3.71.225.231
Classification: Suspicious
3.71.225.231 is a suspicious IP address. Linked to Njrat malware. Reported by 1 threat source, last seen 2025-08-22. Network: AS16509 A100 ROW GmbH.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| XWorm | ThreatFox Abuse.ch | 2025-08-20 15:18:00 | 2025-08-22 14:18:59 | malicious-activity | |
| NjRAT | ThreatFox Abuse.ch | 2024-10-05 18:17:06 | 2025-03-31 13:22:41 | malicious-activity | S0385 njRAT |
Tags
njrat rat port:18924 bladabindi lime-worm port:17846 port:14987 port:14005 port:10698 port:19331 port:10095 port:16168 port:14673 port:18053 xworm port:15466Whois information
- AS name
- AS16509 A100 ROW GmbH
- AS registry
- arin
- AS date
- 2017-12-20 00:00:00
- AS CIDR
- 3.64.0.0/12
- CIDR
- 3.0.0.0/9
- Registrant
- A100 ROW GmbH
- Address
- 410 Terry Ave N.
- City
- Frankfurt am Main
- State
- WA
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2024-10-05 18:17:06
- Last updated
- 2026-08-15 13:30:07
Malicious IPs in the same CIDR
3.64.4.198 3.70.164.132 3.70.45.136 3.69.115.178 3.68.171.119 3.71.146.175 3.65.196.126 3.73.120.104 3.65.193.237 3.75.145.52 3.67.62.142 3.72.79.211