IOC Radar
IPHighVerifiedSignal 86/100

154.23.189.41

Location
United StatesUnited States
Los Angeles, California
ASN
AS140227
Hong Kong Communications International Co., Limited
First Seen
Jun 11, 2026
Last Seen
Jun 13, 2026
Jun 11
First Seen
17d ago
Jun 13
Last Seen
15d ago
45
Reports
source reports
95%
Confidence
high
Found in 45 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS140227
OrganizationHong Kong Communications International Co., Limited

Feed Intelligence Summary

45 reports95% confidence
AT
Abuse.ch ThreatFox
Jun 13, 2026
2926 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
2923 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
2930 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
2929 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5146 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5134 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5154 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5156 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5165 IOCs in report
AT
Abuse.ch ThreatFox
Jun 13, 2026
5188 IOCs in report

Activity Timeline

45 total obs
Jun 13Jun 11

Threat Activity Heatmap

· Peak: 2026-06-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
45
Critical
3mo
45
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
45
Reports
First seenJun 11, 2026
Last seenJun 13, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS140227
OrgHong Kong Communications International Co., Limited
Coords34.0522, -118.2436

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 17 days ago · Last seen 15 days ago
Appeared in 45 threat reports from 10 sources
Associated with: Kimsuky, Hive, Turla, Play
Used by malware: Pegasus, XWorm, SocGholish, Remcos, Rhysida, AsyncRAT, Lumma, Nanocore, Cobalt Strike, Metasploit, Stealc, Mirai, Vidar, Havoc, Sliver, Hive, Gootloader, META Stealer, Play