🇶🇦 Qatar: live cyber threat activity

Malicious IPs, malware and ransomware victims in Qatar.

17Malicious IPs listed#105 of 182 countries · 0.03% of the world

6New in the last 24hfirst seen by any feed

6Reported by 2+ feedsindependent sources agree

1Ransomware victimsposted in the last 30 days

View Qatar on the live map →All listed IPs in Qatar Ransomware victims in Qatar

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Al Wakrah6
Baladiyat ad Dawhah6
Baladiyat ar Rayyan3
Al Daayen1
Al Khor1

By city

Al Wukayr6
Doha5
Mu‘aydhir Rawḑat Rāshid3
Lusail1
Al Khor1
Nu‘ayjah1

Networks hosting the most

Network	IPs
AS8781 Ooredoo Q.S.C.	11
AS48728 Vodafone Qatar P.Q.S.C	4
AS396982 Google LLC	2

Malware families served from Qatar

No malware family attributed to IPs here.

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
178.153.162[.]107	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS8781 Ooredoo Q.S.C.	2 feeds	2026-10-12 04:35
212.70.119[.]195	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS48728 Vodafone Qatar P.Q.S.C	2 feeds	2026-10-12 04:35
34.18.237[.]47	Attacker	Malicious IP	Doha, Baladiyat ad Dawhah	AS396982 Google LLC	1 feed	2026-10-12 04:35
37.186.52[.]211	Attacker	Attacking host	Lusail, Al Daayen	AS48728 Vodafone Qatar P.Q.S.C	3 feeds	2026-10-12 04:35
37.186.58[.]226	Attacker	Attacking host	Doha, Baladiyat ad Dawhah	AS48728 Vodafone Qatar P.Q.S.C	1 feed	2026-10-12 03:55
34.18.140[.]186	Attacker	Attacking host	Doha, Baladiyat ad Dawhah	AS396982 Google LLC	1 feed	2026-10-11 23:55
178.153.174[.]27	Attacker	Attacking host	Mu‘aydhir Rawḑat Rāshid, Baladiyat ar Rayyan	AS8781 Ooredoo Q.S.C.	2 feeds	2026-10-11 04:31
212.70.112[.]33	Attacker	Malicious IP	Doha, Baladiyat ad Dawhah	AS48728 Vodafone Qatar P.Q.S.C	1 feed	2026-10-11 04:31
37.211.52[.]199	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS8781 Ooredoo Q.S.C.	2 feeds	2026-10-11 04:31
37.208.144[.]199	Attacker	Attacking host	Mu‘aydhir Rawḑat Rāshid, Baladiyat ar Rayyan	AS8781 Ooredoo Q.S.C.	1 feed	2026-10-09 21:35
176.202.33[.]78	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS8781 Ooredoo Q.S.C.	1 feed	—
176.202.87[.]38	Attacker	Attacking host	Doha, Baladiyat ad Dawhah	AS8781 Ooredoo Q.S.C.	1 feed	—
37.208.176[.]217	Attacker	Attacking host	Al Khor, Al Khor	AS8781 Ooredoo Q.S.C.	2 feeds	—
37.210.219[.]211	Attacker	Attacking host	Nu‘ayjah, Baladiyat ad Dawhah	AS8781 Ooredoo Q.S.C.	1 feed	—
37.211.153[.]143	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS8781 Ooredoo Q.S.C.	1 feed	—
37.211.49[.]113	Attacker	Attacking host	Al Wukayr, Al Wakrah	AS8781 Ooredoo Q.S.C.	1 feed	—
37.211.5[.]10	Attacker	Attacking host	Mu‘aydhir Rawḑat Rāshid, Baladiyat ar Rayyan	AS8781 Ooredoo Q.S.C.	1 feed	—

See every listed IP in Qatar →

Ransomware victims in Qatar

1 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

Other1

Groups (30 days)

qilin1

Posted (UTC)	Victim	Group	Sector
2026-10-07 19:03	Qatar National Import & Export	qilin	Other
2026-08-30 13:31	Black Cat Engineering Construction Wll	qilin	Manufacturing
2026-08-23 12:27	Black Cat Engineering & Construction WLL	qilin	Manufacturing

All ransomware victims in Qatar →