178.130.47.168
Classification: Malicious
178.130.47.168 is a malicious IP address in Phoenix, US. Linked to Remcos malware. 4 sightings from AbuseIPDB and ThreatFox Abuse.ch, last seen 2026-10-05.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-10-05 09:23:10 | 2026-10-05 09:25:08 | botnet malicious-activity | S0332 Remcos |
| Suspicious Host | AbuseIPDB | 2025-08-25 22:52:44 | 2025-08-29 10:48:23 | anomalous-activity |
Tags
remcosrat socmer remvio port:65535 ratWhois information
- AS name
- AS215540 GLOBAL CONNECTIVITY SOLUTIONS LLP
- Registrant
- GLOBAL CONNECTIVITY SOLUTIONS LLP
- City
- Phoenix
- State
- AZ
- Postal code
- 85097
- Country
- US — United States 🇺🇸
- First indexed
- 2025-08-26 06:09:28
- Last updated
- 2026-10-05 11:10:17