51.158.202.242
Classification: Malicious
51.158.202.242 is a malicious IP address in Amsterdam, NL. Linked to Njrat malware. 103 sightings from 5 threat sources (Proxy), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2024-06-08 20:39:59 | 2026-10-17 11:13:12 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-09-19 04:25:45 | 2026-09-19 04:25:45 | anonymization vpn | |
| Proxy | FireHOL | 2024-05-05 19:12:45 | 2025-10-04 05:51:31 | anonymization | |
| Proxy | IPWhois.io | 2025-02-20 04:31:04 | 2025-06-16 01:18:32 | anonymization | |
| Suspicious Host | AbuseIPDB | 2024-07-25 22:15:08 | 2024-07-25 22:15:08 | anomalous-activity | |
| NjRAT | ThreatFox Abuse.ch | 2024-05-10 07:18:22 | 2024-05-12 06:20:12 | malicious-activity | S0385 njRAT |
Tags
anonymization njrat rat port:443 bladabindi lime-worm bot abuseWhois information
- AS name
- AS12876 Scaleway - Amsterdam, Netherlands
- AS registry
- ripencc
- AS date
- 1993-09-01 00:00:00
- AS CIDR
- 51.158.128.0/17
- CIDR
- 51.158.128.0/17
- Registrant
- Scaleway - Amsterdam, Netherlands
- Address
- 8 rue de la ville l'eveque 75008 PARIS
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2024-05-05 19:12:45
- Last updated
- 2026-10-17 11:13:12
Malicious IPs in the same CIDR
51.158.253.21 51.158.204.81 51.158.206.86 51.158.202.220 51.158.202.242 51.158.206.103 51.158.202.249 51.158.205.203 51.158.202.236 51.158.205.47 51.158.202.200 51.158.205.244 51.158.206.8 51.158.204.204 51.158.206.12 51.158.206.20 51.158.202.250 51.158.206.87 51.158.214.101 51.158.187.109 51.158.170.105 51.158.160.128 51.158.206.19 51.158.204.60 51.158.206.96