23.94.52.3
Classification: Malicious
23.94.52.3 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-12. Network: AS36352 RackNerd LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | FireHOL | 2023-12-17 20:59:27 | 2026-09-12 17:54:20 | anomalous-activity anonymization proxy | |
| Anonymizer | FireHOL | 2025-10-08 15:38:18 | 2026-09-12 16:57:01 | anomalous-activity anonymization | |
| SSH Attacker | Blocklist.de | 2026-04-08 10:02:33 | 2026-09-12 14:03:04 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2025-02-16 16:32:39 | 2026-08-13 17:31:35 | anonymization proxy | |
| Suspicious Host | AbuseIPDB | 2026-05-30 07:26:55 | 2026-05-30 07:26:55 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2026-04-08 23:05:40 | 2026-05-03 14:22:38 | malicious-activity | |
| Mail Spammer | Barracuda | 2023-11-10 08:20:37 | 2025-06-16 08:59:00 | ||
| HTTP Spammer | Sblam | 2023-11-10 08:20:37 | 2023-11-14 02:22:15 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-11-10 08:20:37 | 2023-11-10 08:20:37 |
Tags
bot abuse anonymization ssh bruteforceWhois information
- AS name
- AS36352 RackNerd LLC
- AS registry
- arin
- AS date
- 2013-08-16 00:00:00
- AS CIDR
- 23.94.48.0/21
- CIDR
- 23.94.0.0/15
- Registrant
- RackNerd LLC
- Address
- 325 Delaware Avenue Suite 300
- City
- Atlanta
- State
- GA
- Postal code
- 30303
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2023-11-10 08:20:37
- Last updated
- 2026-09-12 17:54:20
Malicious IPs in the same CIDR
23.94.52.3 23.94.51.47 23.94.51.200 23.94.52.204 23.94.52.142 23.94.51.228 23.94.52.201 23.94.51.236