102.220.163.109
Classification: Malicious
102.220.163.109 is a malicious IP address in Ljubljana, SI. Linked to Asyncrat malware. 5 sightings from ThreatFox Abuse.ch (PureRAT), last seen 2026-11-07.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2026-11-05 09:43:06 | 2026-11-07 05:25:06 | botnet malicious-activity | S1087 AsyncRAT |
| PureRAT | ThreatFox Abuse.ch | 2026-11-07 05:07:57 | 2026-11-07 05:25:06 | botnet malicious-activity |
Tags
port:2504 rat port:7008 asyncrat port:2505 drb-ra resolverrat port:2502 port:2503 port:56003 purehvnc port:8808 purerat modatWhois information
- AS name
- AS197769 Internet
- Registrant
- Internet
- City
- Ljubljana
- Postal code
- 1600
- Country
- SI — Slovenia 🇸🇮
- First indexed
- 2026-11-05 10:25:06
- Last updated
- 2026-11-07 05:25:07