198.23.227.212
Classification: Suspicious
198.23.227.212 is a suspicious IP address. Linked to Remcos malware. Reported by 1 threat source, last seen 2025-08-14. Network: AS36352 REBECCA BROWN.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| XWorm | ThreatFox Abuse.ch | 2025-08-12 16:17:43 | 2025-08-14 15:18:53 | malicious-activity | |
| Remcos | ThreatFox Abuse.ch | 2024-06-27 17:18:48 | 2024-08-04 11:18:49 | malicious-activity | S0332 Remcos |
Tags
c2 remcos port:2404 remcosrat remvio socmer port:32583 xworm port:6000Whois information
- AS name
- AS36352 REBECCA BROWN
- AS registry
- arin
- AS date
- 2012-10-05 00:00:00
- AS CIDR
- 198.23.226.0/23
- CIDR
- 198.23.128.0/17
- Registrant
- REBECCA BROWN
- Address
- 325 Delaware Avenue Suite 300
- City
- Los Angeles
- State
- CA
- Postal code
- 90014
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2024-06-27 17:18:48
- Last updated
- 2026-07-31 17:52:58