🇮🇩 Indonesia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Indonesia.

1,189Malicious IPs listed#13 of 182 countries · 1.8% of the world
142New in the last 24hfirst seen by any feed
222Reported by 2+ feedsindependent sources agree
4Ransomware victimsposted in the last 30 days

View Indonesia on the live map →All listed IPs in IndonesiaRansomware victims in Indonesia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C217
  2. Malware184
  3. Phishing0
  4. Attacker988

By state or region

  1. West Java673
  2. Jakarta251
  3. East Java56
  4. Banten41
  5. Central Java40
  6. Yogyakarta36
  7. North Sumatra16
  8. East Kalimantan14
  9. Bali9
  10. Riau9
  11. Lampung7
  12. South Sulawesi7
  13. South Sumatra4
  14. West Nusa Tenggara4
  15. Jambi3

By city

  1. Ciputat523
  2. Jakarta233
  3. Yogyakarta26
  4. Cicurug14
  5. Cikarang13
  6. Utan13
  7. Depok13
  8. Sepatan12
  9. Cileungsir11
  10. Semarang10
  11. Teluknaga10
  12. South Tangerang9
  13. Bogor7
  14. Magetan7
  15. Serpong7

Networks hosting the most

NetworkIPs
AS7713 Telekomunikasi Indonesia (PT) 238
AS150436 Byteplus Pte. Ltd. 26
AS23693 PT. Telekomunikasi Selular 25
AS136052 PT Cloud Hosting Indonesia 20
AS17451 BIZNET NETWORKS 17
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 16
AS63859 PT. Eka Mas Republik 14
AS132203 Shenzhen Tencent Computer Systems Company Limited 13
AS9341 PT INDONESIA COMNETS PLUS 9
AS4761 PT. INDOSAT Tbk 8
AS154039 PT Awan Media Digital 7
AS45102 Alibaba (US) Technology Co., Ltd. 7
AS131111 PT Mora Telematika Indonesia 6
AS4800 PT Aplikanusa Lintasarta 6
AS17995 PT iForte Global Internet 5

Malware families served from Indonesia

  1. Abracadabra6
  2. Jackskid6
  3. Mirai4
  4. Emotet3
  5. VShell2
  6. AdaptixC21
  7. Chaos1
  8. Deimos1
  9. Remus1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
2404[:]c0[:]d402[:]170f[:]826[:]b3c9[:]86e6[:]1a53AttackerAttacking hostJakarta, JakartaAS23693 PT. Telekomunikasi Selular1 feed2026-10-12 08:20
36.73.143[.]0AttackerAttacking hostJakarta, JakartaAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 08:20
36.78.8[.]22AttackerAttacking hostJakarta, JakartaAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 08:20
110.136.10[.]85MalwareMalware downloadTeluknaga, West JavaAS7713 Telekomunikasi Indonesia (PT)aggregated list2026-10-12 08:02
175.158.55[.]114AttackerAttacking hostSemarang, Central JavaAS135478 PT. Cyberindo Aditama1 feed2026-10-12 07:55
2001[:]448a[:]5040[:]cdf3[:]6cf2[:]8fce[:]2a10[:]71baAttackerAttacking hostKediri, East JavaAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 07:50
115.178.55[.]22MalwareAbracadabraKostarea Satu, West JavaAS38783 PT. Simaya Jejaring Mandiri1 feed · 94 sandbox samples2026-10-12 07:26
36.80.164[.]180AttackerAttacking hostSendawar, East KalimantanAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 07:15
114.5.209[.]74AttackerAttacking hostTugu, West JavaAS4761 PT. INDOSAT Tbk1 feed2026-10-12 06:41
182.23.5[.]226AttackerAttacking hostJakarta, JakartaAS4800 PT Aplikanusa Lintasarta2 feeds2026-10-12 06:41
36.80.163[.]201AttackerAttacking hostSamboja, East KalimantanAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 06:41
103.126.172[.]146AttackerAttacking hostPringsewu, LampungAS138112 PT. Megarap Mitra Solusi1 feed2026-10-12 06:10
103.159.221[.]207AttackerAttacking hostCireundeu, BantenAS58369 PT. Fiber Networks Indonesia2 feeds2026-10-12 06:10
182.253.89[.]114AttackerAttacking hostSemarang, Central JavaAS17451 BIZNET NETWORKS2 feeds2026-10-12 06:10
36.83.50[.]30AttackerAttacking hostBalikpapan, East KalimantanAS7713 Telekomunikasi Indonesia (PT)1 feed2026-10-12 06:10
180.243.200[.]68AttackerAttacking hostJakarta, JakartaAS7713 Telekomunikasi Indonesia (PT)2 feeds2026-10-12 05:55
142.111.15[.]137AttackerAttacking hostJakarta, JakartaAS149440 Evoxt Sdn. Bhd.1 feed2026-10-12 05:35
163.7.9[.]194AttackerAttacking hostYogyakarta, YogyakartaAS150436 Byteplus Pte. Ltd.1 feed2026-10-12 05:35
182.3.51[.]131AttackerAttacking hostJakarta, JakartaAS23693 PT. Telekomunikasi Selular1 feed2026-10-12 05:35
103.125.88[.]6AttackerAttacking hostPameungpeuk, West JavaAS138050 Dinas Komunikasi Provins Jawa Barat3 feeds2026-10-12 04:35
103.133.62[.]30AttackerAttacking hostOganlima, LampungAS138134 PT Tunas Link Indonesia2 feeds2026-10-12 04:35
103.139.11[.]214AttackerAttacking hostBandung, West JavaAS55699 PT. Cemerlang Multimedia3 feeds2026-10-12 04:35
103.146.202[.]118AttackerMalicious IPCicurug, West JavaAS136052 PT Cloud Hosting Indonesia1 feed2026-10-12 04:35
103.146.203[.]222AttackerMalicious IPCicurug, West JavaAS136052 PT Cloud Hosting Indonesia1 feed2026-10-12 04:35
103.146.63[.]243AttackerAttacking hostBogor, West JavaAS139457 PT Semut Data Indonesia2 feeds2026-10-12 04:35

See every listed IP in Indonesia →

Ransomware victims in Indonesia

4 posted in the last 30 days, 20 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-02 13:14PT Indo Tambangraya MegahransomhouseEnergy & Utilities
2026-09-30 03:39SolariathegentlemenAgriculture and Food Production
2026-09-25 19:00PKF HadiwinatametaencryptorProfessional Services
2026-09-17 14:31PertaminaransomhouseEnergy & Utilities
2026-09-03 11:51Dinas Komunikasi dan InformatikaPanzerGovernment & Defense
2026-09-01 15:53PT Intraco Penta TbkdirewolfManufacturing
2026-08-25 14:26Sinar Mas Agribusiness and Food Golden Agri-Resources)ShadowByt3$Agriculture and Food Production
2026-08-22 13:53PT Perusahaan Jamu Air MancurcoinbasecartelAgriculture and Food Production
2026-08-22 13:52PT. Bank Perekonomian Rakyat BintancoinbasecartelFinancial Services
2026-08-20 16:22Frisian Flag IndonesiaPanzerAgriculture and Food Production
2026-08-20 14:36Indonesian Police DatabaseDYSPHOR1AGovernment & Defense
2026-08-05 21:29Surakarta UniversityPanzerEducation
2026-08-05 07:24PT All Cosmos BiotekgunraHealthcare
2026-08-04 03:27pushidrosal.idincransomOther
2026-07-31 18:21PertaminathegentlemenEnergy & Utilities

All ransomware victims in Indonesia →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →