45.155.249.220
Classification: Malicious
45.155.249.220 is a malicious IP address in Rotterdam, NL. Linked to Ursnif malware. 4 sightings from 3 threat sources (Evilginx, Gozi), last seen 2026-10-13.
MITRE ATT&CK associations
Malware families: URSNIF (S0386)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Evilginx | ThreatFox Abuse.ch | 2026-10-13 19:45:05 | 2026-10-13 20:25:07 | malicious-activity | |
| Gozi | ThreatFox Abuse.ch | 2023-09-27 22:19:24 | 2023-09-27 22:19:24 | malicious-activity | S0386 Ursnif |
| Mail Spammer | Abuseat.org | 2023-08-05 23:15:10 | 2023-08-05 23:15:10 | ||
| Malicious URL | Hybrid-Analysis | 2023-08-05 23:15:05 | 2023-08-05 23:15:05 |
Tags
c2 gozi historicalandnew rat crm gozi crm papras snifula ursnif drb-ra port:8082 evilginx evilgophishWhois information
- AS name
- AS58329 servinga GmbH
- AS registry
- ripencc
- AS date
- 2019-09-19 00:00:00
- AS CIDR
- 45.155.249.0/24
- CIDR
- 45.155.249.0/24
- Registrant
- servinga GmbH
- Address
- Ruesselsheimer Str. 22 60326 Frankfurt GERMANY
- City
- Rotterdam
- Postal code
- 3012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2023-08-05 23:15:05
- Last updated
- 2026-10-13 22:13:29