188.126.90.11
Classification: Malicious
188.126.90.11 is a malicious IP address. Linked to Remcos malware. Reported by 2 threat sources, last seen 2026-08-20. Network: AS42708 Glesys AB.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-02-08 04:17:06 | 2026-08-20 06:46:51 | anonymization vpn | |
| Unknown malware | ThreatFox Abuse.ch | 2026-08-20 05:45:42 | 2026-08-20 06:25:05 | malicious-activity | |
| Remcos | ThreatFox Abuse.ch | 2025-02-08 04:17:04 | 2025-02-10 03:23:52 | malicious-activity | S0332 Remcos |
Tags
as42708 c2 censys glesys rat remcos port:2404 remcosrat remvio socmer port:7777Whois information
- AS name
- AS42708 Glesys AB
- AS registry
- ripencc
- AS date
- 2009-07-22 00:00:00
- AS CIDR
- 188.126.64.0/19
- Registrant
- Glesys AB
- City
- Stockholm
- Postal code
- 101 23
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2025-02-08 04:17:04
- Last updated
- 2026-08-20 06:46:52
Malicious IPs in the same CIDR
188.126.94.177 188.126.89.57 188.126.89.51 188.126.89.75 188.126.89.155 188.126.89.157 188.126.94.205 188.126.89.79 188.126.89.150 188.126.89.71 188.126.76.33 188.126.89.48 188.126.83.38 188.126.89.56 188.126.89.52 188.126.89.93 188.126.89.61 188.126.89.38 188.126.89.46 188.126.89.62 188.126.89.39 188.126.89.42 188.126.89.44 188.126.89.58 188.126.89.40