3.66.38.117
Classification: Suspicious
3.66.38.117 is a suspicious IP address. Linked to Asyncrat, Nanocore malware. Reported by 3 threat sources, last seen 2025-09-01.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087) NANOCORE (S0336) NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| NjRAT | ThreatFox Abuse.ch | 2022-05-20 05:32:33 | 2025-09-01 22:20:56 | malicious-activity | S0385 njRAT |
| Asyncrat | Maltrail | 2025-03-27 13:35:40 | 2025-03-27 13:35:40 | malicious-activity | S1087 AsyncRAT |
| SpyNote | ThreatFox Abuse.ch | 2025-02-08 07:17:05 | 2025-02-10 06:22:09 | malicious-activity | |
| Nanocore RAT | ThreatFox Abuse.ch | 2024-07-31 17:17:08 | 2024-08-02 16:20:37 | malicious-activity | S0336 NanoCore |
| Proxy | FireHOL | 2023-08-04 17:06:25 | 2023-08-31 16:35:33 | anonymization | |
| AsyncRAT | ThreatFox Abuse.ch | 2022-10-21 11:20:27 | 2022-10-23 09:23:26 | malicious-activity | S1087 AsyncRAT |
Tags
njrat port:15392 bladabindi lime-worm port:15925 anonymization port:12360 port:13034 port:16370 port:15224 port:17674 port:18168 port:14453 port:18888 port:19905 port:16577 port:17297 port:18736 port:19161 port:10146 port:13090 port:13730 port:18280 port:10291 port:18644 port:18064 port:14916 port:17752 port:19304 port:16320 asyncrat rat port:12104 port:10705 port:18528 port:11672 port:12072 port:14104 port:12872 port:12180 port:11713 port:13458 port:12147 port:19220 port:12419 port:10298 port:14402 port:12954 port:15520 port:12041 port:16992 port:17032 port:12765 port:13672 port:13040 port:17008 port:12377 port:14622 port:11964 port:17680 port:18942 nanocore port:13201 nancrat port:11237 port:12482 c2 spynote port:16230 cypherrat port:14147Whois information
- AS name
- AS16509 A100 Row GmbH
- AS registry
- arin
- AS date
- 2017-12-20 00:00:00
- AS CIDR
- 3.64.0.0/12
- CIDR
- 3.0.0.0/9
- Registrant
- A100 Row GmbH
- Address
- 410 Terry Ave N.
- City
- Frankfurt
- State
- WA
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2022-05-20 05:32:33
- Last updated
- 2026-03-09 02:24:06
Malicious IPs in the same CIDR
3.64.4.198 3.70.164.132 3.70.45.136 3.69.115.178 3.68.171.119 3.71.146.175 3.65.196.126 3.73.120.104 3.65.193.237 3.75.145.52 3.67.62.142 3.72.79.211