🇲🇳 Mongolia: live cyber threat activity
Malicious IPs, malware and ransomware victims in Mongolia.
11Malicious IPs listed#114 of 182 countries · 0.02% of the world
1New in the last 24hfirst seen by any feed
0Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days
View Mongolia on the live map →All listed IPs in Mongolia
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
Malware families served from Mongolia
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 203.91.116[.]53 | Malware | Loki | Ulaanbaatar, Ulaanbaatar | AS24559 G-Mobile Co.,Ltd | 1 feed · 649 sandbox samples | 2026-10-12 08:21 |
| 103.229.122[.]23 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS17882 MCS Com Co Ltd | 1 feed | 2026-10-11 08:35 |
| 202.126.91[.]189 | Malware | Opencandy | Altai, Govi-Altai Province | AS55805 MobiCom Corporation | 1 feed · 2 sandbox samples | 2026-10-09 13:21 |
| 180.149.125[.]165 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS45204 Gemnet | 1 feed | 2026-10-09 04:27 |
| 180.149.126[.]14 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS45204 Gemnet | 1 feed | 2026-10-09 04:27 |
| 192.82.67[.]94 | Malware | Malware download | Ulaanbaatar, Ulaanbaatar | AS17882 MCS Com Co Ltd | aggregated list | 2026-10-04 06:59 |
| 202.21.114[.]114 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS9484 Mobinet LLC | 1 feed | — |
| 202.5.193[.]141 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS10076 Mongolian Technical University, Computer Science Mgmt School | 1 feed | — |
| 43.228.131[.]114 | Attacker | Attacking host | Ulaanbaatar, Ulaanbaatar | AS17882 MCS Com Co Ltd | 1 feed | — |
| 122.201.25[.]95 | Malware | Malicious URL | Ulaanbaatar, Ulaanbaatar | AS17882 MCS Com Co Ltd | aggregated list | — |
| 202.131.244[.]202 | Malware | Malicious URL | Ulaanbaatar, Ulaanbaatar | AS9484 Mobinet LLC | aggregated list | — |
Ransomware victims in Mongolia
No ransomware victims from Mongolia posted in the last 90 days.
Other countries
🇺🇸 United States 17,865🇨🇳 China 10,779🇩🇪 Germany 4,170🇬🇧 United Kingdom 3,687🇷🇺 Russia 3,591🇳🇱 Netherlands 2,314🇮🇳 India 2,102🇫🇷 France 1,545🇧🇷 Brazil 1,422🇸🇬 Singapore 1,347🇭🇰 Hong Kong 1,326🇰🇷 South Korea 1,323🇮🇩 Indonesia 1,202🇵🇰 Pakistan 900🇨🇦 Canada 883🇧🇪 Belgium 763🇯🇵 Japan 715🇺🇦 Ukraine 674🇵🇱 Poland 561🇿🇦 South Africa 559🇻🇳 Vietnam 553🇲🇾 Malaysia 527🇮🇹 Italy 409🇸🇪 Sweden 380All countries →