🇵🇪 Peru: live cyber threat activity

Malicious IPs, malware and ransomware victims in Peru.

43Malicious IPs listed#73 of 182 countries · 0.07% of the world

4New in the last 24hfirst seen by any feed

14Reported by 2+ feedsindependent sources agree

6Ransomware victimsposted in the last 30 days

View Peru on the live map →All listed IPs in Peru Ransomware victims in Peru

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Lima region21
Lima Province8
Apurímac Department3
Huánuco Department2
La Libertad2
Ancash2
Puno1
Cajamarca Department1
Arequipa1
Cuzco Department1
Piura1

By city

Lima8
San Isidro4
San Francisco De Borja3
Abancay3
La Victoria3
Miraflores2
Ambo2
Independencia2
Buenos Aires2
Huancané1
Llama1
Carabayllo1
Paucarpata1
Jesus Maria1
Puente Viru1

Networks hosting the most

Network	IPs
AS3132 Red Cientifica Peruana	9
AS12252 America Movil Peru S.A.C.	8
AS6147 Telefonica del Peru S.A.A.	8
AS27843 OPTICAL TECHNOLOGIES S.A.C.	4
AS265691 WI-NET TELECOM S.A.C.	3
AS152698 Zorn Technologies	2
AS21575 ENTEL PERU S.A.	1
AS274872 COVATEL S.A.C.	1
AS262210 VIETTEL PERÚ S.A.C.	1
AS19180 AMERICATEL PERU S.A.	1
AS269913 CABLE SELVA CENTRAL S.A.C.	1
AS271868 GPON NETWORKS S.A.C.	1
AS271814 NEXTNET SAC	1
AS273108 NEXTGEN NETWORKS SOLUTIONS S.A.C.	1
AS273133 CONEX TV E.I.R.L.	1

