https://178.16.54.208/
Classification: Malicious
https://178.16.54.208/ is a malicious URL. Linked to Konni, Remcos malware. 7 sightings from Threat Observatory, last seen 2026-05-25. Seen in BR.
Current activity
- Offline — no longer resolving. Last online 2026-06-11 10:33:43.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: KONNI (S0356) REMCOS (S0332)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across education, government and professional services networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Remcos | Maltiverse Threat Observatory | 2026-05-25 21:15:11 | 2026-05-25 21:15:11 | country_code:br industry:education-and-nonprofits industry:government-and-public-sector industry:professional-services | S0332 Remcos |
| Konni | Maltiverse Threat Observatory | 2026-03-16 02:00:08 | 2026-03-16 02:00:08 | country_code:br industry:professional-services | S0356 KONNI |
URL information
- Direct IP
- 178.16.54.208 — this URL points straight to an IP address, a strong indicator of malicious use.
- SHA-256
83b45c9463510bdbda64e079c00072ac82e158e4954f8e546b0ac3a273b5b910- First indexed
- 2026-05-13 05:17:00
- Last updated
- 2026-10-13 02:17:36
- Last online
- 2026-06-11 10:33:43