IOC Radar
IPHighVerifiedSignal 86/100

38.181.44.109

Location
United StatesUnited States
Los Angeles, California
ASN
AS140227
Hong Kong Communications International Co., Limited
First Seen
Jun 2, 2026
Last Seen
Jun 4, 2026
Jun 2
First Seen
25d ago
Jun 4
Last Seen
23d ago
43
Reports
source reports
95%
Confidence
high
Found in 43 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS140227
OrganizationHong Kong Communications International Co., Limited

Feed Intelligence Summary

43 reports95% confidence
AT
Abuse.ch ThreatFox
Jun 4, 2026
2925 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2948 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2938 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2903 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2897 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2895 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2868 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2917 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2903 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2894 IOCs in report

Activity Timeline

43 total obs
Jun 4Jun 2

Threat Activity Heatmap

· Peak: 2026-06-04
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
43
Critical
3mo
43
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
43
Reports
First seenJun 2, 2026
Last seenJun 4, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS140227
OrgHong Kong Communications International Co., Limited
Coords34.0522, -118.2436

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 25 days ago · Last seen 23 days ago
Appeared in 43 threat reports from 10 sources
Associated with: Sandworm
Used by malware: Lumma, Pegasus, Nanocore, SocGholish, NetWire, XMRig, Remcos, Rhysida, AsyncRAT, XWorm, XorDDoS, Mirai, Vidar, Metasploit, Havoc, Sliver, Stealc