178.73.218.2
Classification: Suspicious
178.73.218.2 is a suspicious IP address. Linked to Remcos malware. Reported by 2 threat sources, last seen 2026-08-01. Network: AS42708 Frootynet.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-05-19 12:17:14 | 2026-08-01 15:08:09 | anonymization vpn | |
| Remcos | ThreatFox Abuse.ch | 2025-05-19 12:17:09 | 2025-05-21 11:49:55 | malicious-activity | S0332 Remcos |
Tags
as42708 c2 censys glesys rat remcos port:8090 remcosrat remvio socmerWhois information
- AS name
- AS42708 Frootynet
- Registrant
- Frootynet
- City
- Stockholm
- Postal code
- 101 23
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2025-05-19 12:17:09
- Last updated
- 2026-08-01 15:08:10