4.tcp.eu.ngrok.io
Classification: Malicious
4.tcp.eu.ngrok.io is a malicious hostname. Linked to Asyncrat malware. 4 sightings from Hybrid-Analysis and ThreatFox Abuse.ch, last seen 2024-12-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:40:42.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2024-12-29 10:18:34 | 2024-12-29 11:18:34 | malicious-activity | S1087 AsyncRAT |
| Malicious URL | Hybrid-Analysis | 2023-08-17 05:30:03 | 2024-01-12 15:30:04 |
Tags
asyncratIP addresses resolved by this hostname
- 3.127.253.86 (2026-10-01 04:40:36)
- 18.198.77.177 (2026-10-01 04:40:36)
- 35.158.159.254 (2026-10-01 04:40:36)
- 3.121.139.82 (2026-10-01 04:40:36)
- 3.127.59.75 (2026-10-01 04:40:36)
- 52.28.112.211 (2026-10-01 04:40:36)
- 63.180.188.21 (2026-10-17 08:40:42)
- 3.79.250.139 (2026-10-17 08:40:42)
- 18.198.206.105 (2026-10-17 08:40:42)
- 3.79.118.83 (2026-10-17 08:40:42)
- 3.79.177.243 (2026-10-17 08:40:42)
- 18.195.23.59 (2026-10-17 08:40:42)
Whois information
- AS name
- AS16509 Amazon.com, Inc.
- Domain
- ngrok.io
- TLD
- io
- First indexed
- 2023-08-17 05:30:03
- Last updated
- 2026-10-17 08:40:42