194.165.16.28

Classification: Suspicious

194.165.16.28 is a suspicious IP address. Reported by 4 threat sources, last seen 2021-07-07. Network: AS48721 Flyservers S.A..

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gen:Variant.Midie Hybrid-Analysis 2021-07-07 14:30:37 2021-07-07 14:30:37
Malicious Host CIArmy 2021-04-22 04:18:54 2021-04-27 10:23:42 malicious-activity
Malicious Host HoneyDB 2021-04-22 00:00:00 2021-04-23 00:00:00
Trojan.Ransom.Cerber Hybrid-Analysis 2021-02-08 04:30:17 2021-02-08 04:30:17
Trojan.Generic Hybrid-Analysis 2018-09-09 14:15:57 2018-09-09 14:15:59
Ransom.XW Hybrid-Analysis 2018-09-09 14:15:47 2018-09-09 14:15:47
cerber,ransomware Maltiverse 2017-10-17 06:34:51 2017-10-17 06:34:51

Tags

cerber ransomware

Whois information

AS name
AS48721 Flyservers S.A.
AS registry
ripencc
AS date
2009-01-16 00:00:00
AS CIDR
194.165.16.0/23
Registrant
Flyservers S.A.
City
Kaunas
Postal code
44252
Country
LT — Lithuania 🇱🇹
First indexed
2017-10-17 06:34:51
Last updated
2025-11-11 07:11:22

Malicious IPs in the same CIDR

194.165.16.123 194.165.16.21 194.165.16.122 194.165.16.121 194.165.17.13