172.111.139.29

Classification: Malicious

172.111.139.29 is a malicious IP address in New York City, US. Linked to Asyncrat malware. Reported by 2 threat sources, last seen 2026-11-07.

Current activity

  • Command & Control server — Used by cybercriminals to control victim computers.
  • VPN node — Provides anonymization that can hide an attacker.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2026-11-07 05:25:08 2026-11-07 05:25:08 anonymization vpn
AsyncRAT ThreatFox Abuse.ch 2026-11-07 05:07:27 2026-11-07 05:25:07 botnet malicious-activity S1087 AsyncRAT

Tags

port:7707 asyncrat modat

Whois information

AS name
AS212238 Internet Security - US NY
Registrant
Internet Security - US NY
City
New York City
State
NY
Postal code
10203
Country
US — United States 🇺🇸
First indexed
2026-11-07 05:25:07
Last updated
2026-11-07 05:25:07