🇵🇾 Paraguay: live cyber threat activity
Malicious IPs, malware and ransomware victims in Paraguay.
21Malicious IPs listed#97 of 182 countries · 0.03% of the world
4New in the last 24hfirst seen by any feed
9Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days
View Paraguay on the live map →All listed IPs in ParaguayRansomware victims in Paraguay
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
| Network | IPs |
|---|---|
| AS23201 Telecel S.A. | 7 |
| AS27895 Núcleo S.A. | 4 |
| AS11664 Techtel LMDS Comunicaciones Interactivas S.A. | 3 |
| AS264631 RED PARAGUAYA DE TELECOMUNICACIONES SA | 2 |
| AS263717 SOL TELECOMUNICACIONES S.A. | 1 |
| AS52468 UFINET PANAMA S.A. | 1 |
| AS263228 PLANET S.A. | 1 |
| AS266673 FLYTEC TELECOM SOCIEDAD ANONIMA | 1 |
| AS269783 WIND NET S.A. | 1 |
Malware families served from Paraguay
No malware family attributed to IPs here.
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 181.78.94[.]188 | Attacker | Attacking host | Eusebio Ayala, Cordillera Department | AS52468 UFINET PANAMA S.A. | 2 feeds | 2026-10-12 04:35 |
| 181.85.209[.]81 | Attacker | Attacking host | San Lorenzo, Central Department | AS27895 Núcleo S.A. | 3 feeds | 2026-10-12 04:35 |
| 2803[:]8920[:]80f2[:]f800[:]8d0d[:]6fcb[:]37be[:]3679 | Attacker | Attacking host | Ciudad del Este, Alto Paraná Department | AS266673 FLYTEC TELECOM SOCIEDAD ANONIMA | 2 feeds | 2026-10-12 04:35 |
| 45.184.108[.]141 | Attacker | Attacking host | Ciudad del Este, Alto Paraná Department | AS269783 WIND NET S.A. | 2 feeds | 2026-10-12 04:35 |
| 167.250.36[.]24 | Attacker | Malicious IP | Santa Rita, Alto Paraná Department | AS263717 SOL TELECOMUNICACIONES S.A. | 1 feed | 2026-10-11 04:31 |
| 181.124.58[.]175 | Attacker | Malicious IP | Nemby, Central Department | AS23201 Telecel S.A. | 1 feed | 2026-10-11 04:31 |
| 181.127.93[.]179 | Attacker | Malicious IP | Caaguazú, Caaguazú Department | AS23201 Telecel S.A. | 1 feed | 2026-10-11 04:31 |
| 181.40.108[.]133 | Attacker | Malicious IP | Fernando de la Mora, Central Department | AS23201 Telecel S.A. | 1 feed | 2026-10-11 04:31 |
| 186.182.105[.]49 | Attacker | Attacking host | Ciudad del Este, Alto Paraná Department | AS11664 Techtel LMDS Comunicaciones Interactivas S.A. | 4 feeds | 2026-10-09 04:27 |
| 181.94.226[.]224 | Attacker | Attacking host | Itá, Central Department | AS27895 Núcleo S.A. | 1 feed | 2026-10-09 04:27 |
| 143.202.209[.]172 | Attacker | On multiple blocklists | Fernando de la Mora, Central Department | AS264631 RED PARAGUAYA DE TELECOMUNICACIONES SA | aggregated list | — |
| 143.202.210[.]166 | Attacker | Malicious IP | Ciudad del Este, Alto Paraná Department | AS264631 RED PARAGUAYA DE TELECOMUNICACIONES SA | 1 feed | — |
| 170.51.42[.]62 | Attacker | Attacking host | San Lorenzo, Central Department | AS11664 Techtel LMDS Comunicaciones Interactivas S.A. | 2 feeds | — |
| 181.103.1[.]206 | Attacker | Attacking host | Asunción, Asuncion | AS27895 Núcleo S.A. | 1 feed | — |
| 181.122.109[.]90 | Attacker | Attacking host | Itauguá, Central Department | AS23201 Telecel S.A. | 1 feed | — |
| 181.94.250[.]73 | Attacker | Attacking host | Asunción, Asuncion | AS27895 Núcleo S.A. | 1 feed | — |
| 186.16.206[.]82 | Attacker | Attacking host | Lambaré, Central Department | AS23201 Telecel S.A. | 2 feeds | — |
| 186.16.57[.]70 | Attacker | Attacking host | Villa Oliva, Ñeembucú Department | AS23201 Telecel S.A. | 1 feed | — |
| 190.112.210[.]251 | Attacker | Attacking host | Asunción, Asuncion | AS263228 PLANET S.A. | 1 feed | — |
| 190.128.166[.]110 | Attacker | Compromised host | Ciudad del Este, Alto Paraná Department | AS23201 Telecel S.A. | 3 feeds | — |
| 200.61.51[.]82 | Attacker | Compromised host | Aregua, Central Department | AS11664 Techtel LMDS Comunicaciones Interactivas S.A. | 3 feeds | — |
Ransomware victims in Paraguay
1 posted in the last 30 days, 1 in 90.
Sectors hit (30 days)
Groups (30 days)
| Posted (UTC) | Victim | Group | Sector |
|---|---|---|---|
| 2026-09-18 00:23 | Inovapy | Panzer | Technology |
Other countries
🇺🇸 United States 17,865🇨🇳 China 10,779🇩🇪 Germany 4,170🇬🇧 United Kingdom 3,687🇷🇺 Russia 3,591🇳🇱 Netherlands 2,314🇮🇳 India 2,102🇫🇷 France 1,545🇧🇷 Brazil 1,422🇸🇬 Singapore 1,347🇭🇰 Hong Kong 1,326🇰🇷 South Korea 1,323🇮🇩 Indonesia 1,202🇵🇰 Pakistan 900🇨🇦 Canada 883🇧🇪 Belgium 763🇯🇵 Japan 715🇺🇦 Ukraine 674🇵🇱 Poland 561🇿🇦 South Africa 559🇻🇳 Vietnam 553🇲🇾 Malaysia 527🇮🇹 Italy 409🇸🇪 Sweden 380All countries →