79.134.225.18
Classification: Suspicious
79.134.225.18 is a suspicious IP address in Basel, CH. Linked to Asyncrat, Nanocore malware. 487 sightings from 5 threat sources, last seen 2026-01-23.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087) NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nanocore RAT | ThreatFox Abuse.ch | 2022-08-14 17:19:01 | 2026-01-23 03:11:13 | malicious-activity | S0336 NanoCore |
| Asyncrat | Maltrail | 2025-03-27 13:23:23 | 2025-03-27 13:49:24 | malicious-activity | S1087 AsyncRAT |
| AsyncRAT | ThreatFox Abuse.ch | 2023-09-10 22:18:42 | 2023-09-12 21:27:48 | malicious-activity | S1087 AsyncRAT |
| Mail Spammer | Abuseat.org | 2023-09-10 22:18:42 | 2023-09-10 22:18:42 | ||
| Botnet Command and Control Server | Maltiverse | 2021-01-19 00:17:00 | 2021-07-19 06:33:00 | ||
| Malware | Hybrid-Analysis | 2021-06-09 13:30:33 | 2021-06-22 13:46:15 | ||
| Script:SNH | Hybrid-Analysis | 2021-06-04 16:15:14 | 2021-06-09 14:00:20 |
Tags
c2 historicalandnew nanocore rat port:57689 nancrat asyncrat mightcontainvariantsofasyncrat port:1515 port:1414 port:9034 port:6606 port:2455 as6775 port:3371 triageWhois information
- AS name
- AS6775 Andreas Fink
- AS registry
- ripencc
- AS date
- 2007-10-24 00:00:00
- AS CIDR
- 79.134.224.0/19
- CIDR
- 79.134.225.0/25
- Registrant
- Andreas Fink
- Address
- [email protected]
- City
- Basel
- Postal code
- 4000
- Country
- CH — Switzerland 🇨🇭
- Contact email
- [email protected]
- First indexed
- 2021-06-04 16:15:14
- Last updated
- 2026-10-18 16:48:54