178.73.192.14

Classification: Neutral

178.73.192.14 is a neutral IP address. Reported by 3 threat sources, last seen 2025-02-14. Network: AS42708 Frootynet.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087) REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2025-02-14 06:57:57 2025-02-14 06:57:57 anonymization
Mail Spammer Barracuda 2024-04-16 07:19:59 2025-02-14 06:57:57
Remcos ThreatFox Abuse.ch 2024-08-14 22:17:05 2024-08-17 21:21:02 malicious-activity S0332 Remcos
AsyncRAT ThreatFox Abuse.ch 2024-08-14 23:17:04 2024-08-16 20:22:44 malicious-activity S1087 AsyncRAT
DCRat ThreatFox Abuse.ch 2024-04-16 07:19:58 2024-04-18 06:23:09 malicious-activity

Tags

dcrat portlane www.portlane.com port:5000 darkcrystal rat as42708 c2 censys rat port:2404 remcosrat remvio socmer port:2000 portlane port:8888

Whois information

AS name
AS42708 Frootynet
AS registry
ripencc
AS date
2010-03-22 00:00:00
AS CIDR
178.73.192.0/18
CIDR
178.73.192.0/23
Registrant
Frootynet
Address
Box 6322 102 35 Stockholm Sweden
City
Stockholm
Postal code
111 29
Country
SE — Sweden 🇸🇪
Contact email
[email protected]
First indexed
2024-04-16 07:19:58
Last updated
2025-02-14 06:57:58

Malicious IPs in the same CIDR

178.73.218.8 178.73.192.18 178.73.218.12 178.73.218.3 178.73.192.6 178.73.212.20 178.73.218.4