193.124.22.107
Classification: Suspicious
193.124.22.107 is a suspicious IP address in Riga, LV. Linked to Socgholish malware. 52 sightings, last seen 2026-09-03. Network: AS26383 Baxet Group Inc..
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-03-02 09:15:50 | 2026-09-03 02:55:37 | anonymization vpn | |
| FAKEUPDATES | ThreatFox Abuse.ch | 2024-05-06 10:20:23 | 2024-05-08 09:21:12 | malicious-activity | S1124 SocGholish |
Tags
keitarotds socgholish port:443 fakeupdateWhois information
- AS name
- AS26383 Baxet Group Inc.
- AS registry
- ripencc
- AS date
- 1993-09-01 00:00:00
- AS CIDR
- 193.124.22.0/24
- CIDR
- 193.124.22.0/24
- Registrant
- Baxet Group Inc.
- Address
- 2093 PHILADELPHIA PIKE, 6009 Claymont, DE 19703-2424 US
- City
- Riga
- Postal code
- LV-1050
- Country
- LV — Latvia 🇱🇻
- Contact email
- [email protected]
- First indexed
- 2024-05-06 10:20:23
- Last updated
- 2026-09-03 02:55:38