IOC Radar
IPHighVerifiedSignal 86/100

154.88.96.49

Location
Hong KongHong Kong
Hong Kong, Kowloon
ASN
AS9294
Gnet Inc.
First Seen
Jun 8, 2026
Last Seen
Jun 10, 2026
Jun 8
First Seen
3d ago
Jun 10
Last Seen
yesterday
57
Reports
source reports
95%
Confidence
high
Found in 57 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryHKHong Kong
RegionHong Kong, Kowloon
ASNAS9294
OrganizationGnet Inc.

Feed Intelligence Summary

57 reports95% confidence
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4002 indicators)
3456 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4088 indicators)
3543 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4085 indicators)
3540 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4085 indicators)
3541 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4084 indicators)
3540 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4076 indicators)
3534 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4076 indicators)
3534 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4077 indicators)
3536 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4073 indicators)
3534 IOCs in report
AT
Abuse.ch ThreatFox
Yesterday
Abuse.ch ThreatFox (4056 indicators)
3521 IOCs in report

Activity Timeline

57 total obs
Jun 10Jun 8

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
57
Critical
30d
57
Critical
3mo
57
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
57
Reports
First seenJun 8, 2026
Last seenJun 10, 2026
Verified IOC
GeolocationHK
CountryHong Kong
LocationHong Kong, Kowloon
ASNAS9294
OrgGnet Inc.
Coords22.3193, 114.1690

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 days ago · Last seen 1 day ago
Appeared in 57 threat reports from 10 sources
Associated with: Kimsuky, Hive, Play, Turla
Used by malware: Pegasus, Dridex, Lumma, SocGholish, XMRig, NetWire, Remcos, Rhysida, Nanocore, Rhadamanthys, Stealc, Mirai, Vidar, NjRAT, Bumblebee, META Stealer, Hive, Play, Cobalt Strike, Havoc, Sliver, XWorm, AsyncRAT