🇵🇭 Philippines: live cyber threat activity

Malicious IPs, malware and ransomware victims in Philippines.

351Malicious IPs listed#25 of 182 countries · 0.53% of the world
68New in the last 24hfirst seen by any feed
52Reported by 2+ feedsindependent sources agree
2Ransomware victimsposted in the last 30 days

View Philippines on the live map →All listed IPs in PhilippinesRansomware victims in Philippines

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C29
  2. Malware155
  3. Phishing0
  4. Attacker187

By state or region

  1. National Capital Region122
  2. Calabarzon37
  3. Eastern Visayas35
  4. Central Visayas33
  5. Central Luzon30
  6. Soccsksargen22
  7. Davao Region15
  8. Cagayan Valley8
  9. Bicol Region8
  10. Northern Mindanao8
  11. Caraga8
  12. Western Visayas7
  13. Zamboanga Peninsula7
  14. Autonomous Region in Muslim Mindanao4
  15. Mimaropa3

By city

  1. Manila35
  2. Makati City25
  3. Mandaluyong9
  4. Bagong Silang8
  5. Taguig7
  6. Isulan6
  7. Bagontapay6
  8. Paranaque City5
  9. Libertad5
  10. Olongapo City4
  11. Muntinlupa4
  12. Bungad4
  13. Commonwealth4
  14. Davao City4
  15. Malanday4

Networks hosting the most

NetworkIPs
AS132199 Globe Telecom Inc. 157
AS9299 Philippine Long Distance Telephone Co. 76
AS17639 ComClark Network & Technology Corp 31
AS4775 Globe Telecom (GMCR,INC) 24
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 14
AS9658 Eastern Telecommunications Philippines, Inc. 9
AS134707 Royal Cablevision Corp. 3
AS151650 Switch Fiber 3
AS14593 Space Exploration Technologies Corporation 2
AS139831 DITO TELECOMMUNITY CORP. 2
AS142271 DoubleSquare Networks Inc. 2
AS153359 Imtech Solution and Data Providers 2
AS45102 Alibaba (US) Technology Co., Ltd. 2
AS140243 CMD Cable Vision, Inc 1
AS133334 DCTV Cable Network & Broadband Services Inc. 1

Malware families served from Philippines

  1. DanaBot7
  2. Opencandy1
  3. VShell1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
180.190.172[.]245AttackerAttacking hostMandaluyong, National Capital RegionAS4775 Globe Telecom (GMCR,INC)1 feed2026-10-12 07:15
180.190.173[.]107AttackerAttacking hostParanaque City, National Capital RegionAS4775 Globe Telecom (GMCR,INC)1 feed2026-10-12 07:15
222.127.60[.]98MalwareMalware downloadSamboan, Central VisayasAS132199 Globe Telecom Inc.aggregated list2026-10-12 07:12
136.158.50[.]176AttackerAttacking hostImus, CalabarzonAS17639 ComClark Network & Technology Corp1 feed2026-10-12 06:55
180.194.203[.]177AttackerAttacking hostIligan, Northern MindanaoAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:55
49.151.160[.]149AttackerAttacking hostOlongapo City, Central LuzonAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:55
124.217.114[.]65AttackerAttacking hostIpil, Zamboanga PeninsulaAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:41
180.194.203[.]241AttackerAttacking hostIligan, Northern MindanaoAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:41
112.209.77[.]41AttackerAttacking hostNamayan, National Capital RegionAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:10
2001[:]4455[:]577[:]9a00[:]8d3d[:]8382[:]8ba8[:]9da8AttackerAttacking hostKalian, Zamboanga PeninsulaAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 06:10
2405[:]8d40[:]48c9[:]c921[:]fca5[:]256f[:]2dfc[:]ef90AttackerAttacking hostApas, Central VisayasAS139831 DITO TELECOMMUNITY CORP.1 feed2026-10-12 06:10
2001[:]4456[:]c6e[:]8a00[:]2555[:]5d61[:]2dc1[:]aa2eAttackerAttacking hostDavao City, Davao RegionAS9299 Philippine Long Distance Telephone Co.1 feed2026-10-12 05:35
160.187.221[.]25AttackerAttacking hostPresident Roxas, SoccsksargenAS153359 Imtech Solution and Data Providers1 feed2026-10-12 04:50
112.207.164[.]66AttackerAttacking hostPaombong, Central LuzonAS9299 Philippine Long Distance Telephone Co.3 feeds2026-10-12 04:35
124.107.183[.]6AttackerAttacking hostMakati City, National Capital RegionAS9299 Philippine Long Distance Telephone Co.2 feeds2026-10-12 04:35
136.158.39[.]231AttackerAttacking hostCommonwealth, National Capital RegionAS17639 ComClark Network & Technology Corp2 feeds2026-10-12 04:35
136.158.46[.]161AttackerAttacking hostCalantas, CalabarzonAS17639 ComClark Network & Technology Corp2 feeds2026-10-12 04:35
138.84.129[.]27AttackerAttacking hostQuezon City, National Capital RegionAS4775 Globe Telecom (GMCR,INC)2 feeds2026-10-12 04:35
138.84.72[.]180AttackerAttacking hostBaguio City, CordilleraAS4775 Globe Telecom (GMCR,INC)2 feeds2026-10-12 04:35
143.44.184[.]164AttackerAttacking hostDavao City, Davao RegionAS17639 ComClark Network & Technology Corp2 feeds2026-10-12 04:35
149.30.146[.]8AttackerAttacking hostSanta Rosa, CalabarzonAS134707 Royal Cablevision Corp.2 feeds2026-10-12 04:35
152.32.73[.]120AttackerAttacking hostTagaytay, CalabarzonAS17639 ComClark Network & Technology Corp2 feeds2026-10-12 04:35
154.18.197[.]29AttackerCompromised hostMalanday, CalabarzonAS142271 DoubleSquare Networks Inc.3 feeds2026-10-12 04:35
162.4.246[.]142AttackerAttacking hostTelabastagan, Central LuzonAS154715 CVACCESS NETWORK AND DATA SOLUTION2 feeds2026-10-12 04:35
180.190.243[.]27MalwareMalicious IPDingle, Western VisayasAS132199 Globe Telecom Inc.1 feed2026-10-12 04:35

See every listed IP in Philippines →

Ransomware victims in Philippines

2 posted in the last 30 days, 17 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-28 17:00New World DiagnosticsqilinHealthcare
2026-09-28 07:32fedelmundo.com.phsafepayOther
2026-09-10 18:30General Santos Doctors HospitalrhysidaHealthcare
2026-09-08 19:47cenmar-manila.comsafepayManufacturing
2026-09-05 13:46Philippine Ports AuthorityqilinTransportation
2026-08-27 18:31Globalport TerminalsqilinTransportation
2026-08-22 13:54LifeBank Microfinance FoundationcoinbasecartelFinancial Services
2026-08-20 08:58Questronixqilin—
2026-08-16 12:29MegawideqilinManufacturing
2026-08-12 14:36City Government of BaguioemperadorGovernment & Defense
2026-08-10 22:20LT Group / Fortune Tobacco CorpDeadlockManufacturing
2026-08-10 18:56Health CarouseldirewolfHealthcare
2026-08-05 13:05TSC LogisticsDark ProjectTransportation
2026-08-04 03:27lccgroup.comincransomProfessional Services
2026-08-01 21:31Philippine Savings BankthegentlemenFinancial Services

All ransomware victims in Philippines →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →