IOC Radar
IPHighVerifiedSignal 86/100

154.88.102.42

Location
Hong KongHong Kong
Hong Kong, Kowloon
ASN
AS9294
Gnet Inc.
First Seen
Jun 3, 2026
Last Seen
Jun 5, 2026
Jun 3
First Seen
3d ago
Jun 5
Last Seen
yesterday
41
Reports
source reports
95%
Confidence
high
Found in 41 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
SSandworm
Tags

Network Information

CountryHKHong Kong
RegionHong Kong, Kowloon
ASNAS9294
OrganizationGnet Inc.

Feed Intelligence Summary

41 reports95% confidence
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3438 indicators)
2974 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3424 indicators)
2961 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3410 indicators)
2948 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3402 indicators)
2942 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3391 indicators)
2931 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3382 indicators)
2924 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3385 indicators)
2925 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3407 indicators)
2948 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3397 indicators)
2938 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (3357 indicators)
2903 IOCs in report

Activity Timeline

41 total obs
Jun 5Jun 3

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
24h
0
Dormant
7d
41
Critical
30d
41
Critical
3mo
41
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
41
Reports
First seenJun 3, 2026
Last seenJun 5, 2026
Verified IOC
GeolocationHK
CountryHong Kong
LocationHong Kong, Kowloon
ASNAS9294
OrgGnet Inc.
Coords22.3193, 114.1690

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 days ago · Last seen 1 day ago
Appeared in 41 threat reports from 10 sources
Associated with: Sandworm
Used by malware: Nanocore, Stealc, Mirai, Vidar, Pegasus, Lumma, NetWire, SocGholish, Remcos, Rhysida, XMRig, XorDDoS, XWorm, Havoc, AsyncRAT, Metasploit, Sliver