🇯🇴 Jordan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Jordan.

18Malicious IPs listed#102 of 182 countries · 0.03% of the world
7New in the last 24hfirst seen by any feed
6Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Jordan on the live map →All listed IPs in JordanRansomware victims in Jordan

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C20
  2. Malware0
  3. Phishing0
  4. Attacker18

By state or region

  1. Amman14
  2. Zarqa2
  3. Balqa1
  4. Irbid1

By city

  1. Amman12
  2. Al ‘Abdallī2
  3. ‘Ayn al Bāshā1
  4. Al Hāshimīyah1
  5. Zarqa1
  6. Irbid1

Networks hosting the most

NetworkIPs
AS8376 Jordan Data Communications Company LLC 8
AS9038 Batelco Jordan 6
AS48832 Linkdotnet-Jordan 4

Malware families served from Jordan

No malware family attributed to IPs here.

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
212.118.18[.]112AttackerAttacking hostAmman, AmmanAS9038 Batelco Jordan3 feeds2026-10-12 07:55
109.107.231[.]81AttackerAttacking host‘Ayn al Bāshā, BalqaAS9038 Batelco Jordan1 feed2026-10-12 06:41
109.107.230[.]31AttackerAttacking hostAmman, AmmanAS9038 Batelco Jordan2 feeds2026-10-12 04:35
176.29.239[.]215AttackerAttacking hostAl Hāshimīyah, ZarqaAS48832 Linkdotnet-Jordan2 feeds2026-10-12 04:35
176.29.80[.]156AttackerAttacking hostZarqa, ZarqaAS48832 Linkdotnet-Jordan2 feeds2026-10-12 04:35
2a01[:]9700[:]4831[:]8401[:]d843[:]ae92[:]42a1[:]5e38AttackerAttacking hostAmman, AmmanAS8376 Jordan Data Communications Company LLC2 feeds2026-10-12 04:35
94.249.4[.]91AttackerAttacking hostIrbid, IrbidAS8376 Jordan Data Communications Company LLC2 feeds2026-10-12 04:35
212.118.18[.]113AttackerAttacking hostAmman, AmmanAS9038 Batelco Jordan1 feed2026-10-11 07:30
92.241.39[.]80AttackerMalicious IPAmman, AmmanAS9038 Batelco Jordan1 feed2026-10-11 04:31
79.173.199[.]208AttackerAttacking hostAmman, AmmanAS8376 Jordan Data Communications Company LLC1 feed2026-10-09 04:27
86.108.41[.]98AttackerAttacking hostAmman, AmmanAS8376 Jordan Data Communications Company LLC1 feed2026-10-09 04:27
176.28.181[.]253AttackerAttacking hostAmman, AmmanAS48832 Linkdotnet-Jordan1 feed—
176.29.154[.]32AttackerAttacking hostAmman, AmmanAS48832 Linkdotnet-Jordan1 feed—
212.118.18[.]121AttackerAttacking hostAmman, AmmanAS9038 Batelco Jordan1 feed—
213.186.179[.]6AttackerAttacking hostAl ‘Abdallī, AmmanAS8376 Jordan Data Communications Company LLC1 feed—
213.186.183[.]40AttackerAttacking hostAmman, AmmanAS8376 Jordan Data Communications Company LLC1 feed—
46.185.184[.]85AttackerAttacking hostAl ‘Abdallī, AmmanAS8376 Jordan Data Communications Company LLC1 feed—
94.249.60[.]61AttackerAttacking hostAmman, AmmanAS8376 Jordan Data Communications Company LLC1 feed—

See every listed IP in Jordan →

Ransomware victims in Jordan

0 posted in the last 30 days, 1 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-08-13 12:29Zara Investment HoldingpayloadFinancial Services

      All ransomware victims in Jordan →

      Other countries

      🇺🇸 United States 17,847🇨🇳 China 10,891🇩🇪 Germany 4,347🇬🇧 United Kingdom 3,644🇷🇺 Russia 3,596🇳🇱 Netherlands 2,264🇮🇳 India 2,104🇫🇷 France 1,552🇧🇷 Brazil 1,418🇸🇬 Singapore 1,361🇰🇷 South Korea 1,335🇭🇰 Hong Kong 1,323🇮🇩 Indonesia 1,195🇵🇰 Pakistan 886🇨🇦 Canada 885🇯🇵 Japan 731🇧🇪 Belgium 729🇺🇦 Ukraine 685🇵🇱 Poland 566🇿🇦 South Africa 562🇲🇾 Malaysia 560🇻🇳 Vietnam 553🇮🇹 Italy 415🇸🇪 Sweden 384All countries →