🇲🇾 Malaysia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Malaysia.

523Malicious IPs listed#22 of 182 countries · 0.79% of the world
82New in the last 24hfirst seen by any feed
82Reported by 2+ feedsindependent sources agree
4Ransomware victimsposted in the last 30 days

View Malaysia on the live map →All listed IPs in MalaysiaRansomware victims in Malaysia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C215
  2. Malware17
  3. Phishing0
  4. Attacker491

By state or region

  1. Kuala Lumpur382
  2. Selangor102
  3. Perlis9
  4. Johor7
  5. Perak6
  6. Sarawak5
  7. Negeri Sembilan3
  8. Kedah2
  9. Kelantan2
  10. Penang2
  11. Putrajaya1
  12. Pahang1
  13. Melaka1

By city

  1. Kuala Lumpur378
  2. Shah Alam77
  3. Petaling Jaya7
  4. Kampung Titi Tinggi7
  5. Bangi4
  6. Cyberjaya3
  7. Kuching3
  8. Bercham2
  9. Kulim2
  10. Taman Dusun Setia2
  11. Bukit Indah2
  12. Lumut1
  13. Kampung Hutan Arau1
  14. Horizon Hills1
  15. Bandar Kinrara1

Networks hosting the most

NetworkIPs
AS45102 Alibaba (US) Technology Co., Ltd. 319
AS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange 76
AS4788 TM TECHNOLOGY SERVICES SDN BHD 43
AS45839 Shinjiru Technology Sdn Bhd 15
AS10030 Celcom Axiata Berhad 15
AS9534 Maxis Broadband Sdn Bhd 12
AS18206 TM TECHNOLOGY SERVICES SDN BHD 6
AS55720 Gigabit Hosting Sdn Bhd 4
AS47583 Hostinger International Limited 3
AS9930 TT DOTCOM SDN BHD 3
AS16509 Amazon.com, Inc. 3
AS4907 IENS TECHNOLOGY PTE. LTD 2
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 2
AS149440 Evoxt Sdn. Bhd. 2
AS38466 U Mobile Sdn Bhd 2

