IPHighVerifiedSignal 86/100
103.242.12.143
Location
Hong KongKwai Chung, Kwai Tsing District
ASN
AS401696
HONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
First Seen
Jun 2, 2026
Last Seen
Jun 28, 2026
Found in 569 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Malware Families29
Tags
Network Information
CountryHong Kong
Hong KongRegionKwai Chung, Kwai Tsing District
ASNAS401696
OrganizationHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Feed Intelligence Summary
569 reports95% confidence
Activity Timeline
Jun 28Jun 2
Threat Activity Heatmap
· Peak: 2026-06-08LessMore
Mon
Wed
Fri
24h
21
Critical
7d
154
Critical
30d
569
Critical
3mo
569
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
569
Reports
First seenJun 2, 2026
Last seenJun 28, 2026
Verified IOC
GeolocationHK
CountryHong Kong
LocationKwai Chung, Kwai Tsing District
ASNAS401696
OrgHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Coords22.3632, 114.1330
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 25 days ago · Last seen today
Appeared in 569 threat reports from 10 sources
Associated with: Kimsuky, LockBit, Sandworm, Play
Used by malware: XMRig, Nanocore, Pegasus, SocGholish, Remcos, DarkComet, NetWire, Lumma, Rhysida, NjRAT, Rhadamanthys, WannaCry, AsyncRAT, FormBook, Mozi, XWorm, XorDDoS, QakBot, Sliver, META Stealer, Gh0st RAT, Play, Stealc, Mirai, Vidar, Metasploit, Gootloader, LockBit, Havoc