194.165.16.12

Classification: Suspicious

194.165.16.12 is a suspicious IP address. Reported by 5 threat sources, last seen 2026-02-09. Network: AS48721 Flyservers S.A..

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host HoneyDB 2021-07-08 00:00:00 2026-02-09 00:00:00 malicious-activity
Malicious Host AbuseIPDB 2025-02-23 16:38:22 2025-03-17 06:38:54 compromised malicious-activity
Bruteforce AbuseIPDB 2025-01-03 18:38:02 2025-03-13 01:24:12 malicious-activity
HTTP Attacker AbuseIPDB 2024-12-31 06:46:30 2025-03-12 21:18:02 malicious-activity
SSH Attacker AbuseIPDB 2025-02-23 18:11:43 2025-03-08 06:52:03 malicious-activity
Port Scanner AbuseIPDB 2024-11-26 12:21:11 2025-03-05 22:12:03 anomalous-activity
Hacking AbuseIPDB 2025-01-03 18:38:02 2025-02-24 18:20:23 malicious-activity
Malicious Host CIArmy 2021-07-09 16:58:02 2025-02-24 00:49:22 malicious-activity
DDoS attack AbuseIPDB 2025-02-23 18:30:12 2025-02-23 18:30:12 malicious-activity
Gen:Variant.Midie Hybrid-Analysis 2021-07-07 14:30:35 2021-07-07 14:30:35
Trojan.Ransom.Cerber Hybrid-Analysis 2021-02-08 04:30:13 2021-02-08 04:30:13
Trojan.Generic Hybrid-Analysis 2018-09-09 14:15:58 2018-09-09 14:16:00
Ransom.XW Hybrid-Analysis 2018-09-09 14:15:46 2018-09-09 14:15:47
cerber,ransomware Maltiverse 2017-10-17 06:34:48 2017-10-17 06:34:48

Tags

cerber ransomware

Whois information

AS name
AS48721 Flyservers S.A.
AS registry
ripencc
AS date
2009-01-16 00:00:00
AS CIDR
194.165.16.0/24
Registrant
Flyservers S.A.
City
Kaunas
Postal code
44252
Country
LT — Lithuania 🇱🇹
First indexed
2017-10-17 06:34:48
Last updated
2026-02-09 09:07:20

Malicious IPs in the same CIDR

194.165.16.5 194.165.16.166 194.165.16.162 194.165.16.164 194.165.16.165 194.165.16.161 194.165.16.167 194.165.16.163 194.165.16.11