🇱🇾 Libya: live cyber threat activity

Malicious IPs, malware and ransomware victims in Libya.

8Malicious IPs listed#123 of 182 countries · 0.01% of the world

1New in the last 24hfirst seen by any feed

2Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

Listed IPs by role.

Network	IPs
AS328286 Libyana Mobile Phone Company JSC	2
AS328539 Giga for Telecommunication and Technology Limited	2
AS21003 LTT Autonomous System, Tripoli Libya	2
AS328611 Libyan Elite Company for Technical Solutions	1
AS37284 Aljeel Aljadeed For Technology	1

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
165.16.76[.]105	Attacker	Attacking host	Qaşr Bin Ghashīr, Tripoli	AS37284 Aljeel Aljadeed For Technology	1 feed	2026-10-11 19:20
102.164.97[.]130	Attacker	Malicious IP	Al Khaḑrā’, Al Marqab	AS328286 Libyana Mobile Phone Company JSC	1 feed	2026-10-11 04:31
102.38.3[.]107	Attacker	On multiple blocklists	Tripoli, Tripoli	AS328539 Giga for Telecommunication and Technology Limited	2 feeds	2026-10-10 04:30
102.38.3[.]104	Attacker	Attacking host	Tripoli, Tripoli	AS328539 Giga for Telecommunication and Technology Limited	1 feed	2026-10-10 04:30
102.164.97[.]118	Malware	Offercore	Al Khaḑrā’, Al Marqab	AS328286 Libyana Mobile Phone Company JSC	1 feed · 5 sandbox samples	2026-10-09 15:37
41.252.58[.]224	Malware	Malware download	Tripoli, Tripoli	AS21003 LTT Autonomous System, Tripoli Libya	aggregated list	2026-09-24 07:46
41.252.58[.]139	Malware	Malware download	Tripoli, Tripoli	AS21003 LTT Autonomous System, Tripoli Libya	aggregated list	2026-09-22 10:02
102.211.7[.]162	Attacker	Attacking host	Benghazi, Banghazi	AS328611 Libyan Elite Company for Technical Solutions	2 feeds	—

No ransomware victims from Libya posted in the last 90 days.