158.94.211.18
Classification: Malicious
158.94.211.18 is a malicious IP address in Amsterdam, NL. Linked to Remcos malware. 679 sightings from 3 threat sources, last seen 2026-09-24.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | HoneyDB | 2026-09-12 00:00:00 | 2026-09-24 00:00:00 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-03-24 21:55:09 | 2026-03-29 03:05:26 | anomalous-activity | |
| Remcos | ThreatFox Abuse.ch | 2026-01-22 20:04:21 | 2026-01-26 01:13:33 | malicious-activity | S0332 Remcos |
Tags
remvio socmer remcos remcosrat as202412 omegatech-as rat censys port:5902 c2 port:5903Whois information
- AS name
- AS202412 OMEGATECH
- Registrant
- OMEGATECH
- City
- Amsterdam
- State
- NY
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2026-01-22 21:01:40
- Last updated
- 2026-10-13 21:57:00