Malware families served from Peru

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
190.187.52[.]42	Malware	Zitirezc	San Isidro, Lima region	AS19180 AMERICATEL PERU S.A.	1 feed · 239 sandbox samples	2026-10-12 05:00
190.232.93[.]49	Attacker	Attacking host	Jesus Maria, Lima region	AS6147 Telefonica del Peru S.A.A.	1 feed	2026-10-12 04:35
2800[:]4b0[:]9408[:]30c[:]100e[:]eaf3[:]cc2d[:]ed46	Attacker	Attacking host	Pilcomayo, Ancash	AS12252 America Movil Peru S.A.C.	1 feed	2026-10-12 04:30
38.224.49[.]22	Attacker	Attacking host	Buenos Aires, Ancash	AS273108 NEXTGEN NETWORKS SOLUTIONS S.A.C.	1 feed	2026-10-12 04:05
190.12.87[.]61	Malware	Zitirez	Lima, Lima Province	AS27843 OPTICAL TECHNOLOGIES S.A.C.	1 feed · 239 sandbox samples	2026-10-11 04:35
132.191.2[.]126	Attacker	Malicious IP	San Francisco De Borja, Lima region	AS21575 ENTEL PERU S.A.	1 feed	2026-10-11 04:31
200.37.241[.]186	Attacker	On multiple blocklists	Comas, Lima region	AS6147 Telefonica del Peru S.A.A.	1 feed	2026-10-11 04:31
2800[:]200[:]fae8[:]7d[:]99fb[:]5f5e[:]b623[:]f7fa	Attacker	Malicious IP	Ambo, Huánuco Department	AS12252 America Movil Peru S.A.C.	1 feed	2026-10-11 04:31
45.189.116[.]158	Attacker	Malicious IP	Independencia, Lima region	AS273133 CONEX TV E.I.R.L.	1 feed	2026-10-11 04:31
181.176.62[.]72	Attacker	On multiple blocklists	San Isidro, Lima region	AS262210 VIETTEL PERÚ S.A.C.	1 feed	2026-10-11 04:31
181.66.139[.]129	Attacker	On multiple blocklists	Independencia, Lima region	AS6147 Telefonica del Peru S.A.A.	3 feeds	2026-10-11 02:15
161.132.132[.]89	Attacker	Malicious IP	Lima, Lima Province	AS27843 OPTICAL TECHNOLOGIES S.A.C.	1 feed	2026-10-10 04:30
38.25.50[.]114	Attacker	Malicious IP	Buenos Aires, La Libertad	AS265691 WI-NET TELECOM S.A.C.	2 feeds	2026-10-09 14:45
161.132.49[.]125	Attacker	Attacking host	Llama, Cajamarca Department	AS3132 Red Cientifica Peruana	2 feeds	2026-10-09 08:56
38.25.58[.]209	Attacker	Attacking host	San Francisco De Borja, Lima region	AS265691 WI-NET TELECOM S.A.C.	1 feed	2026-10-09 06:30
154.201.0[.]70	Attacker	Attacking host	Abancay, Apurímac Department	AS274872 COVATEL S.A.C.	2 feeds	2026-10-09 04:27
190.238.120[.]147	Attacker	Attacking host	Puente Viru, La Libertad	AS6147 Telefonica del Peru S.A.A.	1 feed	2026-10-09 04:27
190.119.63[.]81	Attacker	On multiple blocklists	La Victoria, Lima region	AS12252 America Movil Peru S.A.C.	aggregated list	2026-10-09 04:27
179.6.171[.]114	Attacker	Attacking host	Carabayllo, Lima region	AS12252 America Movil Peru S.A.C.	1 feed	2026-10-09 04:27
179.6.39[.]229	Attacker	Attacking host	Ambo, Huánuco Department	AS12252 America Movil Peru S.A.C.	1 feed	2026-10-09 04:27
200.37.103[.]36	Attacker	Attacking host	San Isidro, Lima region	AS6147 Telefonica del Peru S.A.A.	2 feeds	2026-10-09 04:27
156.252.185[.]139:443	C2	DanaBot	Lima, Lima Province	AS152698 Zorn Technologies	1 feed	2026-10-04 09:43
156.252.185[.]204:443	C2	DanaBot	Lima, Lima Province	AS152698 Zorn Technologies	1 feed	2026-10-04 09:43
149.34.48[.]31	Attacker	Attacking host	Miraflores, Lima region	AS3132 Red Cientifica Peruana	2 feeds	—
161.132.37[.]136	Attacker	Attacking host	Abancay, Apurímac Department	AS3132 Red Cientifica Peruana	2 feeds	—

See every listed IP in Peru →

Ransomware victims in Peru

6 posted in the last 30 days, 18 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)	Victim	Group	Sector
2026-10-11 05:00	TQC S.A.	dragonforce	Manufacturing
2026-10-01 21:05	Hospital Hermilio Valdizán	ransomhouse	Healthcare
2026-09-23 10:24	AGROFRUTO SAC	arcusmedia	Agriculture and Food Production
2026-09-15 19:29	gob.pe	safepay	Government & Defense
2026-09-15 07:15	Gelarti	thegentlemen	Other
2026-09-15 01:51	Honda (Peru)	Panzer	Manufacturing
2026-09-07 21:51	Comin Sac	thegentlemen	—
2026-09-01 02:24	Italtel Peru	everest	Technology
2026-08-23 16:20	Global Go	killsec	Transportation
2026-08-19 12:27	Movitecnica	qilin	Manufacturing
2026-08-12 15:40	WATERLANDPE.COM	clop	Other
2026-08-09 10:59	Grupo Diestra	qilin	Manufacturing
2026-08-07 02:24	www.hymiasa.com	krybit	Other
2026-07-31 18:22	Municipalidad de San Luis	thegentlemen	Government & Defense
2026-07-30 06:48	Upanal CNC Solutions	thegentlemen	Manufacturing

All ransomware victims in Peru →