193.0.178.140
Classification: Suspicious
193.0.178.140 is a suspicious IP address in Dronten, NL. Linked to Bitpaymer malware. 6 sightings from Hybrid-Analysis and IPWhois.io, last seen 2026-10-04.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: BITPAYMER (S0570)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-10-13 14:44:46 | 2026-10-04 15:09:20 | anonymization vpn | |
| Gen:Variant.Ransom.Friedex | Hybrid-Analysis | 2019-03-15 19:45:12 | 2019-11-11 20:00:06 | S0570 BitPaymer |
Whois information
- AS name
- AS202423 Tyurin Viktor Mihaylovich
- AS registry
- ripencc
- AS date
- 2012-05-03 00:00:00
- AS CIDR
- 193.0.178.0/24
- Registrant
- Tyurin Viktor Mihaylovich
- City
- Dronten
- Postal code
- 8254
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2019-03-15 19:45:12
- Last updated
- 2026-10-04 15:09:23