193.142.59.169
Classification: Malicious
193.142.59.169 is a malicious IP address. Linked to Lokibot malware. Reported by 9 threat sources, last seen 2026-08-24. Network: AS201409 HOSTSHIELD LTD.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2020-03-31 01:21:32 | 2026-08-24 14:40:45 | attacker malicious-activity | |
| Proxy | FireHOL | 2023-01-05 01:50:22 | 2024-09-03 09:40:46 | anonymization | |
| SSH Attacker | Blocklist.net.ua | 2023-01-03 05:40:03 | 2023-03-18 08:56:41 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2022-12-18 02:25:14 | 2023-03-14 06:01:09 | malicious-activity | |
| Malicious Host | HoneyDB | 2023-01-02 00:00:00 | 2023-03-13 00:00:00 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2023-01-25 02:11:46 | 2023-01-27 02:13:03 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2023-01-25 01:53:10 | 2023-01-27 01:53:45 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2022-12-28 21:13:49 | 2023-01-16 09:09:20 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2022-12-28 21:13:46 | 2023-01-16 09:09:16 | malicious-activity | |
| Brute force passwords using SSH on server S2-DE | Blocklist.net.ua | 2023-01-13 05:57:39 | 2023-01-13 05:57:39 | malicious-activity | |
| Malicious Host | CIArmy | 2023-01-05 06:52:00 | 2023-01-06 09:29:21 | malicious-activity | |
| Lokibot | Cybercrime-tracker.net | 2020-03-31 01:21:31 | 2022-12-28 07:23:56 | malicious-activity | S0447 Lokibot |
| Mail Spammer | Abuseat.org | 2022-12-28 07:23:56 | 2022-12-28 07:23:56 |
Tags
anonymization abuse ssh bruteforce bot attacker login joomla wordpress apache ddos rfiWhois information
- AS name
- AS201409 HOSTSHIELD LTD
- AS registry
- ripencc
- AS date
- 2019-10-11 00:00:00
- AS CIDR
- 193.142.59.0/24
- CIDR
- 193.142.59.0/24
- Registrant
- HOSTSHIELD LTD
- Address
- Kemp House, 160 City Road, London, EC1V 2NX, United Kingdom
- City
- Amsterdam
- Postal code
- 1012 AB
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected], [email protected]
- First indexed
- 2020-03-31 01:21:31
- Last updated
- 2026-08-24 14:40:46
Malicious IPs in the same CIDR
193.142.59.18 193.142.59.74 193.142.59.53 193.142.59.7 193.142.59.169