3.124.142.205
Classification: Neutral
3.124.142.205 is a neutral IP address. Reported by 2 threat sources, last seen 2024-09-13. Network: AS16509 A100 Row GmbH.
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: REDLINE STEALER (S1240) NANOCORE (S0336) NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| NjRAT | ThreatFox Abuse.ch | 2022-04-27 00:01:16 | 2024-09-13 00:02:44 | malicious-activity | S0385 njRAT |
| LimeRAT | ThreatFox Abuse.ch | 2022-05-21 17:18:16 | 2024-05-03 11:19:47 | malicious-activity | |
| Nanocore RAT | ThreatFox Abuse.ch | 2024-01-06 08:17:14 | 2024-04-23 06:22:00 | malicious-activity | S0336 NanoCore |
| RedLine Stealer | ThreatFox Abuse.ch | 2024-04-01 13:21:27 | 2024-04-03 12:22:22 | malicious-activity | S1240 RedLine Stealer |
| Ghost RAT | ThreatFox Abuse.ch | 2024-03-05 21:17:04 | 2024-03-07 20:21:16 | malicious-activity | |
| Meterpreter | ThreatFox Abuse.ch | 2023-10-02 09:22:41 | 2023-10-04 08:22:12 | malicious-activity | |
| Proxy | FireHOL | 2023-04-08 13:23:46 | 2023-05-28 12:37:45 | anonymization |
Tags
c2 historicalandnew meterpreter port:19394 njrat port:17176 bladabindi lime-worm port:16377 port:15305 port:16962 port:17561 port:19067 port:14634 port:15185 port:17651 port:18953 port:19209 port:18364 port:19120 port:11674 port:25565 port:11604 port:10264 anonymization port:13779 port:17194 port:10172 port:19016 port:17312 port:13980 port:18668 port:10202 port:11993 port:10776 port:12656 port:18468 port:19977 port:10040 port:19875 port:17139 port:11883 port:18787 port:10185 port:12065 port:12208 port:11752 port:15401 port:17724 port:12329 port:13820 port:17981 port:18211 port:11177 port:16872 port:13489 port:13065 port:15890 port:10505 port:14219 port:16986 port:12360 port:17640 limerat rat port:19691 port:18505 port:11534 port:19568 port:15889 port:12449 port:14516 port:19097 port:11337 port:17987 port:15505 port:16921 port:16929 port:15872 port:15713 port:13328 nanocore port:11297 nancrat port:14834 port:14937 port:25505 port:12517 port:15634 port:11544 port:17888 port:18563 port:19599 port:12607 port:12780 port:18909 port:19080 port:16267 port:10757 gh0strat port:14210 farfli gh0st rat pcrat port:12353 port:11258 port:17485 port:19607 port:11326 port:11256 port:12664 port:18335 port:13241 redlinestealer port:18950 recordstealer port:14390 port:10543 port:10468 port:18511 port:10869 port:15296 port:11720 port:12194 port:12088 port:12222 port:16602 port:12272 port:19473 port:14088 port:18134 port:18801 port:15683 port:12984 port:10651 port:12876 port:19650 port:10935 port:11457 port:12493 port:16163 port:19060 port:18863 port:13913 port:13886 port:11348Whois information
- AS name
- AS16509 A100 Row GmbH
- AS registry
- arin
- AS date
- 2017-12-20 00:00:00
- AS CIDR
- 3.124.0.0/14
- CIDR
- 3.0.0.0/9
- Registrant
- A100 Row GmbH
- Address
- 410 Terry Ave N.
- City
- Frankfurt am Main
- State
- WA
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2022-04-27 00:01:16
- Last updated
- 2026-07-18 17:17:43
Malicious IPs in the same CIDR
3.127.253.86 3.125.122.212 3.127.181.115 3.125.188.168 3.126.224.214