🇪🇸 Spain: live cyber threat activity

Malicious IPs, malware and ransomware victims in Spain.

184Malicious IPs listed#36 of 182 countries · 0.28% of the world
36New in the last 24hfirst seen by any feed
60Reported by 2+ feedsindependent sources agree
18Ransomware victimsposted in the last 30 days

View Spain on the live map →All listed IPs in SpainRansomware victims in Spain

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C213
  2. Malware22
  3. Phishing0
  4. Attacker149

By state or region

  1. Madrid58
  2. Andalusia42
  3. Valencia26
  4. Catalonia20
  5. Castille-La Mancha14
  6. Murcia6
  7. Galicia5
  8. Castille and León3
  9. Canary Islands2
  10. La Rioja2
  11. Melilla2
  12. Extremadura1
  13. Basque Country1
  14. Asturias1
  15. Aragon1

By city

  1. Madrid49
  2. Malagón11
  3. Barcelona8
  4. Aguadulce6
  5. Vila-real5
  6. Valencia5
  7. Mutxamel5
  8. Macharavialla3
  9. Móstoles3
  10. Gádor3
  11. Seròs2
  12. Xàbia2
  13. Fuengirola2
  14. La Oliva2
  15. Alcobendas2

Networks hosting the most

NetworkIPs
AS3352 TELEFONICA DE ESPANA S.A.U. 20
AS200845 AVATEL TELECOM, SA 18
AS41368 Spotting Brands Technologies S.L. 17
AS12479 Orange Espagne SA 13
AS12430 VODAFONE ESPANA S.A.U. 9
AS8075 Microsoft Corporation 7
AS8560 IONOS SE 7
AS15704 XTRA TELECOM S.A. 7
AS16276 OVH SAS 6
AS57269 DIGI SPAIN TELECOM S.A 6
AS13335 Cloudflare, Inc. 5
AS203183 ARNOLD CALLE TELECOM, S.L. 4
AS212238 Datacamp Limited 4
AS63949 Akamai Technologies, Inc. 4
AS50926 AXARNET COMUNICACIONES, S.L. 3

Malware families served from Spain

  1. DanaBot2
  2. Abracadabra2
  3. Havoc2
  4. Emotet2
  5. Potassium1
  6. W97m1
  7. AdaptixC21
  8. BianLian1
  9. Jackskid1
  10. Valyria1
  11. Bladabindi1
  12. Jalapeno1
  13. PureRAT1
  14. DCRat1
  15. Symmi1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
46.39.212[.]111AttackerAttacking hostAlmodóvar del Río, AndalusiaAS60203 Innovaciones Tecnlogicas del Sur S.L.1 feed2026-10-12 08:20
212.231.192[.]62AttackerAttacking hostVélez-Málaga, AndalusiaAS15704 XTRA TELECOM S.A.1 feed2026-10-12 08:10
86.109.171[.]174AttackerAttacking hostPaterna, ValenciaAS196713 Abansys & Hostytec, S.L.1 feed2026-10-12 05:00
139.28.190[.]217AttackerAttacking hostMalagón, Castille-La ManchaAS200845 AVATEL TELECOM, SA2 feeds2026-10-12 04:35
146.66.249[.]137MalwareMalicious IPSeròs, CataloniaAS201109 LLEIDA WIFI NETWORKS SL1 feed2026-10-12 04:35
185.214.137[.]39AttackerAttacking hostGarrucha, AndalusiaAS41368 Spotting Brands Technologies S.L.2 feeds2026-10-12 04:35
185.74.240[.]224AttackerAttacking hostVila-real, ValenciaAS41368 Spotting Brands Technologies S.L.2 feeds2026-10-12 04:35
185.74.240[.]90AttackerAttacking hostVila-real, ValenciaAS41368 Spotting Brands Technologies S.L.2 feeds2026-10-12 04:35
2.136.213[.]204AttackerAttacking hostChamartin, MadridAS3352 TELEFONICA DE ESPANA S.A.U.2 feeds2026-10-12 04:35
2001[:]ba0[:]246[:]a200[:][:]1AttackerMalicious IPMadrid, MadridAS8560 IONOS SE1 feed2026-10-12 04:35
2001[:]ba0[:]246[:]a400[:][:]1AttackerMalicious IPMadrid, MadridAS8560 IONOS SE1 feed2026-10-12 04:35
2a05[:]f480[:]2800[:]24a1[:]5400[:]6ff[:]fe29[:]d9fAttackerMalicious IPAlcobendas, MadridAS20473 The Constant Company, LLC1 feed2026-10-12 04:35
2a09[:]bac1[:]2380[:]50[:][:]39f[:]bfAttackerAttacking hostBarcelona, CataloniaAS13335 Cloudflare, Inc.2 feeds2026-10-12 04:35
2a09[:]bac1[:]23a0[:]1138[:][:]39f[:]bfAttackerAttacking hostBarcelona, CataloniaAS13335 Cloudflare, Inc.2 feeds2026-10-12 04:35
2a09[:]bac5[:]3132[:]191[:][:]28[:]12bAttackerAttacking hostCalahorra, La RiojaAS13335 Cloudflare, Inc.2 feeds2026-10-12 04:35
2a0c[:]5a86[:]f608[:]1700[:]66c5[:]5530[:]a8e8[:]a68AttackerAttacking hostLlefià, CataloniaAS57269 DIGI SPAIN TELECOM S.A2 feeds2026-10-12 04:35
66.81.181[.]232AttackerMalicious IPMálaga, AndalusiaAS15704 XTRA TELECOM S.A.1 feed2026-10-12 04:35
77.27.142[.]241AttackerAttacking hostMazagón, AndalusiaAS15704 XTRA TELECOM S.A.2 feeds2026-10-12 04:35
84.122.93[.]74AttackerMalicious IPSant Joan d'Alacant, ValenciaAS6739 VODAFONE ONO, S.A.1 feed2026-10-12 04:35
85.118.245[.]29AttackerAttacking hostMadrid, MadridAS35171 Uniway Technologies SL2 feeds2026-10-12 04:35
88.18.15[.]106AttackerAttacking hostValencia, ValenciaAS3352 TELEFONICA DE ESPANA S.A.U.2 feeds2026-10-12 04:35
89.128.44[.]92AttackerAttacking hostPozuelo de Alarcón, MadridAS12479 Orange Espagne SA3 feeds2026-10-12 04:35
89.46.88[.]248AttackerAttacking hostMadrid, MadridAS201446 Soluciones web on line s.l.2 feeds2026-10-12 04:35
37.13.56[.]128MalwareMalicious URLEl Cerro de Andévalo, AndalusiaAS3352 TELEFONICA DE ESPANA S.A.U.aggregated list2026-10-12 04:35
212.227.147[.]219AttackerOn multiple blocklistsMadrid, MadridAS8560 IONOS SEaggregated list2026-10-12 04:35

See every listed IP in Spain →

Ransomware victims in Spain

18 posted in the last 30 days, 46 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 22:51idi pharmaDeadlockHealthcare
2026-10-07 19:03Matadero Frigorífico AvinyóqilinAgriculture and Food Production
2026-10-07 00:10EPTISAqilinProfessional Services
2026-10-05 07:32Fluge AudiovisualeslamashtuOther
2026-10-05 07:31TRANS LOGROÑO SOCIEDAD ANONIMAlamashtuTransportation
2026-10-04 15:03EmserqilinManufacturing
2026-10-03 06:26Hospital de la Santa Creu i Sant PauthegentlemenHealthcare
2026-09-30 03:39AurenthegentlemenProfessional Services
2026-09-28 16:00JuntadeandaluciamedusalockerGovernment & Defense
2026-09-28 16:00PremiumfruitsmedusalockerAgriculture and Food Production
2026-09-28 08:32cromados.comsafepayManufacturing
2026-09-27 16:06Revenga Smart SolutionsqilinTechnology
2026-09-25 12:48Iberia Compositech ManufacturingqilinManufacturing
2026-09-21 00:35SECOND HOUSEincransomHospitality
2026-09-17 16:02The Gran Hotel InglesqilinHospitality

All ransomware victims in Spain →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →