178.73.192.2

Classification: Neutral

178.73.192.2 is a neutral IP address. Reported by 5 threat sources, last seen 2025-08-21. Network: AS42708 Frootynet.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087) REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2025-02-15 06:51:52 2025-08-21 09:03:58 anonymization
Asyncrat Maltrail 2025-03-27 14:16:05 2025-03-27 14:16:05 malicious-activity S1087 AsyncRAT
Proxy FireHOL 2024-11-03 23:33:31 2024-11-03 23:33:31 anonymization
Remcos ThreatFox Abuse.ch 2024-10-28 08:17:07 2024-10-30 07:18:44 malicious-activity S0332 Remcos
AsyncRAT ThreatFox Abuse.ch 2024-05-04 11:17:06 2024-05-06 10:22:50 malicious-activity S1087 AsyncRAT
Anonymizer Maltiverse 2019-06-19 02:28:02 2019-06-19 02:28:02

Tags

anonymizer as42708 c2 censys portlane rat port:2000 remcos port:2404 remcosrat remvio socmer anonymization port:9003

Whois information

AS name
AS42708 Frootynet
AS registry
ripencc
AS date
2010-03-22 00:00:00
AS CIDR
178.73.192.0/18
Registrant
Frootynet
City
Stockholm
Postal code
111 29
Country
SE — Sweden 🇸🇪
First indexed
2019-06-19 02:28:02
Last updated
2025-08-21 09:04:01

Malicious IPs in the same CIDR

178.73.212.20 178.73.218.4