194.165.16.18

Classification: Suspicious

194.165.16.18 is a suspicious IP address. Reported by 4 threat sources, last seen 2026-06-29. Network: AS48721 Flyservers S.A..

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SSH Attacker AbuseIPDB 2024-11-13 06:30:40 2026-06-29 04:15:41 malicious-activity
Hacking AbuseIPDB 2024-11-01 10:49:51 2026-06-29 04:15:41 malicious-activity
Bruteforce AbuseIPDB 2024-10-22 05:21:06 2026-06-29 04:15:41 malicious-activity
Port Scanner AbuseIPDB 2024-11-01 10:49:51 2026-06-28 00:00:57 anomalous-activity
HTTP Attacker AbuseIPDB 2024-11-13 03:52:34 2026-06-26 03:00:44 malicious-activity
HTTP Scrapper AbuseIPDB 2026-05-30 10:36:22 2026-06-25 16:58:47 anomalous-activity
Mail Spammer AbuseIPDB 2026-05-30 14:53:12 2026-06-25 16:42:44 malicious-activity
Malicious Host AbuseIPDB 2024-11-13 07:54:29 2026-06-25 16:01:52 compromised malicious-activity
Malicious Host HoneyDB 2021-03-08 00:00:00 2026-05-30 00:00:00 malicious-activity
Suspicious Host AbuseIPDB 2024-09-10 14:01:34 2025-08-07 02:02:49 anomalous-activity
DDoS attack AbuseIPDB 2024-10-27 05:51:55 2024-10-27 05:51:55 malicious-activity
Gen:Variant.Midie Hybrid-Analysis 2021-07-07 14:30:36 2021-07-07 14:30:36
Trojan.Ransom.Cerber Hybrid-Analysis 2021-02-08 04:30:14 2021-02-08 04:30:14
Trojan.Generic Hybrid-Analysis 2018-09-09 14:15:57 2018-09-09 14:16:00
Ransom.XW Hybrid-Analysis 2018-09-09 14:15:46 2018-09-09 14:15:47
cerber,ransomware Maltiverse 2017-10-17 06:34:49 2017-10-17 06:34:49

Tags

cerber ransomware

Whois information

AS name
AS48721 Flyservers S.A.
AS registry
ripencc
AS date
2009-01-16 00:00:00
AS CIDR
194.165.16.0/24
Registrant
Flyservers S.A.
City
Kaunas
Postal code
44252
Country
LT — Lithuania 🇱🇹
First indexed
2017-10-17 06:34:49
Last updated
2026-06-29 09:28:42

Malicious IPs in the same CIDR

194.165.16.5 194.165.16.166 194.165.16.162 194.165.16.164 194.165.16.165 194.165.16.161 194.165.16.167 194.165.16.163 194.165.16.11