213.152.161.114
Classification: Malicious
213.152.161.114 is a malicious IP address in Amsterdam, NL. Linked to Nanocore malware. 17 sightings from 5 threat sources, last seen 2026-10-12.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-10-06 17:47:26 | 2026-10-12 17:43:18 | attacker malicious-activity | |
| HTTP bot | Blocklist.de | 2026-10-06 08:00:26 | 2026-10-06 08:00:26 | attacker malicious-activity | |
| VPN | IPWhois.io | 2025-02-23 12:17:14 | 2026-09-18 06:05:21 | anonymization vpn | |
| Parasite SEO | Blocklist.net.ua | 2026-09-15 16:07:21 | 2026-09-15 16:07:21 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-05-01 00:06:53 | 2026-05-15 03:34:39 | anomalous-activity | |
| Nanocore RAT | ThreatFox Abuse.ch | 2025-02-23 12:17:12 | 2025-02-25 11:24:07 | malicious-activity | S0336 NanoCore |
Tags
nanocore rat port:43366 nancrat abuse attacker spam bruteforce botWhois information
- AS name
- AS49453 AirVPN.org
- AS registry
- ripencc
- AS date
- 2010-07-09 00:00:00
- AS CIDR
- 213.152.161.0/24
- Registrant
- AirVPN.org
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2025-02-23 12:17:12
- Last updated
- 2026-10-12 17:43:18
Malicious IPs in the same CIDR
213.152.161.133 213.152.161.35 213.152.161.219 213.152.161.118 213.152.161.30 213.152.161.10 213.152.161.20 213.152.161.114 213.152.161.69 213.152.161.149 213.152.161.229 213.152.161.101 213.152.161.170 213.152.161.5 213.152.161.15 213.152.161.25 213.152.161.211 213.152.161.181 213.152.161.40 213.152.161.165 213.152.161.85