94.180.223.239
Classification: Malicious
94.180.223.239 is a malicious IP address in Kazan, RU. Linked to Zeroaccess malware. 4 sightings from Barracuda and Hybrid-Analysis, last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: ZEROACCESS (S0027)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2020-02-26 09:45:43 | 2026-10-14 22:05:50 | attacker malicious-activity | |
| Gen:Variant.Sirefef | Hybrid-Analysis | 2020-02-26 09:45:38 | 2020-02-26 09:45:38 | S0027 Zeroaccess |
Whois information
- AS name
- AS41668 JSC ER-Telecom Holding Kazan branch
- AS registry
- ripencc
- AS date
- 2008-09-11 00:00:00
- AS CIDR
- 94.180.220.0/22
- CIDR
- 94.180.216.0/21
- Registrant
- JSC ER-Telecom Holding Kazan branch
- Address
- Gvardeyskaya, 54 Kazan', Russia, 420087
- City
- Kazan
- Postal code
- 420111
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2020-02-26 09:45:38
- Last updated
- 2026-10-14 22:05:52