IOC Radar
IPHighVerifiedSignal 86/100

5.230.201.242

Location
United StatesUnited States
Chicago, Illinois
ASN
AS215292
GHOSTnet GmbH
First Seen
Jun 6, 2026
Last Seen
Jun 29, 2026
Jun 6
First Seen
22d ago
Jun 29
Last Seen
today
501
Reports
source reports
95%
Confidence
high
Found in 501 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryUSUnited States
RegionChicago, Illinois
ASNAS215292
OrganizationGHOSTnet GmbH

Feed Intelligence Summary

501 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3442 indicators)
2872 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3399 indicators)
2847 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3447 indicators)
2887 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3366 indicators)
2806 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3404 indicators)
2836 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3313 indicators)
2753 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3315 indicators)
2753 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3321 indicators)
2757 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3325 indicators)
2760 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3170 indicators)
2605 IOCs in report

Activity Timeline

501 total obs
Jun 29Jun 6

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
11
Elevated
7d
144
Critical
30d
501
Critical
3mo
501
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
501
Reports
First seenJun 6, 2026
Last seenJun 29, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationChicago, Illinois
ASNAS215292
OrgGHOSTnet GmbH
Coords41.9210, -87.6454

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 22 days ago · Last seen today
Appeared in 501 threat reports from 10 sources
Associated with: Akira, Kimsuky, LockBit, Hive, Turla, Play
Used by malware: XMRig, Remcos, Rhysida, DarkComet, WannaCry, Akira, AsyncRAT, Lumma, FormBook, Mozi, NjRAT, XWorm, Pegasus, NetWire, Nanocore, XorDDoS, SocGholish, Cobalt Strike, Sliver, META Stealer, Gh0st RAT, Play, Stealc, Mirai, Vidar, Hive, Metasploit, Gootloader, LockBit, Havoc