213.158.187.42
Classification: Whitelisted
213.158.187.42 is a whitelisted (trusted) IP address listed by Maltiverse. 19 sightings from 12 threat sources, last seen 2026-10-11. Network: AS8452 WE DATA.
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: EMOTET (S0367) PONY (S0453)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-10-11 04:02:39 | 2026-10-11 04:02:39 | benign hosting | |
| Pony | Cybercrime-tracker.net | 2020-04-03 00:00:00 | 2021-05-01 11:07:03 | malicious-activity | S0453 Pony |
| Malware Download | Abuse.ch | 2020-08-03 07:15:07 | 2021-01-27 08:27:11 | malicious-activity | |
| Possible_SMPOWLOADBB4 | Hybrid-Analysis | 2020-08-14 11:15:12 | 2020-08-14 11:15:12 | ||
| Emotet | Abuse.ch | 2020-08-06 19:15:13 | 2020-08-06 19:15:13 | malicious-activity | S0367 Emotet |
| Phishing DocuSign | OpenPhish | 2020-05-30 04:15:44 | 2020-05-30 04:15:44 | ||
| Social Engineering | OpenPhish | 2020-01-27 02:15:19 | 2020-05-30 04:15:44 | malicious-activity | |
| Phishing Bank of America | OpenPhish | 2020-01-27 02:15:19 | 2020-01-27 02:15:19 | ||
| SSH Attacker | Blocklist.de | 2018-09-01 06:58:29 | 2019-11-07 07:12:11 | ||
| Generic.Malware | Hybrid-Analysis | 2019-06-18 11:00:08 | 2019-06-18 11:00:09 | ||
| FTP Attacker | Blocklist.de | 2019-01-20 07:04:53 | 2019-02-02 07:03:24 | ||
| Phishing | Phishtank | 2019-01-24 09:19:09 | 2019-01-24 09:19:09 | ||
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2018-10-06 07:58:26 | 2018-11-12 07:55:25 | ||
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2018-10-06 07:58:25 | 2018-11-11 07:53:49 | ||
| Malicious Host | Alienvault Ip Reputation Database | 2018-10-06 06:42:47 | 2018-11-06 06:28:39 | ||
| Malicious Host | CIArmy | 2018-10-04 07:42:22 | 2018-10-18 07:12:35 | ||
| SIP Attacker | Blocklist.de | 2018-10-12 07:05:11 | 2018-10-12 07:05:11 | ||
| SSH Attacker | Blocklist.net.ua | 2018-10-11 07:10:20 | 2018-10-11 07:10:20 | ||
| SSH Attacker | Nothink.org | 2018-10-07 08:47:37 | 2018-10-07 08:47:37 | ||
| Malicious host | Darklist | 2018-10-07 07:22:58 | 2018-10-07 07:22:58 |
Tags
ssh bruteforce bot abuse sip attacker ftp phishing sector:financial bank of america sector:online services docusign exe emotet dridexWhois information
- AS name
- AS8452 WE DATA
- AS registry
- afrinic
- AS date
- 2001-05-04 00:00:00
- AS CIDR
- 213.158.160.0/19
- CIDR
- 213.158.186.0/23, 213.158.188.0/22
- Registrant
- WE DATA
- Address
- 94 Tahrir Street, Dokki, 12311, Giza, Egypt
- City
- Cairo
- Postal code
- 11518
- Country
- EG — Egypt 🇪🇬
- Contact email
- [email protected]
- First indexed
- 2018-09-01 06:58:29
- Last updated
- 2026-10-11 04:02:40