198.206.152.4
Classification: Malicious
198.206.152.4 is a malicious IP address in Washington, US. Linked to Remcos malware. Reported by ThreatFox Abuse.ch, last seen 2026-11-03.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | ThreatFox Abuse.ch | 2026-11-03 10:25:12 | 2026-11-03 11:25:07 | botnet malicious-activity | S0332 Remcos |
Tags
port:2404 socmer rat remcosrat remvioWhois information
- AS name
- AS209373 Private Customer
- Registrant
- Private Customer
- City
- Washington
- State
- DC
- Postal code
- 20511
- Country
- US — United States 🇺🇸
- First indexed
- 2026-11-03 11:25:07
- Last updated
- 2026-11-03 11:25:07