🇮🇪 Ireland: live cyber threat activity

Malicious IPs, malware and ransomware victims in Ireland.

115Malicious IPs listed#42 of 182 countries · 0.17% of the world
63New in the last 24hfirst seen by any feed
15Reported by 2+ feedsindependent sources agree
2Ransomware victimsposted in the last 30 days

View Ireland on the live map →All listed IPs in IrelandRansomware victims in Ireland

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware9
  3. Phishing0
  4. Attacker106

By state or region

  1. Leinster96
  2. Munster19

By city

  1. Dublin94
  2. Killenaule5
  3. Waterford4
  4. Passage East3
  5. Kilsheelan2
  6. County Cork1
  7. Dunmore East1
  8. Borrisoleigh1
  9. Tramore1
  10. Palmerstown1
  11. Bray1
  12. Lismore1

Networks hosting the most

NetworkIPs
AS16509 Amazon.com, Inc. 73
AS51173 Premier Data Networks LTD 15
AS8075 Microsoft Corporation 12
AS5466 Eircom Limited 2
AS5607 Sky UK Limited 2
AS13280 Three Ireland (Hutchison) limited 2
AS36352 HostPapa 1
AS13335 Cloudflare, Inc. 1
AS212238 Datacamp Limited 1
AS42090 Rapid Broadband Ltd 1
AS136787 PacketHub S.A. 1
AS30377 MacStadium, Inc. 1
AS9009 M247 Europe SRL 1
AS15502 Vodafone Ireland Limited 1
AS6830 Liberty Global B.V. 1

Malware families served from Ireland

  1. Expiro2
  2. Stop1
  3. Bredolab1
  4. Generickdq1
  5. Sality1
  6. W97m1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
52.212.150[.]54MalwareExpiroDublin, LeinsterAS16509 Amazon.com, Inc.1 feed · 200 sandbox samples2026-10-12 07:53
3.255.177[.]231AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 07:50
54.246.215[.]9AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 07:50
37.203.49[.]66AttackerAttacking hostKillenaule, MunsterAS51173 Premier Data Networks LTD1 feed2026-10-12 06:41
63.35.220[.]27AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 06:10
40.127.240[.]158MalwareSalityDublin, LeinsterAS8075 Microsoft Corporation1 feed · 143 sandbox samples2026-10-12 06:08
52.16.171[.]153MalwareExpiroDublin, LeinsterAS16509 Amazon.com, Inc.1 feed · 95 sandbox samples2026-10-12 06:08
3.255.121[.]35AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 05:35
20.54.36[.]229MalwareStopDublin, LeinsterAS8075 Microsoft Corporation1 feed · 47 sandbox samples2026-10-12 05:15
18.200.248[.]62AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 05:00
54.216.112[.]174AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 05:00
51.182.180[.]89AttackerMalicious IPDublin, LeinsterAS5607 Sky UK Limited1 feed2026-10-12 04:35
51.37.167[.]185AttackerMalicious IPBorrisoleigh, MunsterAS15502 Vodafone Ireland Limited1 feed2026-10-12 04:35
89.106.143[.]138AttackerAttacking hostPassage East, MunsterAS51173 Premier Data Networks LTD2 feeds2026-10-12 04:35
89.106.143[.]151AttackerAttacking hostPassage East, MunsterAS51173 Premier Data Networks LTD2 feeds2026-10-12 04:35
37.203.49[.]108AttackerAttacking hostKillenaule, MunsterAS51173 Premier Data Networks LTD2 feeds2026-10-12 04:35
54.247.227[.]183AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 03:55
108.129.121[.]58AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 02:55
34.252.253[.]216AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 02:55
52.111.236[.]23MalwareW97mDublin, LeinsterAS8075 Microsoft Corporation1 feed · 343 sandbox samples2026-10-12 02:18
108.131.59[.]47AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 01:55
176.34.133[.]36AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 01:20
34.245.232[.]4AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 01:20
54.194.105[.]198AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-12 01:20
18.201.158[.]215AttackerAttacking hostDublin, LeinsterAS16509 Amazon.com, Inc.1 feed2026-10-11 23:40

See every listed IP in Ireland →

Ransomware victims in Ireland

2 posted in the last 30 days, 7 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-06 09:03CORBY ROCK MILLqilinManufacturing
2026-09-18 20:43Barrett Mahony Consulting EngineersplayProfessional Services
2026-08-31 14:59Allied RecyclingqilinManufacturing
2026-08-04 18:01Galvin BrothersqilinManufacturing
2026-07-31 18:28OHK EnergythegentlemenEnergy & Utilities
2026-07-27 01:54Host & Protect (RedBlink)CRPxOTechnology
2026-07-22 16:59Primeline LogisticsqilinTransportation

All ransomware victims in Ireland →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →