🇸🇩 Sudan: live cyber threat activity

Malicious IPs, malware and ransomware victims in Sudan.

7Malicious IPs listed#127 of 182 countries · 0.01% of the world

4New in the last 24hfirst seen by any feed

2Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

Listed IPs by role.

Network	IPs
AS14593 Space Exploration Technologies Corporation	3
AS37211 MAX NET FOR INTERNET SERVICES	1
AS36998 Sudanese Mobile Telephone (ZAIN) Co Ltd	1
AS15706 Sudatel Telecom Group	1
AS33788 Kanar Telecommunication (Canar Telecom Co.Ltd)	1

No malware family attributed to IPs here.

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
129.222.68[.]88	Attacker	Attacking host	Khartoum, Khartoum	AS14593 Space Exploration Technologies Corporation	1 feed	2026-10-12 07:15
153.67.78[.]50	Attacker	Attacking host	Khartoum, Khartoum	AS14593 Space Exploration Technologies Corporation	2 feeds	2026-10-12 04:35
98.97.73[.]11	Attacker	Attacking host	Khartoum, Khartoum	AS14593 Space Exploration Technologies Corporation	2 feeds	2026-10-12 04:35
154.100.34[.]213	Attacker	Attacking host	Khartoum, Khartoum	AS36998 Sudanese Mobile Telephone (ZAIN) Co Ltd	1 feed	2026-10-11 21:25
196.1.229[.]147	Attacker	Attacking host	Khartoum, Khartoum	AS15706 Sudatel Telecom Group	1 feed	2026-10-10 11:10
102.218.68[.]126	Attacker	Attacking host	Bahri, Khartoum	AS37211 MAX NET FOR INTERNET SERVICES	1 feed	2026-10-09 04:27
197.254.238[.]254	Attacker	Attacking host	Khartoum, Khartoum	AS33788 Kanar Telecommunication (Canar Telecom Co.Ltd)	1 feed	—

No ransomware victims from Sudan posted in the last 90 days.