IOC Radar
IPHighVerifiedSignal 86/100

2.26.229.254

Location
United KingdomUnited Kingdom
London, England
First Seen
Jun 16, 2026
Last Seen
Jun 26, 2026
Jun 16
First Seen
10d ago
Jun 26
Last Seen
today
224
Reports
source reports
95%
Confidence
high
Found in 224 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Threat Actors3
KKimsukyLLockBitPPlay
Tags

Network Information

CountryGBUnited Kingdom
RegionLondon, England

Feed Intelligence Summary

224 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4321 indicators)
3604 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4324 indicators)
3610 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4327 indicators)
3613 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4332 indicators)
3582 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4329 indicators)
3577 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4403 indicators)
3649 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4410 indicators)
3658 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4456 indicators)
3698 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4455 indicators)
3697 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4466 indicators)
3707 IOCs in report

Activity Timeline

224 total obs
Jun 26Jun 16

Threat Activity Heatmap

· Peak: 2026-06-20
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
14
Elevated
7d
147
Critical
30d
224
Critical
3mo
224
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
224
Reports
First seenJun 16, 2026
Last seenJun 26, 2026
Verified IOC
GeolocationGB
CountryUnited Kingdom
LocationLondon, England
Coords51.5172, -0.1424

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 10 days ago · Last seen today
Appeared in 224 threat reports from 10 sources
Associated with: Kimsuky, LockBit, Play
Used by malware: SocGholish, XWorm, XMRig, Remcos, Rhysida, XorDDoS, NjRAT, NetWire, WannaCry, AsyncRAT, FormBook, Pegasus, Nanocore, Mozi, QakBot, Sliver, Play, Stealc, Mirai, Vidar, LockBit, Havoc