🇭🇰 Hong Kong: live cyber threat activity

Malicious IPs, malware and ransomware victims in Hong Kong.

1,319Malicious IPs listed#11 of 182 countries · 1.99% of the world
287New in the last 24hfirst seen by any feed
423Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Hong Kong on the live map →All listed IPs in Hong KongRansomware victims in Hong Kong

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C2256
  2. Malware62
  3. Phishing0
  4. Attacker1,001

By state or region

  1. Kowloon868
  2. Eastern District106
  3. Central and Western92
  4. Yau Tsim Mong District53
  5. Kwai Tsing District42
  6. Kowloon City32
  7. Sai Kung District19
  8. Kwun Tong District16
  9. Tsuen Wan14
  10. Yau Tsim Mong13
  11. Wong Tai Sin District12
  12. Kwai Tsing11
  13. Sha Tin8
  14. Sham Shui Po District8
  15. Southern District5

By city

  1. Hong Kong869
  2. Chai Wan102
  3. Mong Kok62
  4. Central53
  5. Sheung Wan39
  6. Kwai Chung33
  7. Tseung Kwan O17
  8. Royal Peninsula16
  9. San Po Kong10
  10. Kwun Tong8
  11. Tsing Yi8
  12. Kowloon Bay7
  13. Tsim Sha Tsui6
  14. Cheung Sha Wan6
  15. Tai Wo Hau5

Networks hosting the most

NetworkIPs
AS9304 HGC Global Communications Limited 264
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 223
AS45102 Alibaba (US) Technology Co., Ltd. 106
AS4760 PCCW IMS Limited 65
AS9465 AGOTOZ PTE. LTD. 58
AS398722 Censys, Inc. 51
AS132203 Shenzhen Tencent Computer Systems Company Limited 28
AS138995 Antbox Networks Limited 27
AS401701 cognetcloud INC 25
AS152194 CTG Server Limited 25
AS218785 TC DATACENTER LIMITED 25
AS401696 cognetcloud INC 24
AS8075 Microsoft Corporation 24
AS55933 Cloudie Limited 20
AS142403 YISU CLOUD LTD 18

Malware families served from Hong Kong

  1. Cobalt Strike79
  2. PureRAT54
  3. AdaptixC232
  4. DCRat18
  5. DanaBot13
  6. VShell11
  7. Sliver8
  8. ValleyRAT5
  9. Barys4
  10. pupy4
  11. Mirai3
  12. Havoc3
  13. AsyncRAT2
  14. Tofsee2
  15. Remcos2

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
58.177.166[.]134AttackerAttacking hostKau Wa Keng, Kwai Tsing DistrictAS9269 Hong Kong Broadband Network Limited1 feed2026-10-12 08:20
43.103.2[.]241AttackerAttacking hostHong Kong, KowloonAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
47.86.59[.]110AttackerAttacking hostHong Kong, KowloonAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
8.210.235[.]224AttackerAttacking hostHong Kong, KowloonAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
8.217.134[.]43AttackerAttacking hostHong Kong, KowloonAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
165.154.1[.]144AttackerAttacking hostHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED4 feeds2026-10-12 06:55
45.207.157[.]28:9999C2Botnet C2Hong Kong, KowloonAS61112 AKILE LTD1 feed2026-10-12 06:11
113.254.122[.]139:23C2MiraiTsing Yi, Kwai TsingAS9304 HGC Global Communications Limited1 feed2026-10-12 06:11
165.154.63[.]38AttackerAttacking hostHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED1 feed2026-10-12 06:10
45.138.12[.]65AttackerAttacking hostSheung Wan, Central and WesternAS218785 TC DATACENTER LIMITED1 feed2026-10-12 06:10
193.24.211[.]219AttackerAttacking hostCentral, Central and WesternAS215929 Data Campus Limited1 feed2026-10-12 05:00
101.36.124[.]220AttackerOn multiple blocklistsHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 feeds2026-10-12 04:35
103.109.100[.]207AttackerMalicious IPQuarry Bay, EasternAS206264 Amarutu Technology Ltd1 feed · 1 sandbox sample2026-10-12 04:35
103.185.249[.]26AttackerAttacking hostHo Man Tin, Kowloon CityAS401701 cognetcloud INC2 feeds2026-10-12 04:35
103.210.239[.]62AttackerAttacking hostChai Wan, Eastern DistrictAS142403 YISU CLOUD LTD2 feeds2026-10-12 04:35
103.234.97[.]36AttackerMalicious IPWan Chai, Wan ChaiAS135357 HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED1 feed2026-10-12 04:35
112.119.224[.]67AttackerMalicious IPPok Hong, Sha TinAS4760 PCCW IMS Limited1 feed2026-10-12 04:35
118.193.44[.]243AttackerAttacking hostHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 feeds2026-10-12 04:35
118.26.39[.]18AttackerAttacking hostHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 feeds2026-10-12 04:35
119.246.182[.]117AttackerAttacking hostHang Hau, Sai Kung DistrictAS9269 Hong Kong Broadband Network Limited2 feeds2026-10-12 04:35
121.202.144[.]103AttackerMalicious IPFuk Loi, Tsuen WanAS17924 Smartone Mobile communications Limited1 feed2026-10-12 04:35
122.10.117[.]181AttackerAttacking hostMong Kok, Yau Tsim Mong DistrictAS24544 Law's Cloud Infrastructure Limited2 feeds2026-10-12 04:35
123.58.220[.]223AttackerAttacking hostHong Kong, KowloonAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 feeds2026-10-12 04:35
14.0.136[.]118AttackerAttacking hostLai Chi Kok, Sham Shui PoAS38819 CSL Limited2 feeds2026-10-12 04:35
143.14.189[.]160AttackerAttacking hostKwai Chung, Kwai Tsing DistrictAS205548 ZOUTER LIMITED2 feeds2026-10-12 04:35

See every listed IP in Hong Kong →

Ransomware victims in Hong Kong

1 posted in the last 30 days, 17 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-20 06:40Great Bay BionightspireHealthcare
2026-09-10 20:22M800 and CINNOXbeastTechnology
2026-08-31 16:51Fu Sheng Industrial Co., LtdOrovaManufacturing
2026-08-29 11:51ITC Properties Group LimitedOrovaOther
2026-08-29 09:21South Pacific Hotel LimitedOrovaHospitality
2026-08-19 14:51DL HOLDINGS GROUPOrovaOther
2026-08-19 11:57www.hsi.infokrybit—
2026-08-11 18:51Ganzhou Xinye Craft Co., Ltd.OrovaManufacturing
2026-08-10 08:09Hong Kong Baptist UniversitythegentlemenEducation
2026-08-09 17:01Chun Tai Sing Chemical IndustryqilinManufacturing
2026-08-04 15:50SURE TRAVEL COMPANYOrovaHospitality
2026-08-04 12:22SSI HOLDING (FAR EAST) LIMITEDOrovaOther
2026-08-04 12:22Sanrio Hong Kong Co., LtdOrovaRetail & E-Commerce
2026-08-04 12:21Tat Fung Textile Co., Ltd.OrovaManufacturing
2026-08-04 12:20JK Capital Management LimitedOrovaFinancial Services

All ransomware victims in Hong Kong →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →