🇲🇬 Madagascar: live cyber threat activity

Malicious IPs, malware and ransomware victims in Madagascar.

9Malicious IPs listed#119 of 182 countries · 0.01% of the world

3New in the last 24hfirst seen by any feed

4Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

Listed IPs by role.

Network	IPs
AS37054 Telecom Malagasy	4
AS14593 Space Exploration Technologies Corporation	3
AS37037 Orange Madagascar	1
AS37608 iRENALA	1

No malware family attributed to IPs here.

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
102.20.25[.]73	Attacker	Attacking host	Antananarivo, Analamanga	AS37054 Telecom Malagasy	1 feed	2026-10-12 11:05
102.18.147[.]213	Attacker	Attacking host	Antananarivo, Analamanga	AS37054 Telecom Malagasy	2 feeds	2026-10-12 06:41
153.67.85[.]91	Attacker	Attacking host	Antananarivo, Analamanga	AS14593 Space Exploration Technologies Corporation	1 feed	2026-10-12 05:00
129.222.109[.]99	Attacker	Malicious IP	Antananarivo, Analamanga	AS14593 Space Exploration Technologies Corporation	1 feed	2026-10-11 04:31
2605[:]59ca[:]824e[:]6008[:]6006[:]54c9[:]1efc[:]aaa4	Attacker	Attacking host	Antananarivo, Analamanga	AS14593 Space Exploration Technologies Corporation	2 feeds	2026-10-11 04:31
102.16.82[.]164	Attacker	Malicious IP	Ivato, Analamanga	AS37054 Telecom Malagasy	1 feed	2026-10-09 04:27
102.16.48[.]130	Attacker	Compromised host	Antananarivo, Analamanga	AS37054 Telecom Malagasy	1 feed	—
154.120.138[.]30	Attacker	Attacking host	Antananarivo, Analamanga	AS37037 Orange Madagascar	2 feeds	—
41.242.96[.]2	Attacker	Attacking host	Antananarivo, Analamanga	AS37608 iRENALA	2 feeds	—

No ransomware victims from Madagascar posted in the last 90 days.