193.142.146.213

Classification: Malicious

193.142.146.213 is a malicious IP address in Amsterdam, NL. Linked to Quasarrat malware. 15 sightings from 9 threat sources, last seen 2026-10-10.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

MITRE ATT&CK associations

Malware families: QUASARRAT (S0262)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2022-06-03 01:16:32 2026-10-10 12:02:06 attacker malicious-activity
HTTP Spammer StopForumSpam.com 2022-07-25 04:38:18 2023-09-19 07:55:13 malicious-activity
Quasar RAT ThreatFox Abuse.ch 2023-09-10 22:23:52 2023-09-12 21:32:56 malicious-activity S0262 QuasarRAT
DDoS attack on site mixlands.xyz Blocklist.net.ua 2022-07-20 03:37:12 2023-06-20 07:51:57 malicious-activity
HTTP Spammer Sblam 2022-07-04 05:48:39 2023-02-07 06:30:19 malicious-activity
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2022-06-03 01:18:07 2023-01-16 09:22:23 anonymization
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2022-06-03 01:16:32 2023-01-16 09:20:07 anonymization
HTTP Spammer Botscout 2022-07-10 00:54:29 2023-01-04 06:02:23 malicious-activity
Mail Spammer Abuseat.org 2022-12-28 05:28:50 2022-12-28 17:53:47
HTTP Attacker Blocklist.de 2022-07-28 01:48:51 2022-10-11 01:56:15 malicious-activity
HTTP bot Blocklist.de 2022-09-24 02:01:10 2022-09-24 02:01:10 malicious-activity
Bruteforce login attacker Blocklist.de 2022-07-28 01:55:00 2022-07-30 01:57:43 malicious-activity

Tags

bot abuse c2 historicalandnew quasarrat port:4782 cinarat yggdrasil tor anonymization apache ddos rfi attacker spam bruteforce login joomla wordpress

Whois information

AS name
AS213438 Colocatel Datacenter
AS registry
ripencc
AS date
2019-10-11 00:00:00
AS CIDR
193.142.146.0/24
CIDR
193.142.146.0/24
Registrant
Colocatel Datacenter
Address
Hauptstr. 31 92361 Berngau GERMANY
City
Amsterdam
Postal code
1012
Country
NL — Netherlands 🇳🇱
Contact email
[email protected], [email protected]
First indexed
2022-06-03 01:16:32
Last updated
2026-10-10 12:02:07

Malicious IPs in the same CIDR

193.142.146.43 193.142.146.239 193.142.146.219 193.142.146.213 193.142.146.201