🇮🇱 Israel: live cyber threat activity

Malicious IPs, malware and ransomware victims in Israel.

82Malicious IPs listed#52 of 182 countries · 0.12% of the world
11New in the last 24hfirst seen by any feed
28Reported by 2+ feedsindependent sources agree
5Ransomware victimsposted in the last 30 days

View Israel on the live map →All listed IPs in IsraelRansomware victims in Israel

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C25
  2. Malware6
  3. Phishing0
  4. Attacker71

By state or region

  1. Tel Aviv43
  2. Central District30
  3. Southern District3
  4. Jerusalem3
  5. Haifa2
  6. Northern District1

By city

  1. Tel Aviv28
  2. Giv‘atayim13
  3. Rosh HaAyin9
  4. Petah Tikva9
  5. Netanya6
  6. Jerusalem3
  7. Yakum3
  8. Eilat1
  9. Kfar Netter1
  10. Ma‘anit1
  11. Shuva1
  12. Tirat Carmel1
  13. Migdal HaEmeq1
  14. Ashdod1
  15. Hod HaSharon1

Networks hosting the most

NetworkIPs
AS12400 Partner Communications Ltd. 15
AS16116 Pelephone Communications Ltd. 13
AS1680 Cellcom Fixed Line Communication L.P 7
AS211486 Alferov Aleksey Aleksandrovich 7
AS50463 Triple C Cloud Computing Ltd. 6
AS8075 Microsoft Corporation 6
AS12849 Hot-Net internet services Ltd. 5
AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. 4
AS22363 Powerhouse Management, Inc. 3
AS31898 Oracle Corporation 3
AS44709 O.M.C. COMPUTERS & COMMUNICATIONS LTD 2
AS8551 Bezeq International Ltd. 2
AS212616 K.M.A ADVANCED TECHNOLOGIES LTD 2
AS51825 Telzar 019 International Telecommunications Services LTD 1
AS47962 SECURE ON SECURITY SYSTEMS LTD 1

Malware families served from Israel

  1. AsyncRAT3
  2. Mirai1
  3. Abracadabra1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
147.234.96[.]158AttackerAttacking hostKfar Netter, Central DistrictAS51825 Telzar 019 International Telecommunications Services LTD2 feeds2026-10-12 04:35
185.191.204[.]9AttackerMalicious IPTel Aviv, Tel AvivAS35758 Rachamim Aviel Twito1 feed2026-10-12 04:35
2a06[:]c701[:]919b[:]bb00[:]4926[:]9f94[:]4d9[:]3170AttackerAttacking hostHod HaSharon, Central DistrictAS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.2 feeds2026-10-12 04:35
77.127.13[.]91AttackerAttacking hostPetah Tikva, Central DistrictAS12400 Partner Communications Ltd.2 feeds2026-10-12 04:35
130.185.101[.]27AttackerAttacking hostGiv‘atayim, Tel AvivAS16116 Pelephone Communications Ltd.2 feeds2026-10-12 04:35
2.55.88[.]129AttackerAttacking hostRosh HaAyin, Central DistrictAS12400 Partner Communications Ltd.1 feed2026-10-12 04:35
2a00[:]a041[:]ea44[:]4600[:]996[:]391a[:]4a69[:]fb63AttackerAttacking hostNetanya, Central DistrictAS12849 Hot-Net internet services Ltd.1 feed2026-10-12 03:55
82.80.249[.]225AttackerAttacking hostTel Aviv, Tel AvivAS8551 Bezeq International Ltd.1 feed2026-10-12 00:35
51.4.97[.]106AttackerAttacking hostTel Aviv, Tel AvivAS8075 Microsoft Corporation1 feed2026-10-11 19:15
87.71.72[.]192AttackerAttacking hostPetah Tikva, Central DistrictAS12400 Partner Communications Ltd.1 feed2026-10-11 18:41
199.203.101[.]136:3000C2MiraiNetanya, Central DistrictAS1680 Cellcom Fixed Line Communication L.P1 feed2026-10-11 17:11
130.185.101[.]32AttackerOn multiple blocklistsGiv‘atayim, Tel AvivAS16116 Pelephone Communications Ltd.1 feed2026-10-11 04:31
5.29.74[.]1AttackerAttacking hostUdim, Central DistrictAS12849 Hot-Net internet services Ltd.2 feeds2026-10-11 04:31
91.217.51[.]141AttackerAttacking hostTel Aviv, Tel AvivAS212616 K.M.A ADVANCED TECHNOLOGIES LTD2 feeds · 1 sandbox sample2026-10-11 04:31
109.226.44[.]217AttackerMalicious IPPetah Tikva, Central DistrictAS50463 Triple C Cloud Computing Ltd.2 feeds2026-10-10 20:20
176.228.181[.]90AttackerAttacking hostShuva, Southern DistrictAS12400 Partner Communications Ltd.1 feed2026-10-10 13:30
83.229.80[.]93MalwareAbracadabraRosh HaAyin, Central DistrictAS25052 O.M.C. COMPUTERS & COMMUNICATIONS LTD1 feed · 283 sandbox samples2026-10-10 09:38
79.177.163[.]89AttackerAttacking hostTel Aviv, Tel AvivAS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.2 feeds2026-10-10 04:30
77.91.71[.]43AttackerAttacking hostTel Aviv, Tel AvivAS211486 Alferov Aleksey Aleksandrovich1 feed2026-10-10 04:30
62.0.131[.]185AttackerAttacking hostNetanya, Central DistrictAS1680 Cellcom Fixed Line Communication L.P1 feed2026-10-10 04:10
62.90.189[.]134AttackerAttacking hostAzor, Tel AvivAS1680 Cellcom Fixed Line Communication L.P1 feed2026-10-10 04:10
109.226.14[.]23AttackerAttacking hostRosh HaAyin, Central DistrictAS50463 Triple C Cloud Computing Ltd.2 feeds2026-10-09 04:27
109.226.15[.]208AttackerAttacking hostPetah Tikva, Central DistrictAS50463 Triple C Cloud Computing Ltd.2 feeds2026-10-09 04:27
2.55.75[.]176AttackerAttacking hostRosh HaAyin, Central DistrictAS12400 Partner Communications Ltd.2 feeds2026-10-09 04:27
82.102.188[.]117AttackerAttacking hostRosh HaAyin, Central DistrictAS12400 Partner Communications Ltd.2 feeds2026-10-09 04:27

See every listed IP in Israel →

Ransomware victims in Israel

5 posted in the last 30 days, 11 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 19:26Galil EngineeringthegentlemenManufacturing
2026-10-09 11:11Hagiva Yhqilin—
2026-09-30 03:38Telrad NetworksthegentlemenTechnology
2026-09-21 17:22Telrad NetworksqilinTechnology
2026-09-15 07:11Ardom Eilotthegentlemen—
2026-08-22 14:13NovoCure LimitedshinyhuntersHealthcare
2026-08-03 18:27hanan-hov.co.ilsafepayOther
2026-08-02 00:00Lumenis Ltd.shinyhuntersTechnology
2026-07-31 18:24Efrata College of EducationthegentlemenEducation
2026-07-31 18:24AmicellthegentlemenHealthcare
2026-07-17 00:30eitzchaim.comkrybitOther

All ransomware victims in Israel →

Other countries