Malware families served from Malaysia

  1. Dacic3
  2. PureRAT3
  3. Antiloadr2
  4. AdaptixC22
  5. Remus2
  6. AsyncRAT1
  7. Mirai1
  8. Bsymem1
  9. Socelars1
  10. Cookiesstealer1
  11. Mokes1
  12. Opencandy1
  13. Zard1
  14. ValleyRAT1
  15. Havoc1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
49.124.151[.]32AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange1 feed2026-10-12 08:20
185.196.0[.]16AttackerAttacking hostKuala Lumpur, Kuala LumpurAS209854 Cyberzone S.A.1 feed2026-10-12 07:55
103.155.92[.]58MalwareAntiloadrKuala Lumpur, Kuala LumpurAS45839 Shinjiru Technology Sdn Bhd1 feed · 1,466 sandbox samples2026-10-12 07:53
103.155.93[.]196MalwareAntiloadrKuala Lumpur, Kuala LumpurAS45839 Shinjiru Technology Sdn Bhd1 feed · 340 sandbox samples2026-10-12 07:53
103.169.90[.]205MalwareContacted by malwareCyberjaya, SelangorAS55720 Gigabit Hosting Sdn Bhd1 feed · 7 sandbox samples2026-10-12 07:26
161.248.14[.]20:8790C2Botnet C2Kuala Lumpur, Kuala LumpurAS4907 IENS TECHNOLOGY PTE. LTD1 feed2026-10-12 07:25
49.124.149[.]202AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange1 feed2026-10-12 07:15
47.254.192[.]213AttackerAttacking hostKuala Lumpur, Kuala LumpurAS45102 Alibaba (US) Technology Co., Ltd.3 feeds2026-10-12 06:41
49.124.147[.]104AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange1 feed2026-10-12 06:41
118.100.187[.]12AttackerAttacking hostKulim, KedahAS4788 TM TECHNOLOGY SERVICES SDN BHD2 feeds2026-10-12 06:10
14.192.214[.]23AttackerAttacking hostTaman Dusun Setia, Negeri SembilanAS9534 Maxis Broadband Sdn Bhd1 feed2026-10-12 05:55
120.141.23[.]247AttackerAttacking hostKuala Lumpur, Kuala LumpurAS4788 TM TECHNOLOGY SERVICES SDN BHD1 feed2026-10-12 05:35
124.82.77[.]100AttackerAttacking hostBatu Caves, SelangorAS4788 TM TECHNOLOGY SERVICES SDN BHD1 feed2026-10-12 05:35
2402[:]1980[:]8c0b[:]17b7[:]414d[:]5e6[:]c18b[:]6e13AttackerAttacking hostEnggor, PerakAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange1 feed2026-10-12 05:00
175.136.213[.]159AttackerAttacking hostBrickfields, Kuala LumpurAS4788 TM TECHNOLOGY SERVICES SDN BHD1 feed2026-10-12 04:50
124.217.233[.]18AttackerMalicious IPKuala Lumpur, Kuala LumpurAS45839 Shinjiru Technology Sdn Bhd1 feed2026-10-12 04:35
175.142.1[.]198AttackerAttacking hostGreenwood Park, SelangorAS4788 TM TECHNOLOGY SERVICES SDN BHD3 feeds2026-10-12 04:35
180.75.238[.]21AttackerAttacking hostTanah Merah, KelantanAS4788 TM TECHNOLOGY SERVICES SDN BHD2 feeds2026-10-12 04:35
2001[:]e68[:]544d[:]4f2a[:]69a8[:]a4d2[:]6134[:]6661AttackerAttacking hostBukit Beruntung, SelangorAS4788 TM TECHNOLOGY SERVICES SDN BHD2 feeds2026-10-12 04:35
205.147.27[.]5AttackerAttacking hostBangsar South, Kuala LumpurAS208172 Proton AG2 feeds2026-10-12 04:35
27.125.244[.]79AttackerAttacking hostMetro City New Township, SarawakAS38466 U Mobile Sdn Bhd2 feeds2026-10-12 04:35
49.124.151[.]13AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange2 feeds2026-10-12 04:35
49.124.151[.]4AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange2 feeds2026-10-12 04:35
49.124.151[.]5AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange2 feeds2026-10-12 04:35
49.124.151[.]53AttackerAttacking hostShah Alam, SelangorAS4818 DiGi Telecommunications Sdn Bhd., Digi Internet Exchange2 feeds2026-10-12 04:35

See every listed IP in Malaysia →

Ransomware victims in Malaysia

4 posted in the last 30 days, 21 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-05 18:26ikhasas.comsafepay—
2026-10-05 08:04Royal SelangorBYODManufacturing
2026-10-02 00:05Main Place MallnetrunnerRetail & E-Commerce
2026-09-28 23:34M*** P**** M***netrunner—
2026-09-11 15:54Port of Tanjung PelepasdirewolfTransportation
2026-09-03 18:25myglobal.comincransomOther
2026-08-31 12:04EP Manufacturing BhdthegentlemenManufacturing
2026-08-31 12:01cimbsecurities.comincransomFinancial Services
2026-08-29 12:02CareClinicsqilinHealthcare
2026-08-26 18:57KenEp ResourcesqilinEnergy & Utilities
2026-08-25 09:22PCA Group Sdn. Bhd.majinahanashiOther
2026-08-18 00:26SD Associates Sdn Bhdincransom—
2026-08-16 11:31Desatera Sdn Bhdqilin—
2026-08-14 05:58The Coffee BeanthegentlemenRetail & E-Commerce
2026-07-30 06:50Malaysian Nuclear AgencythegentlemenGovernment & Defense

All ransomware victims in Malaysia →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →