128.90.108.225
Classification: Suspicious
128.90.108.225 is a suspicious IP address in Bogota, CO. Linked to Remcos malware. Reported by 3 threat sources (VPN), last seen 2026-10-07.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-10-07 18:09:00 | 2026-10-07 18:09:00 | anonymization vpn | |
| Remcos | ThreatFox Abuse.ch | 2026-10-07 14:41:18 | 2026-10-07 14:41:18 | botnet malicious-activity | S0332 Remcos |
| Backdoor.MSIL.REMCOS | Hybrid-Analysis | 2020-12-29 18:00:31 | 2020-12-29 18:00:31 | S0332 Remcos |
Tags
332ps1ago socmer remvio remcosrat c2 port:2424 remcosWhois information
- AS name
- AS40861 Unus, Inc.
- AS registry
- arin
- AS date
- 1987-12-03 00:00:00
- AS CIDR
- 128.90.108.0/24
- CIDR
- 128.90.0.0/16
- Registrant
- Unus, Inc.
- Address
- 2500 Bee Cave Road, Building 1 Suite 400
- City
- Bogota
- State
- TX
- Postal code
- 111411
- Country
- CO — Colombia 🇨🇴
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2020-12-29 18:00:31
- Last updated
- 2026-10-07 18:09:01
Malicious IPs in the same CIDR
128.90.108.138 128.90.108.84 128.90.108.50 128.90.108.200 128.90.108.66 128.90.108.144 128.90.108.119 128.90.108.169 128.90.108.35 128.90.108.73