IPHighVerifiedSignal 86/100
103.97.178.243
Location
Hong KongKwai Chung, Kwai Tsing District
ASN
AS401696
HONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
First Seen
Jun 2, 2026
Last Seen
Jun 4, 2026
Found in 36 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Network Information
CountryHong Kong
Hong KongRegionKwai Chung, Kwai Tsing District
ASNAS401696
OrganizationHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Feed Intelligence Summary
36 reports95% confidence
Activity Timeline
Jun 4Jun 2
Threat Activity Heatmap
· Peak: 2026-06-03LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
36
Critical
3mo
36
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
36
Reports
First seenJun 2, 2026
Last seenJun 4, 2026
Verified IOC
GeolocationHK
CountryHong Kong
LocationKwai Chung, Kwai Tsing District
ASNAS401696
OrgHONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
Coords22.3632, 114.1330
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 21 days ago · Last seen 19 days ago
Appeared in 36 threat reports from 10 sources
Associated with: Sandworm
Used by malware: XWorm, SocGholish, XorDDoS, Remcos, Rhysida, Nanocore, Lumma, AsyncRAT, Pegasus, XMRig, NetWire, Sliver, Havoc, Stealc, Mirai, Vidar, Metasploit