178.137.16.232
Classification: Malicious
178.137.16.232 is a malicious IP address. Linked to Cobalt Strike malware. Reported by 4 threat sources, last seen 2026-09-03. Network: AS15895 Kyivstar Gsm.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Attacker | Blocklist.de | 2017-11-01 22:08:29 | 2026-09-03 07:01:47 | attacker malicious-activity | |
| Mail Spammer | Blocklist.de | 2017-11-01 17:18:35 | 2026-09-02 12:02:49 | attacker malicious-activity | |
| Cobalt Strike | ThreatFox Abuse.ch | 2026-05-15 08:23:33 | 2026-05-15 08:25:07 | malicious-activity | S0154 Cobalt Strike |
| Mail Spammer | Blocklist.de Mail | 2025-10-06 13:53:09 | 2025-10-08 09:53:04 | malicious-activity | |
| HTTP Attacker | Blocklist.de Apache | 2025-10-06 13:01:31 | 2025-10-08 02:19:37 | malicious-activity |
Tags
mail spam apache ddos rfi attacker port:443 agentemis c2 cobeacon beacon batch wraith-apex cobaltstrikeWhois information
- AS name
- AS15895 Kyivstar Gsm
- AS registry
- ripencc
- AS date
- 2010-03-29 00:00:00
- AS CIDR
- 178.137.0.0/16
- Registrant
- Kyivstar Gsm
- City
- Lviv
- Postal code
- 79008
- Country
- UA — Ukraine 🇺🇦
- First indexed
- 2017-11-01 17:18:35
- Last updated
- 2026-09-03 07:01:48
Malicious IPs in the same CIDR
178.137.16.67 178.137.16.254 178.137.16.249 178.137.16.244 178.137.220.84 178.137.135.53 178.137.16.232 178.137.16.240 178.137.16.245 178.137.16.237 178.137.16.246 178.137.16.250 178.137.16.251 178.137.16.243 178.137.16.247 178.137.16.248 178.137.16.252 178.137.16.253 178.137.16.235 178.137.16.236 178.137.16.239 178.137.16.255 178.137.16.242 178.137.16.238 178.137.16.241