🇸🇬 Singapore: live cyber threat activity

Malicious IPs, malware and ransomware victims in Singapore.

1,330Malicious IPs listed#10 of 182 countries · 2.01% of the world
355New in the last 24hfirst seen by any feed
239Reported by 2+ feedsindependent sources agree
8Ransomware victimsposted in the last 30 days

View Singapore on the live map →All listed IPs in SingaporeRansomware victims in Singapore

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C2125
  2. Malware60
  3. Phishing0
  4. Attacker1,145

By state or region

No regional data.

By city

  1. Singapore1,316
  2. Loyang2
  3. Eunos2
  4. Bugis2
  5. Ulu Bedok2
  6. Chia Keng1
  7. Marsiling1
  8. Ang Mo Kio1
  9. Changi Village1
  10. Woodlands1
  11. Kampong Ubi1

Networks hosting the most

NetworkIPs
AS45102 Alibaba (US) Technology Co., Ltd. 467
AS31898 Oracle Corporation 187
AS14061 DigitalOcean, LLC 121
AS206092 F.N.S. HOLDINGS LIMITED 103
AS132203 Shenzhen Tencent Computer Systems Company Limited 55
AS137409 GSL Networks Pty LTD 49
AS16509 Amazon.com, Inc. 33
AS396982 Google LLC 33
AS150436 Byteplus Pte. Ltd. 28
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 18
AS16276 OVH SAS 14
AS3758 SingNet Pte Ltd 14
AS136907 HUAWEI INTERNATIONAL PTE. LTD. 13
AS63949 Akamai Technologies, Inc. 12
AS20473 The Constant Company, LLC 10

Malware families served from Singapore

  1. Cobalt Strike25
  2. AdaptixC220
  3. Jackskid13
  4. PureRAT12
  5. Aisuru7
  6. Dacic6
  7. Havoc5
  8. Abracadabra4
  9. Emotet4
  10. DCRat4
  11. VShell4
  12. Remus3
  13. Mirai2
  14. Evilginx2
  15. Jalapeno2

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
161.118.235[.]207AttackerAttacking hostSingaporeAS31898 Oracle Corporation2 feeds2026-10-12 08:20
34.158.63[.]109AttackerAttacking hostSingaporeAS396982 Google LLC1 feed2026-10-12 08:20
35.187.250[.]232AttackerAttacking hostSingaporeAS396982 Google LLC1 feed2026-10-12 08:20
47.128.111[.]102AttackerAttacking hostSingaporeAS16509 Amazon.com, Inc.1 feed2026-10-12 08:20
129.150.39[.]236AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
129.150.41[.]45AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
129.150.47[.]20AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
129.150.49[.]21AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
129.150.54[.]249AttackerOn multiple blocklistsSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.80[.]140AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.81[.]133AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.81[.]141AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.83[.]7AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.86[.]87AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.87[.]82AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.90[.]171AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
134.185.90[.]18AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
134.185.92[.]144AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.92[.]180AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
134.185.92[.]198AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
134.185.93[.]91AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
134.185.94[.]184AttackerOn multiple blocklistsSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
134.185.95[.]195AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10
138.2.102[.]148AttackerAttacking hostSingaporeAS31898 Oracle Corporation1 feed2026-10-12 08:10
138.2.106[.]209AttackerAttacking hostSingaporeAS31898 Oracle Corporation3 feeds2026-10-12 08:10

See every listed IP in Singapore →

Ransomware victims in Singapore

8 posted in the last 30 days, 23 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 21:25Supreme EnergyPanzerEnergy & Utilities
2026-10-09 19:22Habbas Associatesthegentlemen—
2026-10-08 13:22Global AirFreight InternationalEclipseTransportation
2026-10-07 23:20Gate | Crypto ExchangeBYODFinancial Services
2026-10-01 14:59DISK PRECISION GROUP - diskprecision.comkrybitManufacturing
2026-09-26 08:43Charles KeiththegentlemenRetail & E-Commerce
2026-09-18 10:12Ascend ComqilinTechnology
2026-09-18 02:02Giti CorpkillsecManufacturing
2026-09-08 13:51TTG Asia MediaEclipseHospitality
2026-09-07 12:02ST EngineeringmetaencryptorGovernment & Defense
2026-09-02 12:22Royal Plaza On ScottsEclipseHospitality
2026-08-31 08:26Me***crypto24—
2026-08-27 17:01DotlinesqilinTechnology
2026-08-16 16:18MoscordEclipse—
2026-08-12 12:26lhyk.com.sgkrybitOther

All ransomware victims in Singapore →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →