94.159.81.102

Classification: Malicious

94.159.81.102 is a malicious IP address in Moscow, RU. 66 sightings from AbuseIPDB and Blocklist.de (Bruteforce, Mail Spammer), last seen 2026-11-06.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Blocklist.de 2026-10-29 12:04:30 2026-11-06 12:04:16 attacker malicious-activity
IMAP Attacker Blocklist.de 2026-10-30 11:03:45 2026-11-06 11:03:41 attacker malicious-activity
SSH Attacker Blocklist.de 2026-11-03 14:00:37 2026-11-03 14:00:37 attacker malicious-activity
Bruteforce AbuseIPDB 2026-10-25 09:19:53 2026-10-29 11:51:31 attacker malicious-activity
Hacking AbuseIPDB 2026-10-26 13:10:37 2026-10-29 11:33:25 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-10-25 09:19:53 2026-10-29 11:33:25 attacker malicious-activity
Port Scanner AbuseIPDB 2026-10-27 23:24:38 2026-10-29 11:00:05 malicious-activity reconnaissance
Mail Spammer AbuseIPDB 2026-10-27 14:27:31 2026-10-29 09:49:27 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-10-26 16:46:32 2026-10-28 10:38:17 attacker malicious-activity
Proxy AbuseIPDB 2026-10-27 21:57:32 2026-10-27 21:57:32 anonymization proxy
Malicious Host AbuseIPDB 2026-10-26 23:45:45 2026-10-26 23:45:45 attacker compromised malicious-activity

Tags

mail spam attacker imap pop3 sasl bot ssh bruteforce

Whois information

AS name
AS214356 NetCom-R LLC
Registrant
NetCom-R LLC
City
Moscow
Postal code
144700
Country
RU — Russian Federation 🇷🇺
First indexed
2026-10-29 12:04:30
Last updated
2026-11-06 12:04:16