Lyon11
  11. Cabriès9
  12. Bordeaux9
  13. Wattrelos7
  14. Aubervilliers4
  15. Soultzmatt3

Networks hosting the most

NetworkIPs
AS213412 ONYPHE SAS 434
AS16276 OVH SAS 253
AS396982 Google LLC 252
AS12876 Scaleway SAS 77
AS198364 BANATSYNC SRL 69
AS209334 Modat B.V. 50
AS3215 Orange S.A. 33
AS214961 Stellar Group SAS 31
AS34534 FBW NETWORKS SAS 27
AS12322 Free SAS 25
AS9009 M247 Europe SRL 22
AS211590 Bucklog SARL 21
AS15557 Societe Francaise Du Radiotelephone - SFR SA 21
AS59877 VA TELECOM SAS 17
AS399486 12651980 CANADA INC. 15

Malware families served from France

  1. PureRAT28
  2. AsyncRAT11
  3. Loki6
  4. AdaptixC25
  5. Themida5
  6. Havoc5
  7. Zeppelin4
  8. Zard4
  9. Dacic4
  10. Emotet4
  11. Jalapeno3
  12. pupy3
  13. Coinhelper3
  14. Sybici3
  15. Bingoml3

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
216.180.246[.]42AttackerOn multiple blocklistsMassy, Île-de-FranceAS396982 Google LLC2 feeds2026-10-12 08:20
91.231.89[.]69AttackerAttacking hostGravelines, Hauts-de-FranceAS213412 ONYPHE SAS1 feed2026-10-12 08:10
163.171.133[.]172AttackerAttacking hostParis, Île-de-FranceAS54994 Meteverse Limited.1 feed2026-10-12 07:55
91.121.67[.]60MalwareDacicRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed · 1,252 sandbox samples2026-10-12 07:53
91.216.107[.]153MalwareAntiloadrGolbey, Grand EstAS210403 Groupe LWS SARL1 feed · 187 sandbox samples2026-10-12 07:53
54.36.60[.]45AttackerAttacking hostRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed2026-10-12 07:50
185.156.72[.]39MalwareGrenamParis, Île-de-FranceAS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP1 feed · 56 sandbox samples2026-10-12 07:26
194.59.31[.]31MalwareModiloaderParis, Île-de-FranceAS399486 12651980 CANADA INC.1 feed · 3 sandbox samples2026-10-12 07:26
82.127.132[.]221AttackerAttacking hostBordeaux, New AquitaineAS3215 Orange S.A.1 feed2026-10-12 07:15
37.187.167[.]53MalwareAgentbRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed · 16 sandbox samples2026-10-12 06:58
137.74.246[.]152AttackerAttacking hostRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed2026-10-12 06:55
85.217.140[.]51AttackerScanner / attackerParis, Île-de-FranceAS209334 Modat B.V.4 feeds2026-10-12 06:55
213.176.73[.]162:80C2SmartLoaderParis, Île-de-FranceAS207957 SERV.HOST GROUP LTD1 feed2026-10-12 06:49
194.70.234[.]219AttackerAttacking hostSaint-Denis, Île-de-FranceAS46475 Limestone Networks, Inc.1 feed2026-10-12 06:41
217.182.169[.]148MalwareAgentbRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed · 113 sandbox samples2026-10-12 06:32
51.255.34[.]118MalwareAgentbRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed · 105 sandbox samples2026-10-12 06:32
212.129.34[.]236AttackerAttacking hostParis, Île-de-FranceAS12876 Scaleway SAS2 feeds2026-10-12 06:10
91.231.89[.]171AttackerAttacking hostGravelines, Hauts-de-FranceAS213412 ONYPHE SAS1 feed2026-10-12 06:10
91.231.89[.]173AttackerAttacking hostGravelines, Hauts-de-FranceAS213412 ONYPHE SAS1 feed2026-10-12 06:10
91.231.89[.]67AttackerAttacking hostGravelines, Hauts-de-FranceAS213412 ONYPHE SAS1 feed2026-10-12 06:10
85.217.140[.]9AttackerAttacking hostParis, Île-de-FranceAS209334 Modat B.V.3 feeds2026-10-12 05:55
194.180.174[.]80MalwareMsilheraclesParis, Île-de-FranceAS39798 MivoCloud SRL1 feed · 15 sandbox samples2026-10-12 05:48
178.20.55[.]182AttackerTor exitCazes-Mondenard, OccitanieAS29075 IELO-LIAZO SERVICES SAS2 feeds2026-10-12 05:35
51.68.111[.]205AttackerAttacking hostRoubaix, Hauts-de-FranceAS16276 OVH SAS1 feed2026-10-12 05:35
193.56.146[.]177MalwareZardSaint-Herblain, Pays de la LoireAS59877 VA TELECOM SAS1 feed · 52 sandbox samples2026-10-12 05:31

See every listed IP in France →

Ransomware victims in France

25 posted in the last 30 days, 65 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 19:26SAS H2O MICHELthegentlemenOther
2026-10-09 19:23Mabristhegentlemen—
2026-10-07 22:59RÉSOdragonforceTechnology
2026-10-04 13:02euroditel.comkrybitTechnology
2026-10-02 09:30www.pierrefeu.frkrybitOther
2026-10-01 21:33EURODITEL/RESOTELECOMkrybitTechnology
2026-09-30 19:28Le Centre National de l'Expertise Hospitalière (CNEH)kairosHealthcare
2026-09-30 13:04FIDUCIALlamashtuFinancial Services
2026-09-30 03:39EuroprimthegentlemenHealthcare
2026-09-27 22:24Ressources SiPanzerProfessional Services
2026-09-24 13:46Agora coopérative agricoleqilinAgriculture and Food Production
2026-09-24 10:54agiliance.frZaWooProfessional Services
2026-09-24 10:54www.francare.comZaWooHealthcare
2026-09-24 10:53amb-pvc.comZaWooManufacturing
2026-09-24 09:59BMGP GroupedragonforceOther

All ransomware victims in France →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →