IPHighVerifiedSignal 86/100
103.97.176.69
Location
Hong KongKwai Chung, Kwai Tsing District
ASN
AS401696
HONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
First Seen
Jun 2, 2026
Last Seen
Jun 20, 2026
Found in 376 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Malware Families34
Tags
Network Information
CountryHong Kong
Hong KongRegionKwai Chung, Kwai Tsing District
ASNAS401696
OrganizationHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Feed Intelligence Summary
376 reports95% confidence
Activity Timeline
Jun 20Jun 2
Threat Activity Heatmap
· Peak: 2026-06-08LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
72
Critical
30d
376
Critical
3mo
376
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
376
Reports
First seenJun 2, 2026
Last seenJun 20, 2026
Verified IOC
GeolocationHK
CountryHong Kong
LocationKwai Chung, Kwai Tsing District
ASNAS401696
OrgHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Coords22.3632, 114.1330
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 20 days ago · Last seen 2 days ago
Appeared in 376 threat reports from 10 sources
Associated with: LockBit, Kimsuky, Sandworm, Turla, Hive, Play
Used by malware: NetWire, Nanocore, SocGholish, XMRig, Remcos, Rhysida, XorDDoS, NjRAT, WannaCry, AsyncRAT, Lumma, FormBook, Rhadamanthys, Dridex, Pegasus, QakBot, Mozi, XWorm, Stealc, Metasploit, Bumblebee, RedLine, Gootloader, Havoc, Sliver, LockBit, META Stealer, Hive, Gh0st RAT, PowerShell Empire, Play, Mirai, Cobalt Strike, Vidar