🇻🇳 Vietnam: live cyber threat activity

Malicious IPs, malware and ransomware victims in Vietnam.

546Malicious IPs listed#21 of 182 countries · 0.83% of the world
93New in the last 24hfirst seen by any feed
238Reported by 2+ feedsindependent sources agree
6Ransomware victimsposted in the last 30 days

View Vietnam on the live map →All listed IPs in VietnamRansomware victims in Vietnam

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C233
  2. Malware24
  3. Phishing0
  4. Attacker489

By state or region

  1. Hanoi319
  2. Ho Chi Minh City (HCMC)147
  3. Gia Lai23
  4. Da Nang City16
  5. Bac Ninh4
  6. Hai Phong4
  7. Lam Dong4
  8. Lao Cai3
  9. Khanh Hoa3
  10. Thừa Thiên Huế Province3
  11. Thanh Hóa Province2
  12. Phu Tho2
  13. Ninh Binh2
  14. Sơn La Province2
  15. Lạng Sơn Province2

By city

  1. Hanoi244
  2. Ho Chi Minh City59
  3. Qui Nhon23
  4. Quận Bốn18
  5. Dich Vong13
  6. Go Vap10
  7. Quận Ba9
  8. Quận Tân Phú8
  9. Mai Dich8
  10. Quận Một8
  11. Quận Mười Một8
  12. Đống Đa7
  13. Quận Bình Thạnh6
  14. Quận Phú Nhuận5
  15. Quận Mười4

Networks hosting the most

NetworkIPs
AS7552 Viettel Group 112
AS45899 VNPT Corp 92
AS150895 EZ TECHNOLOGY COMPANY LIMITED 37
AS18403 FPT Telecom Company 36
AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP 33
AS24086 Viettel Corporation 20
AS7602 Sai gon Postel Corporation 19
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 18
AS152979 Vietservice Technology Company Limited 14
AS38731 Vietel - CHT Compamy Ltd 13
AS135918 VIET DIGITAL TECHNOLOGY LIABILITY COMPANY 12
AS151858 INTERDIGI JOINT STOCK COMPANY 10
AS131423 Branch of Long Van System Solution JSC - Hanoi 10
AS131386 Long Van System Solution JSC 6
AS38732 CMC Telecom Infrastructure Company 6

Malware families served from Vietnam

  1. Remcos7
  2. Cobalt Strike7
  3. PureRAT4
  4. AsyncRAT4
  5. AdaptixC23
  6. Mirai3
  7. Office1
  8. Abracadabra1
  9. Pwsx1
  10. W97m1
  11. Sliver1
  12. Bladabindi1
  13. Chaos1
  14. DCRat1
  15. Opencandy1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
116.97.109[.]120AttackerAttacking hostThuận Thanh, Bac NinhAS7552 Viettel Group1 feed2026-10-12 08:20
1.53.53[.]163AttackerAttacking hostĐống Đa, HanoiAS18403 FPT Telecom Company1 feed2026-10-12 07:50
103.171.92[.]209AttackerAttacking hostMễ Trì, HanoiAS45899 VNPT Corp1 feed2026-10-12 07:15
42.1.120[.]158AttackerAttacking hostYen Hoa, HanoiAS131429 MOBIFONE Corporation1 feed2026-10-12 07:15
115.79.24[.]90AttackerAttacking hostHo Chi Minh City, Ho Chi Minh City (HCMC)AS7552 Viettel Group1 feed2026-10-12 06:41
117.6.63[.]135AttackerAttacking hostHanoi, HanoiAS7552 Viettel Group1 feed2026-10-12 06:10
14.230.144[.]255AttackerAttacking hostHanoi, HanoiAS45899 VNPT Corp1 feed2026-10-12 05:35
113.161.56[.]97AttackerAttacking hostHanoi, HanoiAS45899 VNPT Corp1 feed2026-10-12 05:00
123.28.133[.]206AttackerAttacking hostHanoi, HanoiAS45899 VNPT Corp1 feed2026-10-12 05:00
14.177.134[.]155AttackerAttacking hostÔ Chợ Dừa, HanoiAS45899 VNPT Corp1 feed2026-10-12 05:00
14.224.216[.]251AttackerAttacking hostHanoi, HanoiAS45899 VNPT Corp1 feed2026-10-12 05:00
210.245.35[.]207AttackerAttacking hostHanoi, HanoiAS18403 FPT Telecom Company1 feed2026-10-12 05:00
103.216.119[.]20AttackerAttacking hostDich Vong, HanoiAS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP3 feeds2026-10-12 04:35
103.72.57[.]221AttackerAttacking hostQui Nhon, Gia LaiAS150895 EZ TECHNOLOGY COMPANY LIMITED2 feeds2026-10-12 04:35
103.74.122[.]88AttackerCompromised hostLàng Hà, Phu ThoAS135967 Bach Kim Network solutions Join stock company3 feeds2026-10-12 04:35
103.78.1[.]160AttackerAttacking hostThanh Xuân, HanoiAS140810 Megacore Technology Company Limited3 feeds2026-10-12 04:35
103.82.38[.]188AttackerAttacking hostThanh Khê, Da Nang CityAS149089 CLOUDFLY CORPORATION2 feeds2026-10-12 04:35
113.160.225[.]252AttackerAttacking hostCẩm Lệ, Da Nang CityAS45899 VNPT Corp2 feeds2026-10-12 04:35
115.77.57[.]26AttackerAttacking hostHanoi, HanoiAS7552 Viettel Group2 feeds2026-10-12 04:35
116.101.14[.]169AttackerAttacking hostHanoi, HanoiAS7552 Viettel Group2 feeds2026-10-12 04:35
116.104.87[.]58AttackerAttacking hostHanoi, HanoiAS7552 Viettel Group3 feeds2026-10-12 04:35
116.110.159[.]55AttackerAttacking hostHanoi, HanoiAS24086 Viettel Corporation2 feeds2026-10-12 04:35
116.98.218[.]147AttackerAttacking hostThị Trấn Na Dương, Lạng Sơn ProvinceAS7552 Viettel Group2 feeds2026-10-12 04:35
116.99.168[.]110AttackerAttacking hostHanoi, HanoiAS24086 Viettel Corporation2 feeds2026-10-12 04:35
119.17.222[.]93AttackerMalicious IPNghia Do, HanoiAS24173 Netnam Company1 feed2026-10-12 04:35

See every listed IP in Vietnam →

Ransomware victims in Vietnam

6 posted in the last 30 days, 15 in 90.

Posted (UTC)VictimGroupSector
2026-10-02 20:04Mat Bao CorporationrhysidaTechnology
2026-09-30 03:35VUS - The English CenterthegentlemenEducation
2026-09-19 07:54Quy Nhon UniversityVexy RansomwareEducation
2026-09-18 15:23BeLi Teacher / FSC education centers (AWS)N0nEducation
2026-09-18 15:23Vietnamese betting operator (GC789 network / Boundless TE)N0nOther
2026-09-15 07:11Dang Invest GroupthegentlemenFinancial Services
2026-08-30 09:05FE CREDITBlack XFinancial Services
2026-08-26 15:54www.sankovn.comkrybit—
2026-08-22 16:20Vietnam Electricity(EVNHANOI)emperadorEnergy & Utilities
2026-08-07 08:41l-a.com.vnL Group—
2026-08-07 08:08Groupe BPCEthegentlemenFinancial Services
2026-08-04 03:26https://geleximco.vn/incransomManufacturing
2026-07-22 19:30VNSOnovaTechnology
2026-07-18 02:02vedan corpincransomAgriculture and Food Production
2026-07-17 01:31DigipronovaTechnology

All ransomware victims in Vietnam →

Other countries