94.72.158.1

Classification: Malicious

94.72.158.1 is a malicious IP address. Reported by 11 threat sources, last seen 2026-09-03. Network: AS57344 Rokada.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2022-07-14 02:02:39 2026-09-03 16:19:32 attacker malicious-activity
Mail Spammer Blocklist.de 2025-08-19 08:29:39 2026-08-07 12:02:24 attacker malicious-activity
IMAP Attacker Blocklist.de 2025-08-19 08:02:23 2026-08-07 11:02:05 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-07-20 19:50:16 2026-05-23 01:45:05 anomalous-activity
Mail Spammer Barracuda 2020-12-25 05:07:48 2025-05-28 12:42:08
DDoS attack on site kmmk.net.ua Blocklist.net.ua 2024-06-07 07:28:26 2025-05-28 12:42:07 malicious-activity
HTTP Spammer StopForumSpam.com 2020-12-22 23:08:29 2024-07-03 13:30:05 malicious-activity
HTTP Spammer Sblam 2023-04-29 20:18:30 2024-02-29 01:01:45 malicious-activity
Proxy FireHOL 2023-01-01 07:44:40 2023-07-05 06:58:27 anonymization
Anonymizer FireHol 2022-12-29 20:19:49 2022-12-30 07:55:18 anonymization
Mail Spammer Abuseat.org 2020-12-25 05:07:48 2022-12-28 16:10:41
Anonymizer Maltiverse Research Team 2020-12-17 13:53:43 2021-05-23 03:22:01 anonymizer
Anonymizer Maltiverse 2020-12-16 12:18:30 2021-03-03 20:44:11

Tags

abuse anonymization bot anonymizer attacker imap pop3 sasl mail spam

Whois information

AS name
AS57344 Rokada
AS registry
ripencc
AS date
2008-07-04 00:00:00
AS CIDR
94.72.158.0/24
Registrant
Rokada
City
Sofia
Postal code
1000
Country
BG — Bulgaria 🇧🇬
First indexed
2020-12-16 12:18:30
Last updated
2026-09-03 16:23:19

Malicious IPs in the same CIDR

94.72.158.1