45.94.31.93

Classification: Malicious

45.94.31.93 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-28. Network: AS210558 1 Services GmbH.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-04-11 12:12:58 2026-08-28 16:11:53 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-04-30 05:01:53 2026-05-14 05:01:08 malicious-activity
HTTP Attacker Blocklist.de 2026-05-01 03:01:19 2026-05-14 03:01:07 malicious-activity
Malicious Host AbuseIPDB 2025-01-12 23:59:19 2026-05-12 22:33:32 compromised malicious-activity
HTTP Attacker AbuseIPDB 2025-01-12 21:36:03 2026-04-05 00:40:53 malicious-activity
Bruteforce AbuseIPDB 2024-12-13 04:26:51 2026-04-05 00:36:56 malicious-activity
HTTP Scrapper AbuseIPDB 2025-01-12 21:36:03 2026-04-04 20:00:48 anomalous-activity
Hacking AbuseIPDB 2025-01-12 21:10:00 2026-04-04 09:27:20 malicious-activity
DDoS Attacker AbuseIPDB 2026-03-30 00:43:51 2026-04-04 01:15:32 malicious-activity
Port Scanner AbuseIPDB 2024-12-13 23:45:46 2026-04-03 02:50:56 anomalous-activity
SSH Attacker AbuseIPDB 2024-12-13 04:26:51 2026-04-03 00:49:03 malicious-activity
SQL Injection AbuseIPDB 2026-03-30 02:34:55 2026-03-30 02:34:55 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2025-01-14 09:07:43 2025-02-03 07:46:17 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2025-01-14 09:07:26 2025-02-03 07:46:05 malicious-activity
VPN AbuseIPDB 2025-01-14 02:52:02 2025-01-31 09:04:36 anonymization
DDoS attack AbuseIPDB 2025-01-12 21:31:04 2025-01-31 04:52:04 malicious-activity
Malicious Host CIArmy 2025-01-13 23:28:50 2025-01-26 21:28:24 malicious-activity
DNS Compromise AbuseIPDB 2025-01-15 03:29:11 2025-01-16 22:55:59 compromised
Phishing AbuseIPDB 2024-12-10 02:32:02 2025-01-15 11:55:17 malicious-activity
Hook ThreatFox Abuse.ch 2024-12-14 04:17:05 2024-12-16 03:18:48 malicious-activity
Suspicious Host AbuseIPDB 2024-07-18 21:12:15 2024-12-15 23:45:55 anomalous-activity
ERMAC ThreatFox Abuse.ch 2024-12-13 20:17:03 2024-12-15 19:18:42 malicious-activity
SSH Attacker Blocklist.de 2024-12-14 11:37:14 2024-12-15 11:53:33 malicious-activity
SSH Attacker Blocklist.net.ua 2024-12-14 12:49:13 2024-12-14 12:49:13 malicious-activity
Mail Spammer AbuseIPDB 2024-12-10 02:32:02 2024-12-10 02:32:02 malicious-activity
HTTP Spammer StopForumSpam.com 2024-07-29 15:06:09 2024-10-25 03:11:13 malicious-activity

Tags

bot abuse as210558 c2 censys ermac panel services-1337-gmbh port:8080 hookbot port:80 ssh bruteforce attacker login joomla wordpress apache ddos rfi

Whois information

AS name
AS210558 1 Services GmbH
AS registry
ripencc
AS date
2019-07-05 00:00:00
AS CIDR
45.94.31.0/24
Registrant
1 Services GmbH
City
Amsterdam
Postal code
1012 JS
Country
NL — Netherlands 🇳🇱
First indexed
2024-07-19 04:59:11
Last updated
2026-08-28 16:11:53

Malicious IPs in the same CIDR

45.94.31.82 45.94.31.129 45.94.31.63 45.94.31.26 45.94.31.177 45.94.31.166 45.94.31.93 45.94.31.191 45.94.31.83 45.94.31.34 45.94.31.71 45.94.31.68 45.94.31.70 45.94.31.13