3.125.102.39

Classification: Neutral

3.125.102.39 is a neutral IP address. Reported by 3 threat sources, last seen 2025-03-27. Network: AS16509 A100 Row GmbH.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: DCRAT (S9017) NANOCORE (S0336) ASYNCRAT (S1087) NJRAT (S0385)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Asyncrat Maltrail 2025-03-27 13:29:58 2025-03-27 13:29:58 malicious-activity S1087 AsyncRAT
NjRAT ThreatFox Abuse.ch 2022-04-27 00:01:16 2024-09-17 22:18:56 malicious-activity S0385 njRAT
AsyncRAT ThreatFox Abuse.ch 2024-05-17 15:19:14 2024-05-19 14:21:41 malicious-activity S1087 AsyncRAT
Nanocore RAT ThreatFox Abuse.ch 2023-06-20 13:18:27 2024-04-22 14:21:23 malicious-activity S0336 NanoCore
DCRat ThreatFox Abuse.ch 2024-03-29 19:19:19 2024-03-31 18:23:05 malicious-activity S9017 DCRAT
Phishing OpenPhish 2022-06-10 00:40:36 2022-06-10 00:40:36 compromised

Tags

njrat port:16377 bladabindi lime-worm port:15305 port:16962 port:17561 port:14634 port:15185 port:18953 port:10067 port:11604 nanocore rat port:29052 nancrat port:17042 port:14555 port:10264 port:13779 port:17194 port:18362 port:14888 port:13980 port:18668 port:11993 port:10776 port:12656 port:18468 port:19977 port:19875 port:11883 port:18787 port:11800 port:10185 port:12065 port:12251 port:16744 port:15401 port:12563 port:13820 port:18494 port:18521 port:17981 port:15266 port:18211 port:11177 port:13880 port:16872 port:14880 port:13489 port:13065 port:15890 port:10809 port:12048 port:12705 phishing port:17640 port:15552 port:17483 port:18505 port:11534 port:18985 port:15889 port:12449 port:19097 port:11337 port:15505 port:16921 port:15872 port:15713 port:11297 port:14834 port:25505 port:12517 port:15634 port:16777 port:11544 port:17888 port:18563 port:13406 port:16904 port:19599 port:12607 port:12044 port:12780 port:19080 port:10202 port:16267 port:10757 port:11258 port:16779 port:17485 port:19607 port:11326 port:12664 port:18335 port:13241 port:15422 amazon-02 dcrat port:12853 darkcrystal rat port:10468 port:18511 port:15019 port:10869 port:17393 port:14390 port:11720 port:10543 port:12143 port:12194 port:16602 asyncrat port:15221 port:19473 port:14740 port:14088 port:16276 port:17739 port:17046 port:19926 port:10942 port:15683 port:12984 port:10651 port:12876 port:19650 port:10935 port:15809 port:11457 port:16163 port:19060 port:18863 port:13886 port:11348 port:10472 port:13643

Whois information

AS name
AS16509 A100 Row GmbH
AS registry
arin
AS date
2017-12-20 00:00:00
AS CIDR
3.124.0.0/14
CIDR
3.0.0.0/9
Registrant
A100 Row GmbH
Address
410 Terry Ave N.
City
Frankfurt am Main
State
WA
Postal code
60311
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2022-04-27 00:01:16
Last updated
2026-07-20 17:15:19

Malicious IPs in the same CIDR

3.127.253.86 3.125.122.212 3.127.181.115 3.125.188.168 3.126.224.214