213.152.161.74
Classification: Suspicious
213.152.161.74 is a suspicious IP address in Amsterdam, NL. Linked to Njrat malware. 12 sightings from 9 threat sources (SSH Attacker), last seen 2026-09-18.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-09-18 06:04:43 | 2026-09-18 06:04:43 | anonymization vpn | |
| HTTP Attacker | BadIPs | 2018-06-02 06:25:35 | 2020-12-14 02:06:16 | malicious-activity | |
| Malicious Host | HoneyDB | 2019-07-29 00:00:00 | 2019-10-30 00:00:00 | ||
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2019-07-30 01:36:28 | 2019-08-23 01:41:06 | ||
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2019-07-30 01:36:28 | 2019-08-20 08:06:10 | ||
| SSH Attacker | Blocklist.de | 2019-07-26 07:04:43 | 2019-08-01 07:05:48 | ||
| SSH Attacker | Blocklist.net.ua | 2019-03-19 07:25:25 | 2019-07-27 07:17:38 | ||
| HTTP Spammer | StopForumSpam.com | 2018-12-19 09:51:58 | 2018-12-19 09:51:58 | ||
| Worm.Rebhip | Hybrid-Analysis | 2018-08-09 16:00:58 | 2018-08-09 16:00:58 | ||
| Generic.MSIL.Bladabindi | Hybrid-Analysis | 2018-08-09 13:30:30 | 2018-08-09 14:01:04 | S0385 njRAT | |
| evasive,msil | Maltiverse | 2017-10-18 02:49:39 | 2017-10-18 02:49:39 |
Tags
evasive msil apache attacker 404 bot abuse script kiddies ssh bruteforceWhois information
- AS name
- AS49453 AirVPN.org
- AS registry
- ripencc
- AS date
- 2010-07-09 00:00:00
- AS CIDR
- 213.152.161.0/24
- CIDR
- 213.152.161.0/25, 213.152.161.128/27, 213.152.161.160/28, 213.152.161.176/29, 213.152.161.184/32
- Registrant
- AirVPN.org
- Address
- c/o Studio Papa Via Vecchi, 53 I-06100 PERUGIA Italy
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2017-10-18 02:49:39
- Last updated
- 2026-09-18 06:04:46
Malicious IPs in the same CIDR
213.152.161.133 213.152.161.35 213.152.161.219 213.152.161.118 213.152.161.30 213.152.161.10 213.152.161.20 213.152.161.114 213.152.161.69 213.152.161.149 213.152.161.229 213.152.161.101 213.152.161.170 213.152.161.5 213.152.161.15 213.152.161.25 213.152.161.211 213.152.161.181 213.152.161.40 213.152.161.165 213.152.161.85