🇵🇰 Pakistan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Pakistan.

880Malicious IPs listed#14 of 182 countries · 1.33% of the world
353New in the last 24hfirst seen by any feed
117Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Pakistan on the live map →All listed IPs in PakistanRansomware victims in Pakistan

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C22
  2. Malware466
  3. Phishing0
  4. Attacker412

By state or region

  1. Punjab420
  2. Sindh289
  3. Islamabad138
  4. Khyber Pakhtunkhwa22
  5. Balochistan11

By city

  1. Karachi228
  2. Islamabad135
  3. Lahore77
  4. Model Town45
  5. Gujranwala39
  6. Sialkot15
  7. Mirpur Khas15
  8. Phalia15
  9. Nawabshah14
  10. Lalamusa13
  11. Multan11
  12. Kot Radha Kishan10
  13. Faisalabad9
  14. Shekhupura9
  15. Rawalpindi8

Networks hosting the most

NetworkIPs
AS9541 Cyber Internet Services (Private) Limited 351
AS17557 Pakistan Telecommuication company limited 137
AS141342 FIBERISH (PVT) LTD 33
AS132165 Connect Communication 32
AS138423 CMPak Limited 22
AS38264 Wateen Telecom Limited 20
AS151330 PLAY BROADBAND (PRIVATE) LIMITED 17
AS142647 Nasstec Airnet Networks Private Limited 16
AS135523 Multinet Broadband 16
AS136525 Wancom (Pvt) Ltd. 14
AS137047 TELECOMMUNICATION AND TECHNOLOGY MASTERS (PVT.) LIMITED 14
AS23888 National Telecommunication Corporation 14
AS23674 Nayatel (Pvt) Ltd 12
AS140900 Getlinks (SMC-Private) Limited 12
AS24499 Telenor Pakistan (Pvt) Ltd 11

Malware families served from Pakistan

  1. Mozi33
  2. Stealerc1
  3. Bundleinstaller1
  4. Havoc1
  5. Mirai1
  6. Phorpiex1
  7. Coinminer1
  8. IClickFix1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
103.123.113[.]169AttackerAttacking hostIslamabad, IslamabadAS135567 AirMax Private Limited1 feed2026-10-12 08:20
110.38.247[.]135AttackerAttacking hostMoro, SindhAS139879 Galaxy Broadband (pvt.) Ltd.1 feed2026-10-12 08:20
119.73.8[.]7AttackerAttacking hostGujrat, PunjabAS58470 JAZZWORLD PAKISTAN LIMITED1 feed2026-10-12 08:20
202.47.36[.]44AttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited2 feeds2026-10-12 08:20
2400[:]adcc[:]10a[:]2600[:]2cba[:]22d5[:]347[:]454dAttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 08:20
61.5.147[.]228AttackerAttacking hostSwabi, Khyber PakhtunkhwaAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 08:20
103.179.240[.]176AttackerOn multiple blocklistsLahore, PunjabAS151330 PLAY BROADBAND (PRIVATE) LIMITED1 feed2026-10-12 08:10
223.123.124[.]120AttackerAttacking hostNarowal, PunjabAS138423 CMPak Limited1 feed2026-10-12 08:10
192.140.149[.]163AttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 07:55
202.47.44[.]203AttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 07:55
110.38.254[.]104AttackerAttacking hostKarachi, SindhAS139879 Galaxy Broadband (pvt.) Ltd.1 feed2026-10-12 07:50
163.61.0[.]235AttackerAttacking hostHarunabad, PunjabAS153533 SHAHRAM TELECOM PRIVATE LIMITED1 feed2026-10-12 07:50
2400[:]adcc[:]10a[:]2600[:]2c36[:]2a89[:]9e18[:]d0dAttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 07:50
2400[:]adcc[:]10a[:]2600[:]ad05[:]f409[:]37cb[:]7330AttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 07:50
2400[:]adcc[:]10a[:]2600[:]cda9[:]7144[:]b5a2[:]460bAttackerAttacking hostKarachi, SindhAS9541 Cyber Internet Services (Private) Limited1 feed2026-10-12 07:50
182.176.116[.]4MalwareAttacking hostKarachi, SindhAS17557 Pakistan Telecommuication company limited1 feed2026-10-12 06:41
137.59.218[.]27MalwareMoziKarachi, SindhAS9541 Cyber Internet Services (Private) Limitedaggregated list2026-10-12 06:19
182.190.217[.]14:23C2MiraiPad Idan, SindhAS136525 Wancom (Pvt) Ltd.1 feed2026-10-12 06:11
110.38.183[.]29AttackerAttacking hostDipalpur, PunjabAS38264 Wateen Telecom Limited1 feed2026-10-12 06:10
154.192.232[.]169AttackerAttacking hostKarachi, SindhAS23674 Nayatel (Pvt) Ltd1 feed2026-10-12 06:10
103.198.154[.]218AttackerAttacking hostPindi Bhattian, PunjabAS151330 PLAY BROADBAND (PRIVATE) LIMITED2 feeds2026-10-12 05:35
110.38.183[.]30AttackerAttacking hostDipalpur, PunjabAS38264 Wateen Telecom Limited1 feed2026-10-12 05:35
117.20.30[.]210AttackerAttacking hostKarachi, SindhAS38193 TRANSWORLD ASSOCIATES (PVT) LIMITED1 feed2026-10-12 04:50
103.129.15[.]178AttackerAttacking hostManhala, PunjabAS152605 Z COM NETWORKS2 feeds2026-10-12 04:35
103.134.0[.]140AttackerAttacking hostMardan, Khyber PakhtunkhwaAS138590 Prime Networks2 feeds2026-10-12 04:35

See every listed IP in Pakistan →

Ransomware victims in Pakistan

0 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

    Groups (30 days)

      Posted (UTC)VictimGroupSector
      2026-08-23 08:08Dr Akbar Niazi Teaching HospitalkazuHealthcare
      2026-08-11 17:28Crown GroupqilinOther
      2026-07-22 16:07EFU Life AssuranceqilinFinancial Services

      All ransomware victims in Pakistan →

      Other countries

      🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →