🇮🇶 Iraq: live cyber threat activity

Malicious IPs, malware and ransomware victims in Iraq.

98Malicious IPs listed#45 of 182 countries · 0.15% of the world
18New in the last 24hfirst seen by any feed
50Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Iraq on the live map →All listed IPs in IraqRansomware victims in Iraq

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware4
  3. Phishing0
  4. Attacker94

By state or region

  1. Baghdad70
  2. Nineveh8
  3. Basra5
  4. Anbar4
  5. Erbil3
  6. Najaf3
  7. Wasit2
  8. Karbala1
  9. Sulaymaniyah1
  10. Babil1

By city

  1. Baghdad70
  2. Mosul5
  3. Ramadi4
  4. Basra3
  5. Tallkayf3
  6. Dare Tû2
  7. Az Zubayr2
  8. Najaf2
  9. Al ‘Azīzīyah2
  10. Erbil1
  11. Karbala1
  12. Sulaymaniyah1
  13. Kufa1
  14. Hillah1

Networks hosting the most

NetworkIPs
AS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd 77
AS199739 Earthlink Telecommunications Equipment Trading & Services DMCC 5
AS201749 SUPER CELL NETWORK FOR INTERNET SERVICES LTD 4
AS50597 ScopeSky for communications, internet and technology services LLC 2
AS206206 Kurdistan Net Company for Computer and Internet Ltd. 2
AS13335 Cloudflare, Inc. 1
AS59588 Al Atheer Telecommunication-Iraq Co. Ltd. Incorporated in Cayman Islands 1
AS209193 SUPER CELL NETWORK FOR INTERNET SERVICES LTD 1
AS210022 Trade Link Logistics General Trading & Contracting Company W.L.L., L.L.C. 1
AS34515 Next Net for Internet and IT Services LTD 1
AS210509 Optimum Line for Internet Services Ltd. 1
AS44217 IQ Networks for Data and Internet Services Ltd 1
AS39216 Pulk Company for General Trading, Communications & Investment, Ltd. 1

Malware families served from Iraq

  1. Mokes1
  2. Shortcut1
  3. Gencbl1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
185.95.186[.]58MalwareMokesSulaymaniyah, SulaymaniyahAS34515 Next Net for Internet and IT Services LTD1 feed · 1,050 sandbox samples2026-10-12 07:26
151.236.176[.]141AttackerAttacking hostBasra, BasraAS59588 Al Atheer Telecommunication-Iraq Co. Ltd. Incorporated in Cayman Islands2 feeds2026-10-12 04:35
169.224.1[.]253AttackerAttacking hostBaghdad, BaghdadAS199739 Earthlink Telecommunications Equipment Trading & Services DMCC2 feeds2026-10-12 04:35
169.224.35[.]63AttackerAttacking hostBasra, BasraAS199739 Earthlink Telecommunications Equipment Trading & Services DMCC2 feeds2026-10-12 04:35
169.224.38[.]166AttackerAttacking hostBasra, BasraAS199739 Earthlink Telecommunications Equipment Trading & Services DMCC2 feeds2026-10-12 04:35
212.237.123[.]225AttackerAttacking hostDare Tû, ErbilAS206206 Kurdistan Net Company for Computer and Internet Ltd.2 feeds2026-10-12 04:35
212.237.123[.]39AttackerAttacking hostDare Tû, ErbilAS206206 Kurdistan Net Company for Computer and Internet Ltd.2 feeds2026-10-12 04:35
65.20.130[.]220AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
65.20.132[.]11AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
65.20.151[.]169AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
65.20.156[.]238AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
65.20.157[.]21AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
65.20.252[.]167AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
85.194.250[.]35AttackerAttacking hostNajaf, NajafAS50597 ScopeSky for communications, internet and technology services LLC2 feeds2026-10-12 04:35
109.224.17[.]86AttackerMalicious IPBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-12 04:35
37.239.47[.]202AttackerMalicious IPBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd1 feed2026-10-12 04:35
104.28.155[.]183AttackerAttacking hostErbil, ErbilAS13335 Cloudflare, Inc.1 feed2026-10-11 23:05
65.20.154[.]208AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd1 feed2026-10-11 22:31
185.147.102[.]60AttackerMalicious IPBaghdad, BaghdadAS209193 SUPER CELL NETWORK FOR INTERNET SERVICES LTD1 feed2026-10-11 04:31
194.31.220[.]230AttackerAttacking hostBaghdad, BaghdadAS201749 SUPER CELL NETWORK FOR INTERNET SERVICES LTD2 feeds2026-10-11 04:31
65.20.130[.]6AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-11 04:31
65.20.133[.]209AttackerMalicious IPBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd1 feed2026-10-11 04:31
65.20.136[.]190AttackerMalicious IPBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd1 feed2026-10-11 04:31
65.20.136[.]94AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-11 04:31
65.20.150[.]21AttackerAttacking hostBaghdad, BaghdadAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2 feeds2026-10-11 04:31

See every listed IP in Iraq →

Ransomware victims in Iraq

0 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-07-26 17:55Al Hayat | PepsiGlobal Secret GroupRetail & E-Commerce

      All ransomware victims in Iraq →

      Other countries