🇵🇸 Palestine: live cyber threat activity

Malicious IPs, malware and ransomware victims in Palestine.

10Malicious IPs listed#118 of 182 countries · 0.01% of the world
3New in the last 24hfirst seen by any feed
3Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days

View Palestine on the live map →All listed IPs in Palestine

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C21
  2. Malware2
  3. Phishing0
  4. Attacker7

By state or region

  1. West Bank9
  2. Gaza Strip1

By city

  1. Nablus5
  2. as-Samu1
  3. Bayt Wazan1
  4. Gaza1
  5. Ramallah1
  6. Ash Shuhadā’1

Networks hosting the most

NetworkIPs
AS12975 Palestine Telecommunications Company (PALTEL) 8
AS211057 Astra for Telecommunication and IT Services 1
AS42314 Fusion Internet Services Company LLC 1

Malware families served from Palestine

  1. Cobalt Strike1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
83.244.35[.]15AttackerAttacking hostNablus, West BankAS12975 Palestine Telecommunications Company (PALTEL)1 feed2026-10-12 07:50
24.42.116[.]67AttackerAttacking hostNablus, West BankAS12975 Palestine Telecommunications Company (PALTEL)2 feeds2026-10-12 04:35
86.107.16[.]61AttackerAttacking hostRamallah, West BankAS12975 Palestine Telecommunications Company (PALTEL)1 feed2026-10-11 20:20
83.244.119[.]40AttackerAttacking hostNablus, West BankAS12975 Palestine Telecommunications Company (PALTEL)2 feeds2026-10-11 04:31
213.6.74[.]138MalwareMalicious URLAsh Shuhadā’, West BankAS12975 Palestine Telecommunications Company (PALTEL)aggregated list2026-10-11 04:31
185.21.120[.]72AttackerMalicious IPas-Samu, West BankAS211057 Astra for Telecommunication and IT Services2 feeds2026-10-09 04:27
212.14.244[.]222:809C2Cobalt StrikeBayt Wazan, West BankAS12975 Palestine Telecommunications Company (PALTEL)1 feed · 3 sandbox samples2026-06-16 23:46
213.6.70[.]100AttackerCompromised hostNablus, West BankAS12975 Palestine Telecommunications Company (PALTEL)1 feed—
85.114.106[.]22AttackerMalicious IPGaza, Gaza StripAS42314 Fusion Internet Services Company LLC1 feed—
213.6.196[.]230MalwareMalicious URLNablus, West BankAS12975 Palestine Telecommunications Company (PALTEL)aggregated list—

See every listed IP in Palestine →

Ransomware victims in Palestine

No ransomware victims from Palestine posted in the last 90 days.

Other countries