3.125.223.134

Classification: Neutral

3.125.223.134 is a neutral IP address. Reported by 3 threat sources, last seen 2024-09-21. Network: AS16509 A100 ROW GmbH.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: NANOCORE (S0336) ASYNCRAT (S1087) NJRAT (S0385)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
NjRAT ThreatFox Abuse.ch 2022-05-11 22:18:24 2024-09-21 13:21:20 malicious-activity S0385 njRAT
AsyncRAT ThreatFox Abuse.ch 2024-05-17 15:19:13 2024-05-19 14:21:41 malicious-activity S1087 AsyncRAT
Nanocore RAT ThreatFox Abuse.ch 2024-01-06 08:17:15 2024-04-22 15:20:34 malicious-activity S0336 NanoCore
Ghost RAT ThreatFox Abuse.ch 2024-03-05 21:17:04 2024-03-07 20:21:16 malicious-activity
Generic.Malware Hybrid-Analysis 2020-12-18 19:30:20 2020-12-18 19:30:20
Trojan.Swrort Hybrid-Analysis 2020-04-23 00:15:10 2020-04-23 00:15:10
Gen:Variant.Razy Hybrid-Analysis 2020-03-30 08:45:20 2020-03-30 08:45:20
Malicious site Hybrid-Analysis 2020-03-12 12:15:12 2020-03-12 12:15:12
CAL phishing Antiphishing.com.ar 2020-02-21 01:46:40 2020-02-21 01:46:40

Tags

njrat port:16377 bladabindi lime-worm port:15305 port:17561 port:19067 port:14634 port:15185 port:19209 port:19120 port:11674 port:25565 port:19740 port:11604 port:17042 port:14555 port:13779 port:19016 port:17312 port:10202 port:11993 port:10040 port:17139 port:14504 port:11883 port:18787 port:11800 port:16987 port:11544 port:16744 port:15401 port:17355 port:18088 port:13820 port:18494 port:18521 port:18211 port:11177 port:13880 port:16872 port:13489 port:10809 port:16986 port:12705 port:17483 phishing port:18985 port:19568 port:15889 port:12449 port:11337 port:16921 port:15872 nanocore rat port:11297 nancrat port:16777 port:17888 port:16904 port:19599 port:12044 port:12780 port:19080 port:10757 gh0strat port:14210 farfli gh0st rat pcrat port:11258 port:16779 port:17485 port:19607 port:12607 port:12664 port:18335 port:13241 port:11326 port:18511 port:10543 port:10468 port:17231 port:10869 port:15296 port:15422 port:11720 port:19177 port:12143 port:12194 port:11168 port:16602 port:12841 asyncrat port:15221 port:19473 port:14088 port:14740 port:18134 port:13265 port:12374 port:19926 port:11331 port:10942 port:19650 port:12984 port:12876 port:10651 port:10935 port:10148 port:11457 port:12493 port:16163 port:19060 port:14213 port:18863 port:13886 port:11348 port:10472

Whois information

AS name
AS16509 A100 ROW GmbH
AS registry
arin
AS date
2017-12-20 00:00:00
AS CIDR
3.124.0.0/14
CIDR
3.0.0.0/9
Registrant
A100 ROW GmbH
Address
410 Terry Ave N.
City
Frankfurt am Main
State
WA
Postal code
60311
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2020-02-21 01:46:40
Last updated
2026-08-02 20:19:38

Malicious IPs in the same CIDR

3.127.253.86 3.125.122.212 3.127.181.115 3.125.188.168 3.126.224.214